{"report_id":"3a10df25-2b85-4474-af29-93984d7ac329","version":0,"status":"done","tags":[],"date":"2026-07-12T18:23:48Z","url":{"schema":"http","addr":"edgeserv.ru","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"title":"OpDemir","dom":{"size":72798,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (837)","md5":"77eb359197447eeb06c4b4dbbc0ed73d","sha1":"992ffa07a6ce3e2cea503b6b7297f3d83f21b6c4","sha256":"a77adddc31bb3cef3ecb73345b4d33f85f97851426f780bf11ca0c0918cfa76b","sha512":"d4cf1face24f49fd897feb7cb84d2f2165d5341e9ca9e2fd8e0fb4007d42c48beeea51d8b64b1facdf6935a00fb055e8141c1dc1d57cc8d2dbeba64a6a95cd9d","ssdeep":"1536:4WCFcNlLHkMRw5IYo4XFC2Qg5JHWadIdhydQipPvb7bkyX4ayq0tIB9:4WCFcfrkrI5Zgv2aShw4alZ","tlshash":"7d63f7c4f3dd15b381be301ecd9f00cd6b7c51b194209c63fc78ed8469e8a5a52a6ba9","dom_hash":"domhash56ae329316d120b44b8ac11a42e14a07","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"edgeserv.ru","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T18:23:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"edgeserv.ru","ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-07-26","domain_rank":0,"first_seen":"2025-12-28T12:24:05.512758Z","last_seen":"2026-07-12T12:52:42.119598Z","alert_count":135,"request_count":27,"received_data":2401448,"sent_data":16144,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"36cd56b9a84d48ab0446aae9fd5acea2","sha1":"2a4008a80bdfc6d014a1fd5fb47989e2f9608ab6","sha256":"e41c09d173ee35ca1a943261ae9c9186621171af6715d2b2c9da06aec66fabc7","sha512":"a960bed3981af965104b41a00414e642ffd915833138f1ffeceecaa88495e6e434811e4b16383e8c2445c942d1b361fab5c123351413b6a823b88f8dd9d2ee8c","ssdeep":"","tlshash":"8701b148634d107821ecf16c6e3b7049b73aeedc35f0f49119d38254766173f96c49a5","size":777,"data":"","first_seen":"2026-06-07T16:27:17.82614Z","last_seen":"2026-07-16T09:55:53.071724Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d311ab3bda465cf5bc9bc567e577857","sha1":"5f134d5190f198fe7474e3ea931219f2f1d802d9","sha256":"e671356a3cfbe49bbf447f0ed6200e5a7af8878c771dce4ce10cf7fe3fb5dddb","sha512":"5d0130c072331610fd30f93c4444245deac0b1bbc0655a5de8d03b92b7d76b6b40f36f0c83f528664922bc6678fb0fe87dca4bb23c8f77cfbf64e32bd0f10565","ssdeep":"","tlshash":"28f008ed564f5d6ef1c401c3d1533804039c7816b5c8cd38c6745f9429f70664e33582","size":630,"data":"","first_seen":"2026-07-12T18:23:51.115857Z","last_seen":"2026-07-12T18:23:51.115857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"61126dfecdaf40d876f20d40f0a589c7","sha1":"e97dad5729333488695c44c56c10ae19cb05193f","sha256":"08ed41607c222dabcb0126cc4a3130d3c5cf6fc2a6cbb4daeb769ff5da26b301","sha512":"42de9949915cd3dd1d95e49cb89861e41bee15eb41b6629ca467f8a61a1ed28520317d68294c386992f235fe93fd747503bb668d927ae21508fb552a557e0974","ssdeep":"","tlshash":"4a510fda8f8e205794ea2139de0f518c8e3d01b5d4007d72bc5cf284a5881ad13bae7a","size":2442,"data":"","first_seen":"2024-05-16T12:51:22Z","last_seen":"2026-07-16T09:55:53.074166Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f24f0a8ea5510ec76dc5b2f0b27071c0","sha1":"e558025d99c7908ddd78d768aff4a5521fefc276","sha256":"8255cc61b4271346b0c8beecc4d5b32f714e22b8cc8e2543ed833f91fe0e35df","sha512":"453d34e60b2c31fee24612ab8d9a2896010efdaec5960fb8191ece50c7d8650213378b71880b09cabe78c5ff82a5af37437a4edb3c5cc02b560fb70d7396da85","ssdeep":"96:s7tUD+ZDTVh1Vd62BUYZHirUifYvK9w7sfG6ADyfnS3D0N+sCcIXAnWrmGF:OfZ9GgUYZCnfRf7GyfnLhCcIXAWrh","tlshash":"d5c10c89d3fea9b6966f201b8d4d4088dfbc53b18050d8e7fc30bdc4699819a9147b77","size":5779,"data":"","first_seen":"2025-06-24T17:06:42.830219Z","last_seen":"2026-07-14T14:54:42.874853Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ef76368eeca38f9780c04504f4cf401","sha1":"61c15b03a9f7620b65aab387e1573ebc5c764f73","sha256":"907bf89657640bae828c0223e3460f060939e0c891f5f56b751c0b282c4b1649","sha512":"fc1d37aa0affcb2852e98a7a003da2ce4b9afb234a88db0c5d621fe68107c82b5b44e5f9ec23fd197a8f9fbf79b5a593584b312c3552dee16f0acd651fab8a7c","ssdeep":"384:k+iXMiPUZrMRw5IYo4OEFpGP3DuWE6nmwI33I:AkrMRw5IYo4OEFE","tlshash":"3082c7d5f3ec16e7d17a305b48cf40cdaa3ca23508148956fcbce9904ce4965a1b9bae","size":18353,"data":"","first_seen":"2023-09-14T08:28:45Z","last_seen":"2026-07-15T09:53:22.800069Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6e7da53378c4f8484f913c3f96964b6","sha1":"bfe30644694050f90be730e61efe3c1928a67e11","sha256":"0f1101f9c0bb73062f48ffdd390044745b486809f1ab702907adfdcaaab3dbb8","sha512":"cdc6139623d768e387ad2a50edc1a52ecdcce5b773d14ba1be18411078271db4f969f26f111ab0cfa6feb5d0607504182e616934b27af789fdfc7611b45a16b7","ssdeep":"384:xwatAI+T96TabTTjbsRSSiZiwQYPYusb/sPBejYMIO:xJaHAS7gwQMYusb/sPgjYMIO","tlshash":"dc62c784f7dc1979062d3218de0e58cd6cbc19935c148866ec2cde8e64d4d7da0baaf9","size":14882,"data":"","first_seen":"2025-01-31T23:17:07.62217Z","last_seen":"2026-07-12T18:23:51.119039Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"319ad3f3ed3ba87eafaa99219b90a24c","sha1":"704525478502c4801fccf69022a784eee79c5309","sha256":"c239a9b39b1ffe5648e89111ca3080631bc7c70e612c99eb65b4165c0244b485","sha512":"298fb6463b1e55097d1b630a817085c92fd4d5253c383f54f5e19aff21eee7d7a1e1d28b95268d225f855313abfa6efe6da0133ecd41bd1042e20e73846bf1fb","ssdeep":"","tlshash":"0890041004cd5134c43114dc345173d03d31f0453005f000c01f410050444114d0dcd4","size":39,"data":"","first_seen":"2026-06-07T16:27:17.828808Z","last_seen":"2026-07-16T09:55:53.077746Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a258ec03988562b2dabdcbdc1c7c717a","sha1":"be3697eec287699c5821583c5769aaa6595fb915","sha256":"f7bdd57e9bd4229f88fd05a87786b224a10b2f8246914ffd93574e5744c1b5f6","sha512":"b58fca66051594e07c3c3e9796182f8b1a2aab36cf6c8cbb3eb88d0ac1519b57e4fea0ca3f8f1d5dd85c8f8641b791eeabef46cccea981198bc94ef6cb5a2ce8","ssdeep":"","tlshash":"9ba002d03c1ecb6277e654856837a2fefbc28488509cf46b49a5058524c49ab5d82275","size":70,"data":"","first_seen":"2026-06-07T16:27:17.829619Z","last_seen":"2026-07-16T09:55:53.078369Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"36cccaf5e6314c7ca19f7357cf7c60f4","sha1":"19dc0276d130b4f405dfc7be7eb66f679d7442b2","sha256":"0849bdfdd19651337a273c0aeb77f78b0f83ea9b73f13959d8091554bdfd12f5","sha512":"4e46961a5af7a7db6680f212bf0a2c40922f22422e38e174632da4d7c67d1b4caa7b3f245cc70d47002fbf77c1fef5b8eebca2b3cea6a48e116537b5793961fb","ssdeep":"192:pV28APIKKBovzRz6zL/ORM/PWQRr/bhbVFQdRgHWm/bg9sJGF/y2LJmhf:pV28ZKKBobW/ORM/PtRr/blVedRu/b51","tlshash":"a3223092f3cd1072a1bee04e99be10c66b3c91b0b471bc26fc64d9c46be961b1751b8c","size":9939,"data":"","first_seen":"2026-06-08T02:46:15.904217Z","last_seen":"2026-07-16T09:55:53.079511Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"94e2abd46d75cdc6037531b2c4dcefa3","sha1":"4fc3925928bba201c794da169dbf81059a972931","sha256":"76a3f41275b5f18da29e736c7d4af3ded89ef8ef87a2d5cf7082b168e28d318c","sha512":"333f6157babdb4a68d8be99770aefba3a849d6acd68d102c284f8a9b441d28cbe2751e0b93563055a053725d98e0f53de5151e612d86a356193050dd710cc212","ssdeep":"384:0DuEeFDYjQFiJybq15c8ASULFyTD5uy0tIkZ71SCy:SeFDanybqw70Ay0tIBD","tlshash":"f572c8e1f39f64b3457e903eda0e00c5ab3e40f1d0119c37fc3a9d8859e998d5296b99","size":16306,"data":"","first_seen":"2026-06-08T05:39:39.006082Z","last_seen":"2026-07-16T09:55:53.080936Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Script.ashx?__Cache=4f24d4e7-45a6-4dc2-9081-d40a3e6bb950","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9dfbe4f63ac405cfb0b8e444ace2975","sha1":"7f38d7bad1e811bbfde2fc24cac533f19e1dd926","sha256":"3c21588012e334b43ee187e14fe36dba03e1aac25052f42440a43cc7ce62f9e8","sha512":"4ecef9146937a57cb6418d242337effe3baf58c5532411f139bd13d26d757098edde7b1aa189bff2cb62e07ee4b850d800453b1131f69d19f2e54721ecaa8438","ssdeep":"3072:7LLadkCwhfQu37VeE7tNUxhd0hvBFW5JA9s:vmdPwh6xhJ","tlshash":"596462056bfe34ba310341a7ec37d8af3aec6558671dc4a3bdbf9219d34945402e239a","size":333345,"data":"","first_seen":"2025-12-28T12:24:09.068457Z","last_seen":"2026-07-12T18:23:51.086672Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=a79042e5-cbf6-4684-8432-c97f9314de21","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2ff9ad01ad903173cf08ade62c9ed0a","sha1":"a8563d26a263260816cfd077246a124004c24353","sha256":"23759a517f5ea556155e844e7bd054f2a3f3191545a5114b207c941947a979f9","sha512":"6844f041226f7f7738ad579de76f24424bc0ccafbb9d8fa081a23ce91651958ef878d98e9e7e1a756ba1c4388fe0beaf96ce17148ae60cbd9862b33e678cb3be","ssdeep":"6144:RITRvTL92lQ3p/Z7i++jri4i/iSj//9RBSdFMKSF:GhpZv","tlshash":"db44c589b5fb22b282b7713d8b6f4009767542431408dc257c6c9b846f6d92da1fafce","size":272489,"data":"","first_seen":"2025-06-28T10:42:34.510032Z","last_seen":"2026-07-16T09:55:53.057238Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:39.198Z","timestamp":1783880619198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250557]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:39 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10e8bd12b8f4543665f7125cf2ab84ad","sha1":"2a5e1d39b261fc5b8f9f5be5726063af70bbe6fd","sha256":"3249a291541c03c4c80c80dbc37f38e7444d682a3838d924bf8aa5b803ab8e4e","sha512":"70f068d36a71b3c40145b41c32010593b72349e66d7ef01d8dcae0bb14f0fc8cd104b9fc5d63d7238eb6db4a994a8e7be8eceb2ff080d315dd3d9eab91114109","ssdeep":"","tlshash":"47c02bcf8a7019fa024cc3344c3b0870c3b0120130b5e8bd0261008803b136d075027b","first_seen":"2026-07-12T18:23:51.085485Z","last_seen":"2026-07-12T18:23:51.085485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Script.ashx?__Cache=4f24d4e7-45a6-4dc2-9081-d40a3e6bb950","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.029Z","timestamp":1783880599029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /Script.ashx?__Cache=4f24d4e7-45a6-4dc2-9081-d40a3e6bb950 HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 50744\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 19:23:19 GMT\r\nvary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":333345,"size_decoded":51174,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (28345), with CRLF line terminators","md5":"f9dfbe4f63ac405cfb0b8e444ace2975","sha1":"7f38d7bad1e811bbfde2fc24cac533f19e1dd926","sha256":"3c21588012e334b43ee187e14fe36dba03e1aac25052f42440a43cc7ce62f9e8","sha512":"4ecef9146937a57cb6418d242337effe3baf58c5532411f139bd13d26d757098edde7b1aa189bff2cb62e07ee4b850d800453b1131f69d19f2e54721ecaa8438","ssdeep":"3072:7LLadkCwhfQu37VeE7tNUxhd0hvBFW5JA9s:vmdPwh6xhJ","tlshash":"596462056bfe34ba310341a7ec37d8af3aec6558671dc4a3bdbf9219d34945402e239a","first_seen":"2025-12-28T12:24:09.068457Z","last_seen":"2026-07-12T18:23:51.086672Z","times_seen":6,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=a79042e5-cbf6-4684-8432-c97f9314de21","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.030Z","timestamp":1783880599030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=a79042e5-cbf6-4684-8432-c97f9314de21 HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 53489\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 19:23:19 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":272489,"size_decoded":53826,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c2ff9ad01ad903173cf08ade62c9ed0a","sha1":"a8563d26a263260816cfd077246a124004c24353","sha256":"23759a517f5ea556155e844e7bd054f2a3f3191545a5114b207c941947a979f9","sha512":"6844f041226f7f7738ad579de76f24424bc0ccafbb9d8fa081a23ce91651958ef878d98e9e7e1a756ba1c4388fe0beaf96ce17148ae60cbd9862b33e678cb3be","ssdeep":"6144:RITRvTL92lQ3p/Z7i++jri4i/iSj//9RBSdFMKSF:GhpZv","tlshash":"db44c589b5fb22b282b7713d8b6f4009767542431408dc257c6c9b846f6d92da1fafce","first_seen":"2025-06-28T10:42:34.510032Z","last_seen":"2026-07-16T09:55:53.057238Z","times_seen":89,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Images/ActivityIndicator.gif","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.423Z","timestamp":1783880599423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /Images/ActivityIndicator.gif HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/App_Themes/DarkTeal/Default.css?__Cache=f4f395a3-eee9-41cb-b369-962733755939\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 27503\r\ncontent-type: image/gif\r\nexpires: Mon, 13 Jul 2026 18:23:19 GMT\r\nlast-modified: Fri, 28 Mar 2025 01:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F7E885C2F00\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":27503,"size_decoded":27866,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c63792b958d231654ab54542fea871db","sha1":"c21cfffa5cbd2a7c94076324fe28c4596df92e0c","sha256":"9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a","sha512":"adf5f76d848c6ecc5c0fc00e51f6ad76d716a3daea6417b533a7a0d00004dd0bba2a7f9c2743fd4a5b83fc4c1ce4178dcc64808254ba110a1774fc0208d78760","ssdeep":"384:ZPEb1PVCcijMhRFO9eiHcptlHdEw6ZCI1wsas2B/uyPs83VRKwaT+zJuXd:ZPAfCLMhzCxKdw1mpJT3bL0auN","tlshash":"61c2f14e883d941e94f546207b212b8c65126eea68dc01fdca9bfa289cdf73cb119dd1","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-16T09:55:53.062758Z","times_seen":639,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:43.370Z","timestamp":1783880623370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250604]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"127b963e772e058e8f592337110cb534","sha1":"bb3a78e284dde6363af1971d6a7122ff19319cd5","sha256":"67ab1cebd32c6d4e3103abee76fbb8b564d2670eb17ca04583143bd83e094385","sha512":"c01879b2eb5cd435b6fb52e131b98dcf5b2e4f00301c97d853d088e37cdb33558dbfcf2fdf6ca80cf27ac17b023bad167dfddca0ba6ed43a485bcbbceef03f90","ssdeep":"","tlshash":"06c02bcf8a301afa014cc3344c7b0860c3b0134130b5e8bd03a1008803b236d075027b","first_seen":"2026-07-12T18:23:51.088691Z","last_seen":"2026-07-12T18:23:51.088691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:25.714Z","timestamp":1783880605714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250364]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:25 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"624f6827e68bac00d56e7c61be0a59b9","sha1":"3e8eae134150d2b825806842c0bc9811bcba792f","sha256":"6da7f58c0812faaea7bb88d010a39641e3cb20ac776f8e230f80880f769eab98","sha512":"115665c6cb557df2a852ba33e03f7d4f6016cd5e8154d29dfe32fce51ce62eca8bbb10830181f937327bad7976bb57287e4704661c17f2f15a309a2199253851","ssdeep":"","tlshash":"a1c02bcf8a3019f6068cc3354c3b0870c3b0220230b5e8bd02a1008803b23af075027a","first_seen":"2026-07-12T18:23:51.089894Z","last_seen":"2026-07-12T18:23:51.089894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:28.913Z","timestamp":1783880608913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250383]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3ac75dfc18b54fe807f531de8d9ba598","sha1":"406e9cefc4eff919c45db68159e3e6256da1c117","sha256":"0245176615226b8a53ef6e3b1d93ceefd47b22b3fd4f6194fd4dc9c7afa5fc84","sha512":"1a7dfb139ad0449d26cf27f3cd8c4b371d33c90984b9cde3c065814b29217aceff1e6da63667c499303c79e2ccab4b4aabd1e06ff39f67e692f3558233046b76","ssdeep":"","tlshash":"e5c02bcf8a3019f7014cc3354c3b0860c3b0120170f6e8fd0261008803b136d075027e","first_seen":"2026-07-12T18:23:51.090963Z","last_seen":"2026-07-12T18:23:51.090963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:36.035Z","timestamp":1783880616035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250420]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"06393c7c75dd7e7788bdab43f378f0ac","sha1":"6e0d85b77a0ada3bbd425f293e42d106d694abe3","sha256":"780030161a9ba6be1960d17990463a6d6a8ffdaf755e30226708d8f1fc1efe96","sha512":"8d185861e4ce659673507691d04a39020c6025bf0baa1cb11f91ac5669244d2c593d3383f460ca6dabfd6d61203021c2ea7cbe957e3b8982f7f9dd77acad1916","ssdeep":"","tlshash":"c5c02bcf8a7019f6014cc3344c3b1c60c3b0125130b5e8bd0261008843b136d079037b","first_seen":"2026-07-12T18:23:51.092084Z","last_seen":"2026-07-12T18:23:51.092084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:38.150Z","timestamp":1783880618150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250551]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f72dc5f10fab8b01d6216bf8a18270be","sha1":"fb0f82e1bedfc78f1ea44f23028a2810316bf649","sha256":"d2a636b709d0e406db69527065051747815eb7cb806d438a6783e74b9dbee052","sha512":"d6f37a046a1af7fb6882681e0251e5b3a190e7992e9a3e67151d55fb17f79801b835d87e02707ee3abfdb32f7fe2229205a4dcc6253a1d43994aaec2b1a08656","ssdeep":"","tlshash":"acc08c8f8a3019f6014883344d6a19a0c3b0120130b5e8aa0261008803a1269075026e","first_seen":"2026-07-12T18:23:51.093212Z","last_seen":"2026-07-12T18:23:51.093212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/App_Themes/DarkTeal/Default.css?__Cache=f4f395a3-eee9-41cb-b369-962733755939","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.034Z","timestamp":1783880599034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?__Cache=f4f395a3-eee9-41cb-b369-962733755939 HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 135696\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 19:23:19 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":512909,"size_decoded":136042,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27376), with CRLF line terminators","md5":"8105b706d208cc31e5637ea497549022","sha1":"02876ed1333f00fecd757eb9988b0916badcc6cc","sha256":"04a118f8895c7133dd80e7302d84f58bdeb800402057512e213618fc76ff229d","sha512":"8b2523b9e646f4eaa5e117da4b3db3efe0fdc8f03ea2dd976a6f78b0ceae736fd6fd9e9b96eaddcfe8737907260e8e8928239f68c2e26f5cbbb08b43201f4781","ssdeep":"3072:g8B+8+a+WGg59pfbE5RvRVwJ9eEQfgNaFH5OtjEirNzpwKOBpUJpbxS:BRUWGg+jvxFH5OlpwKEj","tlshash":"4ab4e826fb8f56e4c7da452a57b19250de2dc0b1164307f1786a98088f8b3943fa73db","first_seen":"2025-06-29T22:01:55.795856Z","last_seen":"2026-07-13T01:54:52.763326Z","times_seen":23,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:26.762Z","timestamp":1783880606762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250374]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"88130a3f8d4e3e4d7b5ad72df98006d8","sha1":"4f699799a917acffbc1d819db8040f1909805976","sha256":"2f61a5f00f46e15a2b5a2c4208ffcb8e4441d1ec41df4fca2a028414c67b692b","sha512":"f1a1b82b39b9e1bb85f468c6ec6a06c74a68659b400829b864152d4b16caa5e9cd7d4cd189780d47d58b29546441771aa7e462e0aa558e5d35d899e5c0fa4b0f","ssdeep":"","tlshash":"c5c02bcf8e3019f7018cc3354c3b0870c3b0120330b5e8bd0261008803b136f075027a","first_seen":"2026-07-12T18:23:51.095431Z","last_seen":"2026-07-12T18:23:51.095431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:27.812Z","timestamp":1783880607812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250378]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:27 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73f8408f3a999b650d3025b79e526144","sha1":"b8fa5bc3afe8ea6e40b7b818059ffc50f02e8d4b","sha256":"48f8fa7af7212aef0fe3a639a128f60c10cd01d893692a900937ca5c48c1ad41","sha512":"a44fad4fa313707598b2e862b4084ef547d172d7185a39f49f885cf2ff54de2a47db169fa606c71a29dfafb647bc422151cac9aac125edefda0e13991d09cb7f","ssdeep":"","tlshash":"54c02bcf8f3019f6014cc3354c3b0860c3b0120170b6e8fd0261008813b136d075027e","first_seen":"2026-07-12T18:23:51.096407Z","last_seen":"2026-07-12T18:23:51.096407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:29.964Z","timestamp":1783880609964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250388]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"927ff315f63d846832bd8fd3bbccb859","sha1":"c4339471d4541cc664c7d5d0224e6a71efb08c8c","sha256":"de04b49905af4758fccff513755d57dc5531d001628ba99b016d07eaee1e320b","sha512":"02a0460245485d8656c44bca7afab5ae7945ff914e57d29388ef8d55a07e2fff5b2679a0345dd8428c80ea41436c73314cc120b8071a6eb000aaacc6e52e11df","ssdeep":"","tlshash":"c9c02bcf9a301af7014cc3348c3b0960c7b0124130f5ecfd0261009843b136d075027a","first_seen":"2026-07-12T18:23:51.097542Z","last_seen":"2026-07-12T18:23:51.097542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5065,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5065,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:40.247Z","timestamp":1783880620247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250560]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffa8011c844a52725d66688f34404e26","sha1":"27b9a5976bef4890e5d93e7e2b3e0a82ecc119f1","sha256":"f41c31555261b074201ef47d0ae573614be13bd98eb15514e4ace5acb23dd04e","sha512":"cb40c35894450d13d2c471ce96ae91bcb0fbee8fac1779ea08f7326e7b0b058853dc6ec7e7f61a66e3b7df47f107a09de163cec9d348d294d4b2e514ddbbd399","ssdeep":"","tlshash":"abc02bcf8e3019f6014cc3344c7b4960c3b0120130b5f8bd02a1008803b136d075037e","first_seen":"2026-07-12T18:23:51.098607Z","last_seen":"2026-07-12T18:23:51.098607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:44.510Z","timestamp":1783880624510,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250724]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T06:40:29.499409Z","times_seen":17331388,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Images/ActionCenter.svg","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.427Z","timestamp":1783880599427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /Images/ActionCenter.svg HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 346\r\ncontent-type: image/svg+xml\r\nexpires: Mon, 13 Jul 2026 18:23:19 GMT\r\nlast-modified: Fri, 28 Mar 2025 01:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F7E885C2F00\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":346,"size_decoded":711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76fa773933e8313a93f5dee59e919d83","sha1":"db438d4795023149a335dfe1c7dcfa1c5f09fee6","sha256":"81fce97d96268840367d7f9119333c8bfccf3a633a68006a87240288a085b0b1","sha512":"797b037627c3f3ebedcb4629ff8019b68d525c707fe969c9b8a7e2d816816009dd8cc470ce6447031f1b8835b05ebc30116a4f41e9c20b34e026e920a89428d7","ssdeep":"","tlshash":"cbe02d11a2ac4d1c7f220310cf7cb2f1023232ae234d124ce85c323c840850eb837ee8","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-07-16T09:55:53.065449Z","times_seen":578,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/FavIcon.axd?__Cache=f93ef9af-2a6d-4e6c-bc98-b67e1e06c223","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.693Z","timestamp":1783880599693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /FavIcon.axd?__Cache=f93ef9af-2a6d-4e6c-bc98-b67e1e06c223 HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 1538\r\ncontent-type: image/vnd.microsoft.icon\r\nexpires: Sun, 12 Jul 2026 19:23:19 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1538,"size_decoded":1859,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 4 bits/pixel","md5":"d9c91e92af6776e767700c6f0c258ec0","sha1":"d083b5b8f069abd44ba4c30d806220375ce3e7ee","sha256":"0b95167676069a859a7535ce88e2b9f82520485d0102400d6d3e38a21f7c1f72","sha512":"06db40e54216ddc7f20de265a4c1b4d6cd054e64e305aa9d1300b9024662dd43a0796715bb95b88680cd6d4b94041159680e8888bb356a007177959bb1b591f0","ssdeep":"","tlshash":"5d3129c98342143cd04d53380c675212fec3914a4a83ba651f4f1a661533b169ff7ad0","first_seen":"2024-12-20T23:35:34.287272Z","last_seen":"2026-07-16T09:55:53.05929Z","times_seen":450,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:20.598Z","timestamp":1783880600598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250237]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:21 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff3cdd59d99a5d7273ce5a46f081236d","sha1":"aeed85eedb73147c08236790f52cfe2877bc94f7","sha256":"4d5112c6269d8ab18981b8b51b6d72dce82dc501f2d7aa1132cdad4c111c0413","sha512":"5ea9de4e19dc729563210aa20c2336ef53f71beda09f44ab698fbc01d3022d01e60282de1236bb1821c636e9a8cd98b75a5b0fdd352c46a12c2c7811ae326391","ssdeep":"","tlshash":"eec08c8f8a3019f6014883344d7a19a0c3b0120170b5e8aa0261008803a12a9075026e","first_seen":"2026-07-12T18:23:51.101545Z","last_seen":"2026-07-12T18:23:51.101545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:23.617Z","timestamp":1783880603617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250349]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6103c95cbac75164854516fa31f7b99f","sha1":"15f05fa0274919ef85fcd085c3a771c2535fe561","sha256":"fe17a4db3d33c000cebb631abc1080b4efa261478728aaa343e7046116aaf96d","sha512":"2f4cada656f31db893d424bb1dee002f049a01406d15b8f334c14663c677002256af56b1253aa2c71f498d3fcb39f8afc37017be6a07967ac68e031c3789ecaa","ssdeep":"","tlshash":"e0c02bcf8a3019f6014cc3354d7b19b0d3b0120130f5e8be0371008813b136d075027e","first_seen":"2026-07-12T18:23:51.106449Z","last_seen":"2026-07-12T18:23:51.106449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:37.085Z","timestamp":1783880617085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250546]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa1558f39c96d1e889cf4d4e1755fdd7","sha1":"5f39215e4c209707475f69b4b3f8da07c9fa1b61","sha256":"0d8e7957282e6ecfb00846d08e16128fdfb1b10ba825b5ba98a35264f689e6e6","sha512":"9b601eb9012af553c0b9bb644f6bad80dc7fe67dc2e6c17ed427f1e008bf302fef35e730ad442ea25c0a5505cc696da728d845fe12809deef4a2d96bc56cb8a4","ssdeep":"","tlshash":"b2c02bcf8a3029f6014cc3344c3b19b0d3b0130130b5e8bd0261008843b136d075127f","first_seen":"2026-07-12T18:23:51.107614Z","last_seen":"2026-07-12T18:23:51.107614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/App_Themes/DarkTeal/Default.css?r=Page.Background\u0026__Cache=1167577","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.421Z","timestamp":1783880599421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?r=Page.Background\u0026__Cache=1167577 HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/App_Themes/DarkTeal/Default.css?__Cache=f4f395a3-eee9-41cb-b369-962733755939\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 1167577\r\ncontent-type: image/png\r\nexpires: Sun, 12 Jul 2026 19:23:19 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1167577,"size_decoded":1167886,"mime_type":"image/png","magic":"PNG image data, 1350 x 832, 8-bit/color RGBA, non-interlaced","md5":"30526db545db88f273bd0fd0b3b97f07","sha1":"dc198f030b25441cd12bbd598163b0df65c8406c","sha256":"bb87e0a2b06d73e78797a269a15561e0600efacd420e677350665382c5e37954","sha512":"47ef1aaff384f33897acb382803700ec1631cd017a3c4e264e55b9848c22245d6529b8db61019628f9f2e952eb02e0cee1b0e51f6674b8d06028bd8afb7902ec","ssdeep":"24576:cO3/js4WC//Dr2yD7ibZKVMqn+NxGGP4pC2IYr9pKMBX:c6s4WC/QboVMdrhdYrzKIX","tlshash":"1f25332e7e221053654de92d379a3c1cdcca3e7462168924bfd81a736650fbcf89b19c","first_seen":"2025-07-27T05:51:54.932579Z","last_seen":"2026-07-14T14:54:42.868774Z","times_seen":162,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Images/Extras.svg","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.425Z","timestamp":1783880599425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /Images/Extras.svg HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 322\r\ncontent-type: image/svg+xml\r\nexpires: Mon, 13 Jul 2026 18:23:19 GMT\r\nlast-modified: Fri, 28 Mar 2025 01:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F7E885C2F00\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":322,"size_decoded":687,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"813c72f0a4741978669871e3800d5279","sha1":"ae5e036f992577f8afca3d99a352f44a217c2c2a","sha256":"8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061","sha512":"bcb4de8eba321bfe1ec092e53c87275143508b2e3298a099ae0bc90449557ae741ad34b36795538c6a10493e9937c36fe2fb230513ff56fac05f2aae5ee8f796","ssdeep":"","tlshash":"3be08c40cf18378c7a5885942b2ce4990493e2abb0ce82d5a1cd1038f74476ae9f3292","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-16T09:55:53.064214Z","times_seen":621,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Images/Applications.svg","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.428Z","timestamp":1783880599428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET /Images/Applications.svg HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 821\r\ncontent-type: image/svg+xml\r\nexpires: Mon, 13 Jul 2026 18:23:19 GMT\r\nlast-modified: Fri, 28 Mar 2025 01:12:54 GMT\r\naccept-ranges: bytes\r\netag: \"1DB9F7E885C2F00\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":821,"size_decoded":1186,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2599340bf60ee89b13e6b91beefe1199","sha1":"4e0babcd7fdcabc1759ed0f130e06972340c5127","sha256":"5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d","sha512":"b22ab922530cbabc1c9a2800218f620060b1be8b69ef67d47a8aba5f3897b1e651d1cf8025e933cfa70cc26fa8e50f8ac0f4318e51d3f876f2cef3f6b278ad19","ssdeep":"","tlshash":"8f018c6882e92a3e61136678d39085c53493f0c2ebb40918e8e4311983b4c43ef6db6f","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-16T09:55:53.066084Z","times_seen":624,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:22.568Z","timestamp":1783880602568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250257]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"665b4f9b54e8e3153643692cc204d2b1","sha1":"609bdde9b34e88b206ad6b5d1812f5ee82cfcdc3","sha256":"ded299b58d5ab0d7c96776d66013077d43b2b77fd30650b009a6a4b64c774976","sha512":"7ce2e184b144dfdae95c1746dfd8d63ca7f621897c13a9a746c08b3851e6e5a937eef52539c80085a115eaa851f14cd33b575f784f8b158520fd56a2172f2474","ssdeep":"","tlshash":"c2c02bdf8a7019f6014cc3354c3f0860c3b0220130b5ecbd026100dc03b136e075027a","first_seen":"2026-07-12T18:23:51.110397Z","last_seen":"2026-07-12T18:23:51.110397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:19.409Z","timestamp":1783880599409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 60\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},0]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c606f2074212cb73fbe0dc4ad2f3c32","sha1":"626e668e17908ea41e0778b0b43e1a5f1e0e7ad0","sha256":"4926e13d6d10e8bd9e677c0818e441f034e6ae1e5f457be319db7055eb082af3","sha512":"647eac0534f02936b41e1ee803bb7fb5e06b797111a8987d30575f2a16c8c9f05d119646545a2d227556eee260bc3adc992607d3cae706b5523bb123cb2b5f4c","ssdeep":"","tlshash":"69c02bcf8b3019f6054cc3344e3b0c60c3b0120170b5ecbe0271008803b136d075027a","first_seen":"2026-07-12T18:23:51.111435Z","last_seen":"2026-07-12T18:23:51.111435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T18:23:18.523Z","timestamp":1783880598523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\ncontent-length: 16354\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\np3p: CP=\"NON CUR OUR STP STA PRE\"\r\ndate: Sun, 12 Jul 2026 18:23:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":72644,"size_decoded":16659,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (647), with CRLF line terminators","md5":"ed59ffb1a3900a987677baf0fbb08e4f","sha1":"ff7f46f358ac9f3cabdec3a56d8ee7a4279b9241","sha256":"77c9d33cde63cc67f3f30f88f51b9401f0b63d77b8bd6166b2ad63e1bf6796d5","sha512":"bcc0d22629310705783c925d847c81f76604557a2a0d1aaf4d2600213767727fea0cf890c442a05f57d9ca727702d3e736a89f7833d94a9ec9dbd82985603758","ssdeep":"1536:z7UMMdDQ+F269S3jOPK19Q0QIpyzcMRVO/D:slS6zVu","tlshash":"4163f8d5b2df11bb85ea331ac5bb4048ee3cd1b050119076fc7cec8869e464993a6bed","first_seen":"2026-07-12T18:23:51.112519Z","last_seen":"2026-07-12T18:23:51.112519Z","times_seen":1,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":48,"connect":39,"send":0,"wait":131,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edgeserv.ru/Services/PageService.ashx/GetLiveData","fqdn":"edgeserv.ru","domain":"edgeserv.ru","tld":"ru"},"ip":{"addr":"95.214.234.238","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://edgeserv.ru/","date":"2026-07-12T18:23:24.664Z","timestamp":1783880604664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgeserv.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 22:06:57 GMT","end":"Mon, 24 Aug 2026 22:06:56 GMT"},"fingerprint":{"sha1":"49:58:7E:86:64:B7:4C:9F:6B:53:21:DE:60:15:31:69:CE:2E:4C:DD","sha256":"76:A9:98:F0:32:69:53:7B:67:51:19:EC:CA:3E:95:C6:64:3F:25:10:65:17:B5:72:26:CD:3D:3A:1E:A1:71:FA"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: edgeserv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: wyUPpwa8+aEMXmc/FdhVad2tvQCAAs5NCheKgZnXYVEBAABShS2ly8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://edgeserv.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edgeserv.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},578250357]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 145\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://edgeserv.ru\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 18:23:24 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dc05180f2e6593a5d4844ef89004a17e","sha1":"948e41bb9dc3e97efaaaa143902cfafb512c4aaf","sha256":"b956950c49f2f512a1fcd2940e3ef0a8a7b621f37a8eb56d0c493b48fdbf75f4","sha512":"3e88bc541a37c544e31108f93a42fdfa2808a6a4d95d42d1f244219f50c33457cca591b99c52f79b64e3149332483911ca5ebda57904b598404ebe14e94536ac","ssdeep":"","tlshash":"fbc02bcfca7019fa034cc3354c3b0860c3b0220130b5e8bd02a1008803b13ad075027a","first_seen":"2026-07-12T18:23:51.114032Z","last_seen":"2026-07-12T18:23:51.114032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"edgeserv.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}