{"report_id":"49588b46-ce05-449e-80ed-a24619c24b79","version":0,"status":"done","tags":[],"date":"2026-07-18T17:17:59Z","url":{"schema":"http","addr":"brave-browser.ru","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"title":"Браузер, в котором главный — пользователь. Удобство — наш приоритет. | Brave","dom":{"size":168022,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11993)","md5":"3499558ab26687a254a87f66bd8c9dff","sha1":"1fc94e64b35dd58d47991eddeedb2f6f5745d638","sha256":"7e101f88626affa5835ef473e46fd0554010f8f7923380524347d03c1ebe7e55","sha512":"d6a04973347fb5afeb3d2971595dde0ae49710ef42822e01d27dad8378eaad85b766ed7d4d29a3c1e5f6ccb81b12b0fcec644442d5b37bfb8d52769daafb9db5","ssdeep":"1536:cZ9O8Q1QQ3QwedeGreZjeCeTHAKo2A/hDRkLqvxX19SIdGgTZ:4sdgvICHAKo2A/FiLqvxfEgTZ","tlshash":"cbf3f831a1f1507b012be09aa551bf19ac8bd367db478fd5726c19aa3fe3d608c1322d","dom_hash":"domhasha85f03917adae0e6184fc65a0dc7066c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"brave-browser.ru","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:17:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cloud-img-cdn.com","ip":{"addr":"172.67.169.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-13","domain_rank":2078510,"first_seen":"2021-01-13T09:21:59Z","last_seen":"2026-07-08T20:52:55.482855Z","alert_count":0,"request_count":1,"received_data":596,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"brave-browser.ru","ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2023-05-09","domain_rank":0,"first_seen":"2021-02-03T17:08:12Z","last_seen":"2024-03-02T01:15:49Z","alert_count":116,"request_count":58,"received_data":2421400,"sent_data":32469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Hugo:0.119.0","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]}]},{"fqdn":"dev-check.brave.com","ip":{"addr":"104.18.12.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":387,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"brave-browser.ru/js/brave-search-widget.961e53a4365debef5ed2bac4c11380ca7396d2eb351e0a9186156a6144abaaef.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc61eadc2676ecf557e2e3e791210760","sha1":"d6153806d90fb43206d8f5b7daf8e1724aab97f6","sha256":"961e53a4365debef5ed2bac4c11380ca7396d2eb351e0a9186156a6144abaaef","sha512":"faea412dc0fdf6339eec72b87e0639dca1a1db98465a7b48663ec05c3cac81a602c37bfb2a9e713b169a48fe5b03557da5ab95a97e6156f512422126eabe8446","ssdeep":"3072:NvnxnNxDnxby4BxxUJZIKZMI8H4enTP4IC:ZnxNxjxm4TxYZX+TPnC","tlshash":"1a045ea1b3d061f693bf4abdd0e7084fa3a810667d09194c6364b4d628f7dd431a7e2e","size":175207,"data":"","first_seen":"2025-07-25T11:55:15.807822Z","last_seen":"2026-07-18T17:22:37.056996Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/3-delay-animations.52117dc3caa2efe969d724cfc404c3360109e18b1ae4bc3d8883cc9b85ecfae4.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826967bf0d032f76bfde6d71b593f4e8","sha1":"f0ed6639529c47a07f6e30c0e7826939035425db","sha256":"ab4323559274d687bead83b044057d2b6c7f60fd3bf78d21c396b8b8d4f20453","sha512":"d87549386040d21ba1a5f73e7d5a103a4b4691446796681d69d4137b55a629ea6da93a9b50bdeb7ddabb7a1cddbf0220aeb9f7c24dcedba766482f4e3e9bc2d9","ssdeep":"","tlshash":"5dc08c5c2100a738019209e024deafc03ab66642928350218528cc04c7609a381a1ee9","size":157,"data":"","first_seen":"2025-07-25T11:55:15.845318Z","last_seen":"2026-07-18T17:22:37.063451Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/5-set-download-urls.99b4a81dc4c9edacb92fa7b5b4ae2a4ee67ca1a40ec01637c5a286f16ffb3db3.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"91464ff8ee055eed2030e573e6bfd026","sha1":"e80c97276ce09ab23cf512fe3a02de6d9c1529c5","sha256":"d06dea11f737da2c047adae9cd893f623dd8c8dfb58e3fd12cf7fa18ac719051","sha512":"f955c1912cfc0d9aa691d81bed3199d49c07342c53faafd1d382ce7e39b199960f641da513879b438770e07572a93be7c92c909217775ed3b75e5b1fd705ca4b","ssdeep":"96:DVM1PIs6MN8FL9x9TqGeXL6ZVAi786M2Q6/UIZLFvLaE/PV4QBlwAh:ONeFrOL6ZuiFM2F8MLFvLTPiQLwAh","tlshash":"4ed1e9ebe215f425032e203e155ea387e233b9c68c4dc445942dcdaa70f2a2b6553f6f","size":6362,"data":"","first_seen":"2026-04-25T07:16:26.966562Z","last_seen":"2026-07-18T17:22:37.064274Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/image-comparison-slider.024d5546db2bcf149a9c680bbc79536c7295c511c6e5afb76f7d563653d0a51e.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6481ad366d6a7cd32ba06755515f1e7","sha1":"8767e80d52a22db2d5bec15eda64a628200b53a6","sha256":"067db4c04d656511ed5705d6964170ad072aea00bf54e3ae75e6fe4b1c6cdece","sha512":"a6c05381c060eebd751d5f89ae5ae435606dca9e565ed3143508043e8b6f7d7d940d0a9656d19b9231ca52c5f439a1b8ed6bcd3818b4c9278fd187c771b8bd75","ssdeep":"","tlshash":"231132d833191073f78f83b26194660231381acef81a4e3d6b389ac64518db987d6e2d","size":1008,"data":"","first_seen":"2025-07-25T11:55:15.834319Z","last_seen":"2026-07-18T17:22:37.046465Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/interstitial.ed54a6886dab8f7e38d1a18b72dd8100d64ccad1cb0094f216a5d86ebb5313f4.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c44396b37c8fa329773e0a64c27f56c","sha1":"3f7830e883971c95487ecd9ac16c0105150c058c","sha256":"b912be9a45e3c57ebbe8142e5e3b6fd80f5ee5d50fd3e198f4eb77d1620e0680","sha512":"3866fe57cd994eaf902001f819300ef6ec414a794e558602a95ebb00df8a9c154577c1da23df976688f439a67a9fcc297373a732f3004911f6336a2c0e0b3c6a","ssdeep":"","tlshash":"4df07d7e9a216a3004af5667a0fde3d92d7511e77d831405141d8c941c7cdd241f5eb5","size":610,"data":"","first_seen":"2025-07-25T11:55:15.837026Z","last_seen":"2026-07-18T17:22:37.039396Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/preserve-query-params.40023c3d4fc7197ee3f7968de9352345f03a8c930cb52ce520eaef790703f46f.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4def21ac26565b1ff7179b865010519","sha1":"881f77936197559e4da46956f79b3bb86ee8272a","sha256":"9ad28dd67231fbb580f2655a4864f97b12ab198d57e242a84d33bb7bb2e9873d","sha512":"2af1486e466a1e16e75df9094bcfddb4c0ca5b010e7d22efbb0aa22bea141d97c4890a91061e839955464ce7ac3f2bbae9658c8ef6b0fd7a1e4df0be7ad5cf4b","ssdeep":"","tlshash":"b4f081b0d51962eb03f901df96e9f3c4f9bd20a264591469720d88c51e58fee02d7e16","size":561,"data":"","first_seen":"2026-02-04T15:57:12.976412Z","last_seen":"2026-07-18T17:22:37.030123Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/download-thankyou.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"251c52ffe718d441a055684f17bb572c","sha1":"1a6367571bc7f5db77ae889ad88ccbc9109d20a8","sha256":"47ccc2cc6313de4d180f9ef0e02f34465f09d24e782ab87db6882329bc1e1502","sha512":"f2098fc113b7a42c43a85120231e18f977a3c57abf5507418d479949aa463a14930d27fd15f8d5d6448bf9aadfe9ee17be8ab13c92ff698b8e1f033cad43ef29","ssdeep":"96:3h2ugLyi0jYOi1/11gyGOqGfRLLeAddJvehJvXe6WnSCba5Yb1ih637LGZG:s+i0cOi1/119GOVZLLeAddJWh1e6WnSa","tlshash":"5f91232ce1a374365073726c639f246c3a3123879606ed01792cab9daf7567dcaa134f","size":4517,"data":"","first_seen":"2026-07-18T17:18:06.716409Z","last_seen":"2026-07-18T17:22:37.065094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa87755278a5886d1918fdbe0a51c63c","sha1":"0b2d435ca8c903841d73fcd6d426d324c52df80b","sha256":"e131cdcc96ffcad01fa12d5790a26b4da9701b1ed82bf4f8e1b43e6f0e20b1d0","sha512":"1bee7cc9a6448de75b569c08e429665d5852de771e9c79b7ebb33dbcb7ce09b4c0e986f93371a61fe849642433bb8211cea7afaf228f1e6b2586823df41f0d14","ssdeep":"","tlshash":"4af0e1f77c894139c7a712753b7392497039253f780fac52b50d1c562f98e6514a791c","size":639,"data":"","first_seen":"2026-07-18T17:18:06.836048Z","last_seen":"2026-07-18T17:22:37.100542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c514e1cf5e48cf854ddb973e6eaf5e67","sha1":"da756a2f40217da225cf38feb22a486b22b23546","sha256":"e904bfa288d0128e74b566495a1153d478a2f1c215a5a41028cf040809c8b2f1","sha512":"fe00344e11b2d9bb6b883490036a6a9dcd862819f1e87391d3cb8fd0d9735a25c7f33d25c60d91332fc58b318f163b3f0ec76cece8ea9f267039b660004b9dd3","ssdeep":"48:quqKq+lNznOe3CYnr9cLDCDKd3Gd7GbEqkdSO2Uj4Nczf8fUwfbw:qBKdlNznqYnr9cLuG1GQkwO2I2mf8vfk","tlshash":"a2a1caaf64e7a1164b07b03ea59f6618b076504318195858bc7c1b61efba239c4f3bcb","size":4642,"data":"","first_seen":"2026-07-18T17:18:06.838305Z","last_seen":"2026-07-18T17:22:37.101701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad4b47f77d6a7df19736b01a6e983c21","sha1":"6ecbf1190a7f8be1bcd5c4374537219a201b2bd9","sha256":"63034aec67dd82a2047521525a51aeffce790e2fd0ec20299f52c1c27151a613","sha512":"efca9bb11d6733ffa72a4fd76ec10bd6b2518b6c5021221d79ede122dcb821698f5325968a52dd95352539ed2d3aa2cae4f918b9045882f48b0c13d641768757","ssdeep":"","tlshash":"d481ef68a2b560a503cf623f59df8999733118c7280a1474bdbc0f84afe5a3455e27e2","size":3896,"data":"","first_seen":"2026-07-18T17:18:06.849993Z","last_seen":"2026-07-18T17:22:37.103147Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d3c4dc386168cb3ff9ec44a9d5f20c7","sha1":"adc4138dda83472e990bcb6f6db6b0749266bce6","sha256":"42f69732f00cd773232da1feb912673d9f96f1d98c16f40ab8a93b02ea857f76","sha512":"e2b15854741d81e4f12810381452cb98a4d977f0f6fead815dcdbfd5035f84e3262ea0729b2c7a05e37b7e165610484581fd70f0ce903d2cc84a8fc9ca255f3b","ssdeep":"","tlshash":"2321ef351a70603e0707109aac9fbe40ba36041b2d820f667e6cc7544f9977759f36e8","size":1379,"data":"","first_seen":"2026-07-18T17:18:06.852569Z","last_seen":"2026-07-18T17:22:37.104152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f248f67f69e603b93d65b2716db97992","sha1":"128a5b9bdda2284eb3e15253729f654bb91c5fb1","sha256":"b518661fb1536aa2133e58ef9ac15bf9c68f1ae8ac8a8249335c1bf92d7205e8","sha512":"1e1c070f082aa0e2b03db225d7fbf33d50a2a5712922ec4ca33a2bfcdc9b5fbc697cd70be234a8bc1c2b6c16e26defa27275bb93a74867b50229f81644c3691e","ssdeep":"","tlshash":"28316e12e5a6012d266b11a915eb73fc3e3d500ba3058c793d2d77201f57bd744a1bd8","size":1619,"data":"","first_seen":"2026-07-18T17:18:06.855244Z","last_seen":"2026-07-18T17:22:37.105694Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/dev.730af03ea8ceb4d931331d7b8b5624ffabb540a8ce32625c718017c593720e4d.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"68bdf038eb12946cdb0b16c098b73be0","sha1":"2e48cda201255466a3cc04ec46f41ebf749c1f5f","sha256":"ce9aecfd452a74e197605b1eff799e36235e38980981d97bc516121387f4de87","sha512":"cfd40375ae6a66c91166bad6b8c14c0ab4dba189a255cfe91988e5ac977f52823a0d9dc7e77adef263a48ce6e93424983831b496cf65feed011b85a1c9229268","ssdeep":"","tlshash":"77f09eee882cc3699e2d004561832b88e43f407b2a62d89196c1a627205474b92427dc","size":642,"data":"","first_seen":"2025-07-25T11:55:15.82013Z","last_seen":"2026-07-18T17:22:37.02853Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/js/ie-shims.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"86199c72f83f9867e2b52a6b73152f73","sha1":"81de47c012f73ada5b852e49d5d72f910535fcb5","sha256":"1051d68d0447d0a89b73d91368569845a6d4cdb7c34a58fdf5daf9cb7a6d520d","sha512":"c51846af9179ecae5c90d8e117b8b7225061ce603cfa63c66cf9ef8bb89ce22c93d3b8cc942ec4fab0a7fb9a07db2eeb0d06d1e8467b0545ec63c8a85ae1e862","ssdeep":"","tlshash":"7a3140e63796f9f1038371b2a05f7408f37324ea949a9441d1b4d4c2bd348d96ab3d6a","size":1676,"data":"","first_seen":"2023-03-07T22:08:00Z","last_seen":"2026-07-18T17:22:37.089614Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/4-details-summary-animation.2b2cb643f1890d8e7d4a6ec3c0d85e5982aa58a156b2362b0d84b09841668db5.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c066fb672ad5a28ea4834afadf1dc7e","sha1":"d36fde456fa3f39ab96c9d1e3d6050087ee19235","sha256":"a806f7cd1969f29b525fb6eec4b86641845d68884ddc88d24a7cfa2c003c7988","sha512":"be537dbe13262a0ffb32377419ab8f67755237f8039149e06d704815659861a6bce9199161f7994d56925caa31d032b83a261fdbe6d080a422576b43bd8146e1","ssdeep":"","tlshash":"c14111b5e1258e7243eec6b7c1690f61b22820e51019683d7b7ca8de9594d0a37d1734","size":2175,"data":"","first_seen":"2025-07-25T11:55:15.856514Z","last_seen":"2026-07-18T17:22:37.068249Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/navigation.890ae2d6630cee6455bb25713ca69f030d96b11d61b9b252391e00839a312217.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"56d4f7767b3a899724c7bc8814692a9d","sha1":"92a08a0f71ac1b4b678e4f4e11a7f027e9975d81","sha256":"c59affb208fb1e26afdfd925b16512b57304897eb61ca6c31ed760ab7ae0bb38","sha512":"9663faeb9bc855c0d3c487c9755c6a670e2375359d5b8d2eefb878b804fb17039457f2e7fc7ba86e70df57b6595c7c7bfc4b1df8c477db9cd083a21811a99791","ssdeep":"96:R2JdJyqyDNTHZ4A1/Wa04PrVNvA2fsbdHqcNx+y/y8t:2dJlO5FJ0erHvvo+y/y8t","tlshash":"a1c1938879f0b5721bee64e3f0afd842bebe5095d40d54a1403cc2d22db8a1411e7aae","size":6035,"data":"","first_seen":"2026-07-18T17:18:06.697029Z","last_seen":"2026-07-18T17:22:37.070537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/tabs.4422877367929b6c6bcf6f974a9d2943058b06cf9af5f3a28847e83e24f56f9e.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"14fe66804c61e62359919b57277e537e","sha1":"c710bde6a06b44edb4c385d14507ab433781dfa5","sha256":"4422877367929b6c6bcf6f974a9d2943058b06cf9af5f3a28847e83e24f56f9e","sha512":"fb2bae05983999c876c49023ebf5a395e48e22a4fee45defd76b17b539cbd824c2adae9505abe13f415cb5b16e84bb60fc0a0a52d587e680b6152bec727372b8","ssdeep":"","tlshash":"47517b55b1f6227315a3a4f25e1b1289693121573084dd893dfc97c21fea82418f6bef","size":3022,"data":"","first_seen":"2026-03-16T01:42:13.245538Z","last_seen":"2026-07-18T17:22:37.077397Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/localization.eac6ebe6b760650c196b5ce8eb0033649e2db78efb2b4b36d8516f384c7a1114.min.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"79dbfacf84ebe15b9fab8c7cefe41ea5","sha1":"55a03edeab0602b165f9168c47a6ae1cad6897ca","sha256":"fba516f76237bddcec06444b6417105a3b5a828fac66d0e34dc5a53517c2c1e9","sha512":"947425e10398d0dd9e92a4482fb76f8e30d4fcd5d602f812db9ed3f36fe0fce615d0e283d25ec6457588c088480c11663351c1ec77c0d2728026fd9202d4debb","ssdeep":"","tlshash":"cf4166957621727603d720db54eb6258a7364496b81a9485311f8c942caee6f03f3ea8","size":2260,"data":"","first_seen":"2026-03-16T01:42:13.222081Z","last_seen":"2026-07-18T17:22:37.045698Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/lottie-player.7781cf8d05007e333cb7f638e2b315be2f4cd3e04ba967c6c319c82ed568931e.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"89396baff16dd9b773a2aa1ba098e1cf","sha1":"e8866a15095f66efea6a5b83a84adf0b57a44ace","sha256":"7781cf8d05007e333cb7f638e2b315be2f4cd3e04ba967c6c319c82ed568931e","sha512":"9ec9e187d768fb04c3322bab0b9c17beb88a59a6aa9f4ef35bc9129068fcfa2c03550d887929d00f87e31c517bb641829c39ff952ac559b88ec860d6f5ecd461","ssdeep":"3072:/twgrtbW/U8rF5ybjj42/jZoI/xMhZtSVOun/cXOaUy1:/twgknrF5ybjj42/jZjMXQVj8v","tlshash":"61f3e76a7250203646d241a9807f194b6736681e7849c86cb76cf4dfac7ce8d31bef78","size":172677,"data":"","first_seen":"2026-04-28T18:46:49.969397Z","last_seen":"2026-07-18T17:22:37.062615Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/set-platform.a4b5c2cf36a94e5497142976e089e61ddf9a6d0c32d31f609e1372832c5f1d32.min.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dad4ef530ff555ccb6aa06fc0ab87117","sha1":"61b4fb8ee2add94650e950f14dd5b2db4f288508","sha256":"4c796d9fb4feb1d1e4044eceedc5c7f63d3a07d16d66f6cd58f523fd00330efd","sha512":"dbcf32e45c10a38c21f4b76274488a97e4a9e1119b7b71e0b0ace3353d1fd26d09013a5e86202f22ad515884007d5d65f44493b80c292edc82d59842ffba3e97","ssdeep":"","tlshash":"8f31092c51a1a03e00bf39a761db47c77a3249bbfc86009140acee4c69629f103a6fd9","size":1600,"data":"","first_seen":"2025-07-25T11:55:15.840995Z","last_seen":"2026-07-18T17:22:37.056227Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/card-carousel.717a7c5436ba434620e1d4b02317402f5169f01926dff3a2871663404390d1d8.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d60f36d16fdf3762f95629a5703c3e3","sha1":"9cc77117b3ee13a330f011e33261e465b14a4bde","sha256":"717a7c5436ba434620e1d4b02317402f5169f01926dff3a2871663404390d1d8","sha512":"7e0305eb5c07f907a5e542f4d0ad4d5aca38298a84211a05696d8e48ddad949647876804eb6a2c8186641da4ad6c7b6aefefee83b3929638b961f7a87e3eadd5","ssdeep":"","tlshash":"3231cca4f2285039b1afc24f848093da766bf46ef108001e19b04eaf1adcfc511a977e","size":1552,"data":"","first_seen":"2026-03-16T01:42:13.233388Z","last_seen":"2026-07-18T17:22:37.099817Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"brave-browser.ru/js/card-carousel.717a7c5436ba434620e1d4b02317402f5169f01926dff3a2871663404390d1d8.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.834Z","timestamp":1784395050834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/card-carousel.717a7c5436ba434620e1d4b02317402f5169f01926dff3a2871663404390d1d8.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1552\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-610\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1552,"size_decoded":1821,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1551)","md5":"8d60f36d16fdf3762f95629a5703c3e3","sha1":"9cc77117b3ee13a330f011e33261e465b14a4bde","sha256":"717a7c5436ba434620e1d4b02317402f5169f01926dff3a2871663404390d1d8","sha512":"7e0305eb5c07f907a5e542f4d0ad4d5aca38298a84211a05696d8e48ddad949647876804eb6a2c8186641da4ad6c7b6aefefee83b3929638b961f7a87e3eadd5","ssdeep":"","tlshash":"3231cca4f2285039b1afc24f848093da766bf46ef108001e19b04eaf1adcfc511a977e","first_seen":"2026-03-16T01:42:13.233388Z","last_seen":"2026-07-18T17:22:37.099817Z","times_seen":89,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/navigation.890ae2d6630cee6455bb25713ca69f030d96b11d61b9b252391e00839a312217.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.980Z","timestamp":1784395050980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/navigation.890ae2d6630cee6455bb25713ca69f030d96b11d61b9b252391e00839a312217.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6035\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-1793\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6035,"size_decoded":6305,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6034)","md5":"56d4f7767b3a899724c7bc8814692a9d","sha1":"92a08a0f71ac1b4b678e4f4e11a7f027e9975d81","sha256":"c59affb208fb1e26afdfd925b16512b57304897eb61ca6c31ed760ab7ae0bb38","sha512":"9663faeb9bc855c0d3c487c9755c6a670e2375359d5b8d2eefb878b804fb17039457f2e7fc7ba86e70df57b6595c7c7bfc4b1df8c477db9cd083a21811a99791","ssdeep":"96:R2JdJyqyDNTHZ4A1/Wa04PrVNvA2fsbdHqcNx+y/y8t:2dJlO5FJ0erHvvo+y/y8t","tlshash":"a1c1938879f0b5721bee64e3f0afd842bebe5095d40d54a1403cc2d22db8a1411e7aae","first_seen":"2026-07-18T17:18:06.697029Z","last_seen":"2026-07-18T17:22:37.070537Z","times_seen":2,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/search.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.513Z","timestamp":1784395052513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/search.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 323\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-143\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":323,"size_decoded":582,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e33c486084d4eaf0fde79a76df327e3c","sha1":"9f026dd4449400ea05f051ba42af98798b99d224","sha256":"b0ade227963bbb90fed792a5d925948ab443ecb5250981bc6c2553066bfc011c","sha512":"743ab81cf94221653d686ed3d852c207e29c337746ced174b175a625401af6630ba3053af979bd7e00fb5a13a7732693c1c0e820ea9fc1702a0edcfde8072c68","ssdeep":"","tlshash":"32e07da8c90c4e5c08c78d3cc62834d0571e30f53b650cf4c78c2a3034d25d7808a5e0","first_seen":"2026-04-15T01:57:20.03692Z","last_seen":"2026-07-18T17:22:37.066606Z","times_seen":86,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.401Z","timestamp":1784395050401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 410509\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-6438d\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":410509,"size_decoded":410768,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"01e2c60ad186dc90c52c35416d29b211","sha1":"c5a82aba25a4f7e6f6e1ad9857bf5aa48a132a82","sha256":"4e2b6cd6b80145e236b437b75d7446f40090c8fb845d975c323a7d4b06449ce4","sha512":"758afe7f0bc8178cdbbe2b8b76746c3a2f1b178aa7a277ab20fee1c2d99f12908ffc75e0d0d03d2960946faccf18d6a6097658e41aa805367694104d80cba59e","ssdeep":"6144:B+W6Ucqa87xLOnh3QJ7/+Ixh28uPSTEGg/FxpFsQZwWJpX1xvesRnvRpdo9kf/g0:X7UJt","tlshash":"3e947548f6618027ae37847eda88e559b3083cc49eac47bff68255147ccfab30575e29","first_seen":"2026-07-18T17:18:06.703435Z","last_seen":"2026-07-18T17:22:37.054887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":1216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/set-platform.a4b5c2cf36a94e5497142976e089e61ddf9a6d0c32d31f609e1372832c5f1d32.min.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.406Z","timestamp":1784395050406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/set-platform.a4b5c2cf36a94e5497142976e089e61ddf9a6d0c32d31f609e1372832c5f1d32.min.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1600\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-640\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1600,"size_decoded":1869,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1600), with no line terminators","md5":"dad4ef530ff555ccb6aa06fc0ab87117","sha1":"61b4fb8ee2add94650e950f14dd5b2db4f288508","sha256":"4c796d9fb4feb1d1e4044eceedc5c7f63d3a07d16d66f6cd58f523fd00330efd","sha512":"dbcf32e45c10a38c21f4b76274488a97e4a9e1119b7b71e0b0ace3353d1fd26d09013a5e86202f22ad515884007d5d65f44493b80c292edc82d59842ffba3e97","ssdeep":"","tlshash":"8f31092c51a1a03e00bf39a761db47c77a3249bbfc86009140acee4c69629f103a6fd9","first_seen":"2025-07-25T11:55:15.840995Z","last_seen":"2026-07-18T17:22:37.056227Z","times_seen":94,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/images/brave-logo-sans-text.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.419Z","timestamp":1784395050419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/images/brave-logo-sans-text.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4084\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-ff4\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4084,"size_decoded":4344,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b484903b3f076832845b6b9063ed547","sha1":"4b9c9cec580df917648aca47e1f41b366571500d","sha256":"2530f80fdf2144b62f96953a81c6988c9c31a6cc7c9de72e069079485817cbe7","sha512":"05973756b91b40fffb47eaa9e03845fd54c17193b0e4dd13de4944a36a2a7054c6e0d0e9c76704a7a8662ff6fc7aeac9d65e7e4173233423e20052490f30c464","ssdeep":"","tlshash":"558172d68330d695a4ced97cef23b995a05ef07e6aa385d0d29dfb1d286b8c2f504840","first_seen":"2024-08-31T08:30:27.709826Z","last_seen":"2026-07-18T17:22:37.051692Z","times_seen":120,"resource_available":false,"data":null}},"time_used":1553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":1010,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/preserve-query-params.40023c3d4fc7197ee3f7968de9352345f03a8c930cb52ce520eaef790703f46f.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.981Z","timestamp":1784395050981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/preserve-query-params.40023c3d4fc7197ee3f7968de9352345f03a8c930cb52ce520eaef790703f46f.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 561\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-231\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":561,"size_decoded":829,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (560)","md5":"d4def21ac26565b1ff7179b865010519","sha1":"881f77936197559e4da46956f79b3bb86ee8272a","sha256":"9ad28dd67231fbb580f2655a4864f97b12ab198d57e242a84d33bb7bb2e9873d","sha512":"2af1486e466a1e16e75df9094bcfddb4c0ca5b010e7d22efbb0aa22bea141d97c4890a91061e839955464ce7ac3f2bbae9658c8ef6b0fd7a1e4df0be7ad5cf4b","ssdeep":"","tlshash":"b4f081b0d51962eb03f901df96e9f3c4f9bd20a264591469720d88c51e58fee02d7e16","first_seen":"2026-02-04T15:57:12.976412Z","last_seen":"2026-07-18T17:22:37.030123Z","times_seen":90,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/tabs.4422877367929b6c6bcf6f974a9d2943058b06cf9af5f3a28847e83e24f56f9e.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.982Z","timestamp":1784395050982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/tabs.4422877367929b6c6bcf6f974a9d2943058b06cf9af5f3a28847e83e24f56f9e.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3022\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-bce\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3022,"size_decoded":3291,"mime_type":"application/javascript","magic":"ASCII text","md5":"14fe66804c61e62359919b57277e537e","sha1":"c710bde6a06b44edb4c385d14507ab433781dfa5","sha256":"4422877367929b6c6bcf6f974a9d2943058b06cf9af5f3a28847e83e24f56f9e","sha512":"fb2bae05983999c876c49023ebf5a395e48e22a4fee45defd76b17b539cbd824c2adae9505abe13f415cb5b16e84bb60fc0a0a52d587e680b6152bec727372b8","ssdeep":"","tlshash":"47517b55b1f6227315a3a4f25e1b1289693121573084dd893dfc97c21fea82418f6bef","first_seen":"2026-03-16T01:42:13.245538Z","last_seen":"2026-07-18T17:22:37.077397Z","times_seen":89,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/download-thankyou.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.983Z","timestamp":1784395050983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/download-thankyou.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4517\r\nlast-modified: Sat, 11 Jul 2026 09:54:13 GMT\r\netag: \"6a5212c5-11a5\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4517,"size_decoded":4787,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"251c52ffe718d441a055684f17bb572c","sha1":"1a6367571bc7f5db77ae889ad88ccbc9109d20a8","sha256":"47ccc2cc6313de4d180f9ef0e02f34465f09d24e782ab87db6882329bc1e1502","sha512":"f2098fc113b7a42c43a85120231e18f977a3c57abf5507418d479949aa463a14930d27fd15f8d5d6448bf9aadfe9ee17be8ab13c92ff698b8e1f033cad43ef29","ssdeep":"96:3h2ugLyi0jYOi1/11gyGOqGfRLLeAddJvehJvXe6WnSCba5Yb1ih637LGZG:s+i0cOi1/119GOVZLLeAddJWh1e6WnSa","tlshash":"5f91232ce1a374365073726c639f246c3a3123879606ed01792cab9daf7567dcaa134f","first_seen":"2026-07-18T17:18:06.716409Z","last_seen":"2026-07-18T17:22:37.065094Z","times_seen":2,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/home-assets/lottie/web-without-annoyances.json","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.531Z","timestamp":1784395052531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /home-assets/lottie/web-without-annoyances.json HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: application/json\r\ncontent-length: 970428\r\nlast-modified: Thu, 13 Jun 2024 17:43:45 GMT\r\netag: \"666b2fd1-ecebc\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":970428,"size_decoded":970695,"mime_type":"application/json","magic":"JSON text data","md5":"ab90a99d53ec25bfadb1b1c2fb96be7e","sha1":"c7714fc60801a136f32b2ca61a24dbe681e2f220","sha256":"a21696eabf78579c852d0ba6eb39eea022a46c2156596af91200a8d1f578cadb","sha512":"046adf5f84f7036cbb6c1cc50641ad6f50683c5d280c99dc2734ce6b011608e600e6a74dff24ffbd8145944c6e62a9b449cb19c098959d5925e606d304da8314","ssdeep":"12288:OVWVkJ0V/JWVpKOnu4pZYRUy0EcAAJcV6VdzrBDXGuNR0L0m8vJ9/FpVONozoz8M:BHkYuI","tlshash":"31259e85837102bceb5919c0c68335d59fc4c8676ec649bdeab96d244bb9eee2301f07","first_seen":"2024-08-30T19:32:08Z","last_seen":"2026-07-18T17:22:37.050533Z","times_seen":97,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/images/cropped-brave_appicon_release-192x192.png","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.975Z","timestamp":1784395052975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/images/cropped-brave_appicon_release-192x192.png HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3263\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-cbf\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3263,"size_decoded":3519,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"a7bff25fc8dfcff9b91ebcb7746335a7","sha1":"dd8efb5682f2a66102e0630a89985a9288fa1b85","sha256":"610ac468a1fad75de47343913e50f35ededde3ab695c8c4abfd09c91a43e8930","sha512":"fc2e424243e2b175c23dd52b370c92905afb3b4d472b6a94a1a187b542a77c8110bad249c2bf04359b03cdb5789b6069b0f602a417629f27c3cade978712f4bf","ssdeep":"","tlshash":"b7615c7c313005f9a3f925a1dd1515ec755e16387a076d13f132ec56b450ae3f45a6c8","first_seen":"2026-07-18T17:18:06.72004Z","last_seen":"2026-07-18T17:22:37.043116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.405Z","timestamp":1784395050405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 6555\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-199b\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6555,"size_decoded":6811,"mime_type":"text/css","magic":"ASCII text, with very long lines (6555), with no line terminators","md5":"03921a33fe7a024a157f0b166995464f","sha1":"42b6138723814a7ac970137a7fd100124c6bafcd","sha256":"dbd60f69a5bfd1a7aeed022af989998984e6a7c1932e7e4082db040b056e0775","sha512":"0456c528e2041a0d2ea217c05bd719e42c792d3ea77c320c644d06d3c906ac685d1952541241133a89975251737682cf3b25af4ff89fe18a02f91b69c7ba8da5","ssdeep":"96:V4flOcaqIDBOazOa3Ifhqh2OaqOaoLchJhVq:+OoIDBO6OLhqh2OdOEhJhVq","tlshash":"3dd14a24441bbe09d2a3cd1231ce6a473c28947172e973538d6d1ea58deec7b93b4b39","first_seen":"2026-07-18T17:18:06.721476Z","last_seen":"2026-07-18T17:22:37.093249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/brave-search-widget.961e53a4365debef5ed2bac4c11380ca7396d2eb351e0a9186156a6144abaaef.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.512Z","timestamp":1784395050512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/brave-search-widget.961e53a4365debef5ed2bac4c11380ca7396d2eb351e0a9186156a6144abaaef.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 175207\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-2ac67\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175207,"size_decoded":175480,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36731)","md5":"dc61eadc2676ecf557e2e3e791210760","sha1":"d6153806d90fb43206d8f5b7daf8e1724aab97f6","sha256":"961e53a4365debef5ed2bac4c11380ca7396d2eb351e0a9186156a6144abaaef","sha512":"faea412dc0fdf6339eec72b87e0639dca1a1db98465a7b48663ec05c3cac81a602c37bfb2a9e713b169a48fe5b03557da5ab95a97e6156f512422126eabe8446","ssdeep":"3072:NvnxnNxDnxby4BxxUJZIKZMI8H4enTP4IC:ZnxNxjxm4TxYZX+TPnC","tlshash":"1a045ea1b3d061f693bf4abdd0e7084fa3a810667d09194c6364b4d628f7dd431a7e2e","first_seen":"2025-07-25T11:55:15.807822Z","last_seen":"2026-07-18T17:22:37.056996Z","times_seen":94,"resource_available":true,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":797,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/4-details-summary-animation.2b2cb643f1890d8e7d4a6ec3c0d85e5982aa58a156b2362b0d84b09841668db5.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.971Z","timestamp":1784395050971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/4-details-summary-animation.2b2cb643f1890d8e7d4a6ec3c0d85e5982aa58a156b2362b0d84b09841668db5.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2175\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-87f\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2175,"size_decoded":2444,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2174)","md5":"3c066fb672ad5a28ea4834afadf1dc7e","sha1":"d36fde456fa3f39ab96c9d1e3d6050087ee19235","sha256":"a806f7cd1969f29b525fb6eec4b86641845d68884ddc88d24a7cfa2c003c7988","sha512":"be537dbe13262a0ffb32377419ab8f67755237f8039149e06d704815659861a6bce9199161f7994d56925caa31d032b83a261fdbe6d080a422576b43bd8146e1","ssdeep":"","tlshash":"c14111b5e1258e7243eec6b7c1690f61b22820e51019683d7b7ca8de9594d0a37d1734","first_seen":"2025-07-25T11:55:15.856514Z","last_seen":"2026-07-18T17:22:37.068249Z","times_seen":94,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/localization.eac6ebe6b760650c196b5ce8eb0033649e2db78efb2b4b36d8516f384c7a1114.min.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.399Z","timestamp":1784395050399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/localization.eac6ebe6b760650c196b5ce8eb0033649e2db78efb2b4b36d8516f384c7a1114.min.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2260\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-8d4\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2260,"size_decoded":2529,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2260), with no line terminators","md5":"79dbfacf84ebe15b9fab8c7cefe41ea5","sha1":"55a03edeab0602b165f9168c47a6ae1cad6897ca","sha256":"fba516f76237bddcec06444b6417105a3b5a828fac66d0e34dc5a53517c2c1e9","sha512":"947425e10398d0dd9e92a4482fb76f8e30d4fcd5d602f812db9ed3f36fe0fce615d0e283d25ec6457588c088480c11663351c1ec77c0d2728026fd9202d4debb","ssdeep":"","tlshash":"cf4166957621727603d720db54eb6258a7364496b81a9485311f8c942caee6f03f3ea8","first_seen":"2026-03-16T01:42:13.222081Z","last_seen":"2026-07-18T17:22:37.045698Z","times_seen":89,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/css/download-thankyou.css","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.403Z","timestamp":1784395050403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /css/download-thankyou.css HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 3005\r\nlast-modified: Thu, 09 Jul 2026 20:01:24 GMT\r\netag: \"6a4ffe14-bbd\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3005,"size_decoded":3260,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36cb8764da6e63058d80f4e63b4453b8","sha1":"fe4754cd6738fc711484282b5f9ada92d1fd1edc","sha256":"3f544c8626220519635225fbe64e7bb630d85a5cf0eccc1dd02bbf21df121e0e","sha512":"04d1adf94ac2a866ea15881e334aa8165b050bb3d0bc28a92521a1bfeaa9e3298289ac07b75dc04570991d3c7882e2dae2ce112858db6b4a73bfb74de7c0a33e","ssdeep":"","tlshash":"1051811e8301a911523bb7e93bd6511c836a24223b02739db3e845cdb7e31acc066f4f","first_seen":"2026-07-18T17:18:06.739538Z","last_seen":"2026-07-18T17:22:37.04098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/image-comparison-slider.024d5546db2bcf149a9c680bbc79536c7295c511c6e5afb76f7d563653d0a51e.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.976Z","timestamp":1784395050976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/image-comparison-slider.024d5546db2bcf149a9c680bbc79536c7295c511c6e5afb76f7d563653d0a51e.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1008\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-3f0\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1008,"size_decoded":1277,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1007)","md5":"c6481ad366d6a7cd32ba06755515f1e7","sha1":"8767e80d52a22db2d5bec15eda64a628200b53a6","sha256":"067db4c04d656511ed5705d6964170ad072aea00bf54e3ae75e6fe4b1c6cdece","sha512":"a6c05381c060eebd751d5f89ae5ae435606dca9e565ed3143508043e8b6f7d7d940d0a9656d19b9231ca52c5f439a1b8ed6bcd3818b4c9278fd187c771b8bd75","ssdeep":"","tlshash":"231132d833191073f78f83b26194660231381acef81a4e3d6b389ac64518db987d6e2d","first_seen":"2025-07-25T11:55:15.834319Z","last_seen":"2026-07-18T17:22:37.046465Z","times_seen":94,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-cyrillic-wght-italic.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.404Z","timestamp":1784395052404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-cyrillic-wght-italic.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19980\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-4e0c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19980,"size_decoded":20239,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19980, version 1.0","md5":"b42ea53bc84554ef1e698229d1f8fbfe","sha1":"decaeef7d401ad9f7a4654b8a9c5636f00d8b414","sha256":"47d42151dff6d13f1c2b9a1f278290f625593c1f01c89612ee4ae7f063167f7a","sha512":"88e6de2f99b81b7b076c0c167ba72b71be91f71eb0220852ca06d06fe8cc1edccbd4b99a9d59bf16c84dc298b3335a8cb09ea6b7442e4dd50b91f992d9447818","ssdeep":"384:LYgkqjQUHBTHLZT110nJf6bR4bcyTXRFRAlUPgI22aomL365b:LgqEUHBBZTR4b/Rn1od3g","tlshash":"6c92d1b4650480937e01e37f8f5a9cbf80fb73b851105f606123d78c61d15aa9b9b99d","first_seen":"2025-11-16T06:23:20.818425Z","last_seen":"2026-07-18T17:22:37.091066Z","times_seen":8,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-vietnamese-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.406Z","timestamp":1784395052406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-vietnamese-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10252\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-280c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10252,"size_decoded":10511,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10252, version 1.0","md5":"9df17551da76cba6ee2d5d35fc762ed9","sha1":"9c1cad863a03434fb9c1501e9dd27ac14ed7cf63","sha256":"5c66f9e07e90c6d4ac4922cc68d60de26c17b1858e677fb5e603fce3952b3ff2","sha512":"da96c3931f9fb3584bf27c66faec92ba4118b7e5d47815f92528a363abe3933df3a570165cbdaa44c94acae8a1d25865389f79191ba5eea129d263f7c821c5ae","ssdeep":"192:LO2p32aTpmBmaYdF5pYYUY+n5YGq7jdWkkD9N5odUb:LOY5aYdHp8Y+DcdhnU","tlshash":"3f22af64ba5d32f48a77263ffa6e5b8513b1595bf13c81679913332ba00706de0944e3","first_seen":"2024-08-01T12:13:18Z","last_seen":"2026-07-18T17:24:33.070906Z","times_seen":917,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/icons/close-icon.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.928Z","timestamp":1784395050928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/icons/close-icon.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 362\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-16a\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362,"size_decoded":621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf83adf1694b1bdbe092fc354d47157b","sha1":"193f0426ffcc11e9b0ca060eb52c55ee469eccb7","sha256":"ad796ccc8e16ebca688faf000fc6985ccfc120ad65b2afbab73bc237e93f1c0b","sha512":"3788e42f44b2f26b1377f6b130a6934ad4f99759d03c14e81d4865dd6cea3c3bc438ba0c6f139439ec44c4bc874b22268cda93f56f0f4e3a86dc42cdef8a4208","ssdeep":"","tlshash":"b4e01a3c131aa895c6024072cb3923ee7718505513be0b98e2ec2d58b4105fa4c17eb4","first_seen":"2023-05-16T23:24:24Z","last_seen":"2026-07-18T17:22:37.096592Z","times_seen":104,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":857,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-cyrillic-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.402Z","timestamp":1784395052402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-cyrillic-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18748\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-493c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18748,"size_decoded":19007,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18748, version 1.0","md5":"de93fdc85e3d9009340f44f401ce62cf","sha1":"9f73b2f43ea3bf37cc8e90a5aa8c7e668ec44504","sha256":"71d5ee93cc1e9f1d520a3a8b66456de18c7879d8df09d57fcd2eaff75fef0075","sha512":"1c10e80e6fcd197c5acb2b811794a1d13f7b025868349d1b261e02424e2f1970c7f03c502c6190d386f2e78cdb126a374c64ee6c25eb848f82c5ff1462b3a367","ssdeep":"384:+llEwUsRDydOWF3kczROPIMjvFyNBNaK8QXNkhgP0DXzY0me:+lSwbdDWHeFjtyvdjX2w0DXzY0me","tlshash":"0182e043eb7d80e02039ab687545cd6b76c84ac529d993c4169ffde6d6633c01e9f08b","first_seen":"2025-09-21T12:02:08.032982Z","last_seen":"2026-07-19T04:03:32.248259Z","times_seen":726,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/firefox-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.520Z","timestamp":1784395052520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/firefox-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9882\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-269a\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9882,"size_decoded":10143,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1c02660a697f3e869cb4bcad0a12d36","sha1":"67870c7e540e33d281b85bbb49e8936fa760dfa8","sha256":"974ce519e67ecfc0963358f6f9fec2a0c0214ba4a41adec4e91b8cd0df0bf1ea","sha512":"67408147174e5668b8b49801ac64a39aa456c363e06901db56e3818c922ded6cbcea5017a5fe46986c4b443e2ad3a02d05d22a35be5862190a7c34f5e49fc05c","ssdeep":"192:XECIlizZzvG2mmG2mq2yz4P1rIJ4IljVW2nxo4+uVWPTLo:XECIlizZzvz9znK1rU4IlRW2nxo4+YWA","tlshash":"1012ff9ec21859bfd09bc26ccb57d494331d21bbb9c0834699adcf2f4899487dd4eba0","first_seen":"2026-04-15T01:57:20.093943Z","last_seen":"2026-07-18T17:22:37.0991Z","times_seen":86,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/home-assets/images/leo-illustration.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.517Z","timestamp":1784395050517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /home-assets/images/leo-illustration.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 17609\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-44c9\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17609,"size_decoded":17871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89e37bd0b7a630526521dc2363c78627","sha1":"561a8190ab044a497f150a238e84693303651532","sha256":"eb816fc91a3c590cc500f1a64f4d0c4be6dcf617bbbc277cfa6d0d2081116561","sha512":"1eb0fee56267cfaafa6cb5947310125864c1f05e6d20ca9423c49959a870b3cee57e117a3a4b0434705e03a71832387bb131d08a09f054e545afdf265b517b30","ssdeep":"384:XIzFz8zW2IPjNCaieWiTPXvM+pMShgKsk:XeCaieo+pMcgKp","tlshash":"97820de2a96a797c480787e48f7965e1371f60bd724943fca01dd332374b6eac887a14","first_seen":"2024-08-30T19:32:08Z","last_seen":"2026-07-18T17:22:37.0948Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":920,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/chromerelease-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.518Z","timestamp":1784395052518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/chromerelease-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1147\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-47b\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1147,"size_decoded":1407,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca0fa48333a469cd1459dd7d25997391","sha1":"618f32aedf49b61990d45398bbd49a049e30750b","sha256":"f1c38246f0df4be200afaac47a368ce9f547a6fadaf24a523bc996adcd300d3f","sha512":"b06d3f94a8d9bde53efaf993b6590796634b9f947fa0464cecca6c3c79e13cad60d07028a324ee736d87b6a3e4dd5f595f647362a1c684f6641976f5de9af9ff","ssdeep":"","tlshash":"da219ef5d82d6cafd10b87accd64b1b1121e31fabc844264588cdb6e20ac2c7de0e660","first_seen":"2026-04-15T01:57:20.131508Z","last_seen":"2026-07-18T17:22:37.069055Z","times_seen":86,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/5-set-download-urls.99b4a81dc4c9edacb92fa7b5b4ae2a4ee67ca1a40ec01637c5a286f16ffb3db3.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.973Z","timestamp":1784395050973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/5-set-download-urls.99b4a81dc4c9edacb92fa7b5b4ae2a4ee67ca1a40ec01637c5a286f16ffb3db3.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6362\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-18da\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6362,"size_decoded":6632,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6361)","md5":"91464ff8ee055eed2030e573e6bfd026","sha1":"e80c97276ce09ab23cf512fe3a02de6d9c1529c5","sha256":"d06dea11f737da2c047adae9cd893f623dd8c8dfb58e3fd12cf7fa18ac719051","sha512":"f955c1912cfc0d9aa691d81bed3199d49c07342c53faafd1d382ce7e39b199960f641da513879b438770e07572a93be7c92c909217775ed3b75e5b1fd705ca4b","ssdeep":"96:DVM1PIs6MN8FL9x9TqGeXL6ZVAi786M2Q6/UIZLFvLaE/PV4QBlwAh:ONeFrOL6ZuiFM2F8MLFvLTPiQLwAh","tlshash":"4ed1e9ebe215f425032e203e155ea387e233b9c68c4dc445942dcdaa70f2a2b6553f6f","first_seen":"2026-04-25T07:16:26.966562Z","last_seen":"2026-07-18T17:22:37.064274Z","times_seen":80,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-cyrillic-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.399Z","timestamp":1784395052399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-cyrillic-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18748\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-493c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18748,"size_decoded":19007,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18748, version 1.0","md5":"de93fdc85e3d9009340f44f401ce62cf","sha1":"9f73b2f43ea3bf37cc8e90a5aa8c7e668ec44504","sha256":"71d5ee93cc1e9f1d520a3a8b66456de18c7879d8df09d57fcd2eaff75fef0075","sha512":"1c10e80e6fcd197c5acb2b811794a1d13f7b025868349d1b261e02424e2f1970c7f03c502c6190d386f2e78cdb126a374c64ee6c25eb848f82c5ff1462b3a367","ssdeep":"384:+llEwUsRDydOWF3kczROPIMjvFyNBNaK8QXNkhgP0DXzY0me:+lSwbdDWHeFjtyvdjX2w0DXzY0me","tlshash":"0182e043eb7d80e02039ab687545cd6b76c84ac529d993c4169ffde6d6633c01e9f08b","first_seen":"2025-09-21T12:02:08.032982Z","last_seen":"2026-07-19T04:03:32.248259Z","times_seen":726,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/download.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.511Z","timestamp":1784395052511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/download.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 576\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-240\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":576,"size_decoded":835,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12bf33331091bae1cc62303d2894be69","sha1":"0284d7ee3d36b2eff6ec45ff4d1b9a20fdb06993","sha256":"c8d9c092c1318280fae1d59b6d228cc4b61410554ae7d6c107c0e1f045b4c924","sha512":"03d7fd9f75bd0fe244b417eb5357e474e3348b8ddc3a82432d83f4f7839c44261e5acb0b828447d25046779325b71dfaffcfc8711d78c42e2a596ceffe46ab3a","ssdeep":"","tlshash":"0af046ea4458012c5d7e8639ca993e996b8e3c18641b07b621ccf5913e52270f65bc70","first_seen":"2026-04-15T01:57:20.091847Z","last_seen":"2026-07-18T17:22:37.060239Z","times_seen":86,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/icons/arrow-alt-down.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.525Z","timestamp":1784395052525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/icons/arrow-alt-down.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 162\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-a2\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":420,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e339d3173a6b58de9453c67d54261c8","sha1":"7e35a12649ce07803747062a3aafb6d0b23a1ce7","sha256":"1fcc19ad478b789faa106de383804fb1df741175c4feb5d35a234bad7c3ced76","sha512":"fae8e13afff292acb97b377006236d4ade0cf82eba0b9aa3ae0f1ffe59f4280b45b9fff52a097636d087b00043d8bdc468444f78828dd4387ee4ccf9298b4b67","ssdeep":"","tlshash":"4ac08c6893499924d109c320ab7c6421a72b94f6430d0869ade06ae9e100a9b28776ad","first_seen":"2024-10-12T13:51:47.588704Z","last_seen":"2026-07-18T17:22:37.049048Z","times_seen":95,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/api/download/link","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:33.191Z","timestamp":1784395053191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /api/download/link HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://brave-browser.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 553\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":553,"size_decoded":715,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"acf8e670fb55bf63959f692301293abb","sha1":"d8bcb90c359b3e176d57ca1801d75485cf4803c5","sha256":"50aa61449ccc5a038452948a34b2d4a19dd0af45e6b4bed694a4c0d7a57f81e7","sha512":"399340f481456d6f3468ec1751ec768747c444a32b19a86b6a2810301ac85b31214f914aebacf68173f5537673f2a9c11150c07186a0fd7f6674d779bac647cf","ssdeep":"","tlshash":"b1f0207a2a2e408463bdf449db2cfc1c0173c530987db17bc56921289495f2bd9dbdc0","first_seen":"2026-07-18T17:18:06.775299Z","last_seen":"2026-07-18T17:18:06.775299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/home-assets/images/app-illustration.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.835Z","timestamp":1784395050835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /home-assets/images/app-illustration.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 70882\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-114e2\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70882,"size_decoded":71145,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b58ee381e469a79e8ad95869cf812b86","sha1":"5d08f2f96e5ffb824a819723a77ab4cd9ff64f43","sha256":"74f623371de59cbd9ee469151f592bd5e3bc8c6ce01cfd0254c4a975105acb26","sha512":"efecf20319c97b4de44266d0ae6f6124e49cf26b962db6fd20e7e6f1c63b6f176cbcf6530c0e96e92af076cffe39e20f6e6c236a562a26966ba048fc45ef2088","ssdeep":"768:9hvVv/lrgD+ZtIG5PSMi7XC/BhUaGNhY+SFSbmMG45eB9P5eGSoSjuYdiCNWhmZj:pekNPSM5/BhF/oei9LZDB6zj2u4niC","tlshash":"766383d66360e3bc59c7c7addf21d9e8230f60b9fa76a2c44a9e8334604b9d8f506c54","first_seen":"2025-07-25T11:55:15.809061Z","last_seen":"2026-07-18T17:22:37.05857Z","times_seen":94,"resource_available":false,"data":null}},"time_used":1301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":1043,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-cyrillic-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.405Z","timestamp":1784395052405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-cyrillic-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18748\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-493c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18748,"size_decoded":19007,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18748, version 1.0","md5":"de93fdc85e3d9009340f44f401ce62cf","sha1":"9f73b2f43ea3bf37cc8e90a5aa8c7e668ec44504","sha256":"71d5ee93cc1e9f1d520a3a8b66456de18c7879d8df09d57fcd2eaff75fef0075","sha512":"1c10e80e6fcd197c5acb2b811794a1d13f7b025868349d1b261e02424e2f1970c7f03c502c6190d386f2e78cdb126a374c64ee6c25eb848f82c5ff1462b3a367","ssdeep":"384:+llEwUsRDydOWF3kczROPIMjvFyNBNaK8QXNkhgP0DXzY0me:+lSwbdDWHeFjtyvdjX2w0DXzY0me","tlshash":"0182e043eb7d80e02039ab687545cd6b76c84ac529d993c4169ffde6d6633c01e9f08b","first_seen":"2025-09-21T12:02:08.032982Z","last_seen":"2026-07-19T04:03:32.248259Z","times_seen":726,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dev-check.brave.com/aob67gfbis0nqgeop4kmqpd54.jpg?l=https://brave-browser.ru/\u0026amp;r=","fqdn":"dev-check.brave.com","domain":"brave.com","tld":"com"},"ip":{"addr":"104.18.12.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.467Z","timestamp":1784395052467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev-check.brave.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 20:02:16 GMT","end":"Thu, 20 Aug 2026 20:02:15 GMT"},"fingerprint":{"sha1":"01:C7:99:7A:1D:C4:BB:EB:DC:F6:17:0D:3A:FA:0E:00:30:EF:82:0F","sha256":"AD:A3:F1:79:DA:D3:90:0C:AC:5D:2A:29:E1:6C:FB:96:AD:5C:5B:EB:2F:72:DF:BA:9D:A1:8A:02:3D:6B:05:8E"}}},"request":{"raw":"GET /aob67gfbis0nqgeop4kmqpd54.jpg?l=https://brave-browser.ru/\u0026amp;r= HTTP/1.1\r\nHost: dev-check.brave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 17:17:33 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nlast-modified: Sat, 18 Jul 2026 17:17:33 GMT\r\nexpires: Sat, 18 Jul 2026 21:17:33 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a1d323f61d0b2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":399,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6d22e4f2d2057c6e8d6fab098e76e80f","sha1":"b80b11203d97fe01c5597ca3be70406ea48f5709","sha256":"afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277","sha512":"95dd0e4944b1541a9be48a60a1a105fcfa0d69dd215abaa9c1771adecc5ee0c0fe91d0eb367b6d46a4f8b2e06e6fb962d56dfc1c53f1f62cc8b314710628cb1e","ssdeep":"","tlshash":"ed900003eb800003e2bae0320b0e0b80238cac200ebc030b80aeb0acecba2a00c03020","first_seen":"2023-04-05T05:18:26Z","last_seen":"2026-07-19T05:24:07.513747Z","times_seen":22594,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":563,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/duckduckgo-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.524Z","timestamp":1784395052524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/duckduckgo-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4203\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-106b\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4203,"size_decoded":4464,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52e5abde27bf703e7a189be42a3e8cc0","sha1":"d105e37b4eda1717370c10a4e488e51f0ffa72d7","sha256":"2713cf561d89837586c117c2102a204013e5d9f6e1078dacad25916f9eb4b9a4","sha512":"67631e47277c7dd7449c6999451f91be33dbc39b3b6881b16ce93cee0fdc8de7be6f60d14d4adb5f7dba531b7541097062fcb21109030305f1e50a32b3872795","ssdeep":"48:k9qq9TgVXGZXJ2lI+1LtbS6XheJufSLpcSdC7ZyGhLx53wUG9FiT+bytsPhhaH8e:IlvZtqLs6/fS9UDXwUG9FOp++US74S","tlshash":"2b8142ea692c769ec98fc77ddf19d585120f60faf0a681d01adedb28240a5d7ec0dc90","first_seen":"2026-04-15T01:57:20.105316Z","last_seen":"2026-07-18T17:22:37.088036Z","times_seen":86,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/images/interstitial-download-qr.png","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.929Z","timestamp":1784395050929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/images/interstitial-download-qr.png HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2445\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-98d\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2445,"size_decoded":2701,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"a3a83f327a3c023d4ae3d40c60c4df91","sha1":"d0996294cf59e8f4d3e3684ceecb06ac79c4955f","sha256":"b4f8aefbb2adfaa35a49d1bafdc46d8f5f82b016f289f379458d97bd469ad708","sha512":"7529bc9ca09786c92da7ef20dcded355bfa80ae99cad687df6757efcc205cbaa616a803de16659d20ba020a7868f23521416c89aea9f27a4ab1b1a5b61dd81cf","ssdeep":"","tlshash":"23515bead667d5b046cb9d6edc2c62071ad904c38944520460af61398d87703ebc24dd","first_seen":"2023-05-16T23:24:24Z","last_seen":"2026-07-18T17:22:37.067449Z","times_seen":103,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":857,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/3-delay-animations.52117dc3caa2efe969d724cfc404c3360109e18b1ae4bc3d8883cc9b85ecfae4.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.970Z","timestamp":1784395050970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/3-delay-animations.52117dc3caa2efe969d724cfc404c3360109e18b1ae4bc3d8883cc9b85ecfae4.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 157\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-9d\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157,"size_decoded":424,"mime_type":"application/javascript","magic":"ASCII text","md5":"826967bf0d032f76bfde6d71b593f4e8","sha1":"f0ed6639529c47a07f6e30c0e7826939035425db","sha256":"ab4323559274d687bead83b044057d2b6c7f60fd3bf78d21c396b8b8d4f20453","sha512":"d87549386040d21ba1a5f73e7d5a103a4b4691446796681d69d4137b55a629ea6da93a9b50bdeb7ddabb7a1cddbf0220aeb9f7c24dcedba766482f4e3e9bc2d9","ssdeep":"","tlshash":"5dc08c5c2100a738019209e024deafc03ab66642928350218528cc04c7609a381a1ee9","first_seen":"2025-07-25T11:55:15.845318Z","last_seen":"2026-07-18T17:22:37.063451Z","times_seen":94,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-latin-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.281Z","timestamp":1784395052281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-latin-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-bc80\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48256,"size_decoded":48515,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-19T04:23:36.276407Z","times_seen":23056,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-latin-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.398Z","timestamp":1784395052398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-latin-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-bc80\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48256,"size_decoded":48515,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-19T04:23:36.276407Z","times_seen":23056,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/minus.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.514Z","timestamp":1784395052514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/minus.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 169\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-a9\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169,"size_decoded":427,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6164f737edd6934b8fced87995076a19","sha1":"58ac67247f6c4eeda4e21911432c5094d64bdc27","sha256":"b5bd8c05c9e8d69b4bc227d9934fd5301d10db52902731050906c32b4cad5f3e","sha512":"aa5c150091b6876278f43ab1c0910cdc4e28269a0f2dd78fe61019cf9b0a453828f5a0416994e4185ad8f5b5993b508aba49e10c94d65e2998a02a49f46bb889","ssdeep":"","tlshash":"6cc08c7e994c2a8c8599ceb095783941172e70c37c4a8cf9d08c6a30b097bdbe083624","first_seen":"2026-04-15T01:57:20.10313Z","last_seen":"2026-07-18T17:22:37.034599Z","times_seen":86,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/google-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.523Z","timestamp":1784395052523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/google-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9412\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-24c4\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9412,"size_decoded":9673,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84e3aa7632ad9994606093a3c56171c9","sha1":"bd040ac2b332604a17c42cc97fe4ee5cd0d4fbed","sha256":"0b9b952416481efde4e31a0d7ef5be77a93d1a2825ee7ddd64efae36bfb45349","sha512":"f528c5910c3e370db626400c10a778dc4bef4a3b67ab5aa96201ee20607d2af76621e9abf41bf049902b77b29170ae818a1993d39522e8041ace46ee6c798821","ssdeep":"96:AzSjf0PLM1t86r9XotSISeSSSGSDSKSTeS10SeHmoAVuP9zfq2BzYgB4z/PjnUjO:oSjf00j9fmHVulzyaMgBg/7cO","tlshash":"231256b6d370a47fe09f827cff9394963219205b95c1438da87dab3f005a9839d4eb60","first_seen":"2026-04-15T01:57:20.049084Z","last_seen":"2026-07-18T17:22:37.040215Z","times_seen":86,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/safari-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.521Z","timestamp":1784395052521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/safari-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9375\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-249f\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9375,"size_decoded":9636,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3a76323bd73a827a730b8db688b9953","sha1":"67d879d85216f3bfededce07421d1d7250281c63","sha256":"4e660656229ebaf1847087df3196926bc02635cd8eeba9ae8129879abd1d7cce","sha512":"9990aa93a1c4066b2e1949880f0be8472319602674240e6881e64675abfb65b5af35d78384fab721a038bcb230ab5870a510bc9ca08f147a96631f01c6278555","ssdeep":"96:cFcoJsXMjGhYr3t7Z/ogcYeANLAKDwPwDsP3lPaT1iIhaDc7IQ9Ln/GNys0S2:vtcGhYpZ/+Ek6ewYP3lST1iIe5yLTz","tlshash":"ba1249a5556c37ad6cb4a11faa20d655f38f60bd3270d2c1cfce9be8e20ad91f54b900","first_seen":"2026-04-15T01:57:20.156706Z","last_seen":"2026-07-18T17:22:37.092216Z","times_seen":86,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:17:27.652Z","timestamp":1784395047652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: text/html\r\ncontent-length: 162174\r\nlast-modified: Thu, 09 Jul 2026 20:06:06 GMT\r\netag: \"6a4fff2e-2797e\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Hugo:0.119.0","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]}],"data":{"size":162174,"size_decoded":162434,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11020)","md5":"5a5e407e0a14e661d71f29a07df57494","sha1":"5f89a25debcf4ef87e1b6128d54203d1f92f23c3","sha256":"dd6a3e196ebc9c650dfb1f4473ec1e34d0c11b7daaa73a0834a240f664eef533","sha512":"9c6958299cb86dfb27cc6a325b5ecf8ccb6acda252953af9201bee02716972af3c557846f50a90435affe1fe2c2cc653e5124fe0bdb8f09526208aa742d795c0","ssdeep":"1536:iZ9awGBgoFgAK5Km/K5VKwKXn8QAAdaog1izqLrXh9KYdGgTd:eD9pSun8QAAdaFMzqLrTEgTd","tlshash":"91f30a2162f110bb0137c897a551be0d7dd5a1b7da178f8872ac1d6a2fe3d60897322f","first_seen":"2026-07-18T17:18:06.797651Z","last_seen":"2026-07-18T17:22:37.081504Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3307,"timings":{"blocked":-1,"dns":92,"connect":304,"send":0,"wait":81,"receive":890,"ssl":1939},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/home-assets/images/vpn-illustration.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.518Z","timestamp":1784395050518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /home-assets/images/vpn-illustration.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 19979\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-4e0b\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19979,"size_decoded":20241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ed54daea0367bedbd88c7ccceb0ad6f","sha1":"65e380408bafe051d61b190e2a32cd51d17b1f98","sha256":"c9fb720638567437ee7c660b8a22462e58d79bb144e29e7bb19c870d56b6caa3","sha512":"66bcbf8fa649ca161da758b12c6068ec5e6705cd520442fa2a42e2c1e4f3357f733e9c8776584ac23fd943b69caf72f2a1bc21a74612fe16fe62533e5fc461d1","ssdeep":"384:VU/gRmq1S1+Yy8xFG/EkU/suN/tycR5nDumWDkmKlbyWcdUiLqR:lmqdY11NjjzCpKbFyA","tlshash":"d39295c21730a2fc6ac7cb6def21a895271f70beeba622c0516c8774554fdc8d516c68","first_seen":"2025-07-25T11:55:15.828128Z","last_seen":"2026-07-18T17:22:37.057768Z","times_seen":94,"resource_available":false,"data":null}},"time_used":1494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":920,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/dev.730af03ea8ceb4d931331d7b8b5624ffabb540a8ce32625c718017c593720e4d.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.974Z","timestamp":1784395050974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/dev.730af03ea8ceb4d931331d7b8b5624ffabb540a8ce32625c718017c593720e4d.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 642\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-282\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":642,"size_decoded":910,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (641)","md5":"68bdf038eb12946cdb0b16c098b73be0","sha1":"2e48cda201255466a3cc04ec46f41ebf749c1f5f","sha256":"ce9aecfd452a74e197605b1eff799e36235e38980981d97bc516121387f4de87","sha512":"cfd40375ae6a66c91166bad6b8c14c0ab4dba189a255cfe91988e5ac977f52823a0d9dc7e77adef263a48ce6e93424983831b496cf65feed011b85a1c9229268","ssdeep":"","tlshash":"77f09eee882cc3699e2d004561832b88e43f407b2a62d89196c1a627205474b92427dc","first_seen":"2025-07-25T11:55:15.82013Z","last_seen":"2026-07-18T17:22:37.02853Z","times_seen":94,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-latin-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.400Z","timestamp":1784395052400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-latin-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-bc80\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48256,"size_decoded":48515,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-19T04:23:36.276407Z","times_seen":23056,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/social-brave-release-favicon-fullheight-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.516Z","timestamp":1784395052516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/social-brave-release-favicon-fullheight-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2867\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-b33\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2867,"size_decoded":3127,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d945e21210fa10d0b00e32fc2acc6764","sha1":"20b99e05a939864ed9909b7f9d2b4c5b1685075a","sha256":"2a92eed68bacc2ab73a1539175840a83f71f8e755f9c018a30de84ef2ec7e96e","sha512":"95f1daa3144c5ce07e2a022199c2f179e531c7e6ce2fa7387217c95b15dd0a8acf8e404aa5dbebe8158885b8a6c63e83f9301c1bee1f8297e46130b6306b5e33","ssdeep":"","tlshash":"c05167ce4124d7c9d9ced16eef52d8d8001a70fe687586d64e8f874c685f9c2fa08994","first_seen":"2026-04-15T01:57:20.152925Z","last_seen":"2026-07-18T17:22:37.086435Z","times_seen":86,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/arrow-up-and-down.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.522Z","timestamp":1784395052522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/arrow-up-and-down.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 388\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-184\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":388,"size_decoded":647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32355d73ff75d5355d50dc6a688571c1","sha1":"4fed0dd9e2544f5014410e5519325e204b7691d7","sha256":"acbf12338b38fa4c43d3772b52e9e54cbeb3b82b1e463c09043015adc47dcc82","sha512":"6e8d10ba23bb646f679801c7e40511e75ad353906eba864e1aed68e6329d0a7029e6dceda1aaddba9ba12f84eedd883c7e3194128633fc8597065c96eb77e037","ssdeep":"","tlshash":"bbe065b8832e07ec24e7f9399e382d4e431c24d473868ce5cb8c2964a16799ba28f551","first_seen":"2026-04-15T01:57:20.149388Z","last_seen":"2026-07-18T17:22:37.03599Z","times_seen":86,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/arrow-right.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.529Z","timestamp":1784395052529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/arrow-right.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 306\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-132\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306,"size_decoded":565,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c602b78e424281d3451499a4ae1d55e0","sha1":"dccfa70d09d2f1ab3ec8d6ca230bb285b75f9a3d","sha256":"b1d3504d5cdd8cbd2cc5fa8d1dc8babc0442badbb7fad70bacca099782170cac","sha512":"c7b341d5cfae88653f9e9c274162cd8f6ae05f272c59805cc5a0c92d45c2857a40f52d94014419fb286fe2c68c10c825efee0e7a22be8a91f6de41926cbe0f2a","ssdeep":"","tlshash":"38e07d78730c4c9c40118a34cd1c79c69a2a20e9368c48bdcb7cb2a270c61b99603d42","first_seen":"2026-04-15T01:57:20.107634Z","last_seen":"2026-07-18T17:22:37.053935Z","times_seen":86,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/images/brave-logo-text-only.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.514Z","timestamp":1784395050514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/images/brave-logo-text-only.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3013\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-bc5\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3013,"size_decoded":3273,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"570a4c8145d09d85d763f1a732a825a6","sha1":"7451577bc98993caa100698142c2102ab5fa1a7f","sha256":"ddb728104fd7c79a3a2925bf823ccfbe297127cc8d46726665efa38c5f122671","sha512":"9a266e11fbe4f56bfcd05c4a125895670a54132d12b4821db9e8b8fb11b7dbebfe826fd99752f354e93ca8ae698913203365e2517a9e3308a1f846f303ea3ac3","ssdeep":"","tlshash":"045132cefbb845f4ac8c639d972448b47193bcbf25219a9c803def589783e5c8568482","first_seen":"2025-07-25T11:55:15.794889Z","last_seen":"2026-07-18T17:22:37.04713Z","times_seen":94,"resource_available":false,"data":null}},"time_used":1458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":880,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/home-assets/images/line-waves.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.516Z","timestamp":1784395050516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /home-assets/images/line-waves.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 960\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-3c0\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":960,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b960afa0160f65588031bd2e838eeee6","sha1":"6829422505b9c8a131caa35f72f1691ea53c2b19","sha256":"3a777e818e3b131431431fc7b69804ed58d51f264746c90373de8a89c5ed6066","sha512":"d5ee53f55de63a6560e738e85f9c2c5c2462b165e9fa1add224eedae3bca958e4580478ea87ec379f668a96a1c3f50a5d72d7515aa823df2ca947156a7d0d83c","ssdeep":"","tlshash":"82115cd9b5447adc9c11cee45df89460f42e72bfd3c11aa4d5009330743a159ada1be8","first_seen":"2024-08-30T19:32:08Z","last_seen":"2026-07-18T17:22:37.047874Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":880,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/lottie-player.7781cf8d05007e333cb7f638e2b315be2f4cd3e04ba967c6c319c82ed568931e.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.711Z","timestamp":1784395050711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/lottie-player.7781cf8d05007e333cb7f638e2b315be2f4cd3e04ba967c6c319c82ed568931e.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 172677\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-2a285\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172677,"size_decoded":172950,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48982)","md5":"89396baff16dd9b773a2aa1ba098e1cf","sha1":"e8866a15095f66efea6a5b83a84adf0b57a44ace","sha256":"7781cf8d05007e333cb7f638e2b315be2f4cd3e04ba967c6c319c82ed568931e","sha512":"9ec9e187d768fb04c3322bab0b9c17beb88a59a6aa9f4ef35bc9129068fcfa2c03550d887929d00f87e31c517bb641829c39ff952ac559b88ec860d6f5ecd461","ssdeep":"3072:/twgrtbW/U8rF5ybjj42/jZoI/xMhZtSVOun/cXOaUy1:/twgknrF5ybjj42/jZjMXQVj8v","tlshash":"61f3e76a7250203646d241a9807f194b6736681e7849c86cb76cf4dfac7ce8d31bef78","first_seen":"2026-04-28T18:46:49.969397Z","last_seen":"2026-07-18T17:22:37.062615Z","times_seen":73,"resource_available":true,"data":null}},"time_used":1220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":838,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-greek-wght-normal.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.407Z","timestamp":1784395052407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-greek-wght-normal.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18996\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-4a34\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18996,"size_decoded":19255,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18996, version 1.0","md5":"8c7f6aea5e86ceaf66b92da8be90e5f1","sha1":"c68aff863e1836a239db315e7179d46f34385ece","sha256":"1be3448e292fbf05ffe176fe1e43f135013d50b1e7d324ad1a558f623d3bb6f6","sha512":"94885624c66700033d1479e8b1238bf5a9277e24266cdf31f97a21fa2af6c36bdb0f8a7ebab5c595ba1caab44d108c1bd84adeb9db7b973e36c7b940c95e9322","ssdeep":"384:g8e8A18hClzc31FFBVrGBaOdtEiiY5CM7oYQQMACqt:gJ8A1KFtVKxtHJ5CM7kQMAnt","tlshash":"6282d0e79b823fe3f0e7c5f396256aa4baad00d5332d418e5004ada1d6dd0593908bd0","first_seen":"2025-09-21T13:05:00.945127Z","last_seen":"2026-07-18T17:22:37.098334Z","times_seen":190,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/images/brave-logo.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.926Z","timestamp":1784395050926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/images/brave-logo.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4164\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-1044\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4164,"size_decoded":4425,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2d374b81e3eb0a00a24afd4576b2443","sha1":"9d2659aa6959c06dee0639fa503c4307e0548ef6","sha256":"f781ec306fbc06a1cec93c3425835ae38d4da3e0804dd457da847f89987b279b","sha512":"73a044f2654650681fc08e9c4ac7908cd1db2cdf020df693231bdf29f8a046d6d49adf2431867bdedcd3ff56ebabd685cdae85f95eff50f91a7d313d508f7478","ssdeep":"96:NRi8cbckKrNudIm6Ax8XL5tx3TtCiNsVxDWL2P3BtebpWgsO:NRnBkOiIfAe3MCsXKo9gF","tlshash":"938131b6a248d6ed99c3c4a8ce31c4a0270f94e9b79a53f851bfdb347017ad8d44a864","first_seen":"2024-08-30T19:32:08Z","last_seen":"2026-07-18T17:22:37.084004Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":857,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/js/interstitial.ed54a6886dab8f7e38d1a18b72dd8100d64ccad1cb0094f216a5d86ebb5313f4.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.978Z","timestamp":1784395050978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /js/interstitial.ed54a6886dab8f7e38d1a18b72dd8100d64ccad1cb0094f216a5d86ebb5313f4.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 610\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-262\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":610,"size_decoded":878,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (609)","md5":"8c44396b37c8fa329773e0a64c27f56c","sha1":"3f7830e883971c95487ecd9ac16c0105150c058c","sha256":"b912be9a45e3c57ebbe8142e5e3b6fd80f5ee5d50fd3e198f4eb77d1620e0680","sha512":"3866fe57cd994eaf902001f819300ef6ec414a794e558602a95ebb00df8a9c154577c1da23df976688f439a67a9fcc297373a732f3004911f6336a2c0e0b3c6a","ssdeep":"","tlshash":"4df07d7e9a216a3004af5667a0fde3d92d7511e77d831405141d8c941c7cdd241f5eb5","first_seen":"2025-07-25T11:55:15.837026Z","last_seen":"2026-07-18T17:22:37.039396Z","times_seen":94,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/arrow-small-down.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.508Z","timestamp":1784395052508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/arrow-small-down.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 280\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-118\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280,"size_decoded":539,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91eb67344833d9f33ae8f0bc6bb2bded","sha1":"543646d68154767ea6c3c1da3a2054dc11195a45","sha256":"6659ec9c54910c90124efcfec9dd185b1903d826f0cfe31a24ab3385da013385","sha512":"172b291c27ff9631b7dff9a84b0e7d6114910fa0def156e898e7d0260073f5a52c69b3e1969373f478f33a46bd40a5ff40bef7656e0ef62f59234ca96890e19e","ssdeep":"","tlshash":"ecd02b7c431c4add54e7f938ee3c3d89831d30d572854ce4d74c28107457a96914b051","first_seen":"2026-04-15T01:57:20.147346Z","last_seen":"2026-07-18T17:22:37.079013Z","times_seen":87,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/arrow-left.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.528Z","timestamp":1784395052528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/arrow-left.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 304\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-130\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304,"size_decoded":563,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"051a117df76d387387e861fc8354407b","sha1":"79d6a5e074961e432b8848396679b6ab9806ad9b","sha256":"8f80f5bd282605f5408d41df81122d294b87231b3502ae237ee33ea0bb6fb91d","sha512":"dccc85871c4c345e1592342b5b1f831344844c92bd67e6b6e18f5a03968655beb827997524571291be77fffc245f8a8475891ce6acb06450959864ab27496def","ssdeep":"","tlshash":"41e0e768b30d485c40024534e52c7ac4933f01d5344c0cf5c7bc65b930c6579d003f91","first_seen":"2026-04-15T01:57:20.163341Z","last_seen":"2026-07-18T17:22:37.061689Z","times_seen":86,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/fonts/inter/inter-latin-wght-italic.woff2","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.403Z","timestamp":1784395052403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/fonts/inter/inter-latin-wght-italic.woff2 HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/fonts-non-latin.min.a93f5e4572c59e335a38f9664d54425ea550ecef3c1ab5a877360397cd9da6f7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51832\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-ca78\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51832,"size_decoded":52091,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51832, version 1.0","md5":"0a81fe197e0d9dc351858cb422811e0a","sha1":"967f7469b3c129b904fcecf529c8e45c911603fb","sha256":"7291b5970da2237441273c03b424a504b70b18f09791473fab99687dcc314720","sha512":"4d0e220fecc82cf3dec0740fa7faf6db5d12b8610133c040bae748afd4bc5443cbc389410b5cf0d09a69206e09337d813525166e2ddb3a66ee4c695d65434156","ssdeep":"1536:sSUpUXl9fqUUVpbryvKsX9YagHxsOQ/nSqBdF:lxU/bryv79YausOQ6IF","tlshash":"9a33f1d6d3da5c5aa1bb817511c3f942dc02ceb6eacc257146a353232b8531be37d827","first_seen":"2025-05-30T11:38:07.492539Z","last_seen":"2026-07-19T03:58:17.305758Z","times_seen":1491,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/leo-icons/edge-color.svg","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.519Z","timestamp":1784395052519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /leo-icons/edge-color.svg HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/static-assets/css/main.min.410731c30efff8a01b86874f1f274534ec47c48837fbea8f270fe5e381754dc2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3678\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-e5e\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3678,"size_decoded":3938,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee143268d794ac00ebd8a59baeb59074","sha1":"be69facdc08e2fa8350d67b00e45b628295260ae","sha256":"16e31396cbf2133507029a89c554833bca17cd981e37daf771fba46699696520","sha512":"c0725c0d0921b4fc40bc1bb41dabf4f472161f1745e002a4b81960ab95b095f1411336695512989fcb4b517746dbad40547ada1e9b0fc1042eb75308da908971","ssdeep":"","tlshash":"bd7111bad62865bee0cfc75cdb628450331d54bb34a0839598addb2d00956c6ee8ff70","first_seen":"2026-04-15T01:57:20.154891Z","last_seen":"2026-07-18T17:22:37.080457Z","times_seen":86,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/images/cropped-brave_appicon_release-32x32.png","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.977Z","timestamp":1784395052977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/images/cropped-brave_appicon_release-32x32.png HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-44f\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1103,"size_decoded":1359,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"bfb239b2247bed40ef4eb8a205ba6d72","sha1":"85e2650aa2a2f2fb915695dd15a7befcac9c9068","sha256":"9231a89e81aaaa5cba40deec6fc6dc7a935b6c45dec9492d648a2922fc6d6735","sha512":"56b72394512b8e9e793c2f9e6c931b92b002f2ae0f2670ad03e3342effa8ec96bd666fc4d1be196f9db0189576f381270c24d881666b3f22629ef744d3be8314","ssdeep":"","tlshash":"8a11937e0a2cacbe6e6b8aa73b240234df93bd000290e73061451937a63675cd49d9b0","first_seen":"2025-07-25T11:55:15.866958Z","last_seen":"2026-07-18T17:22:37.044393Z","times_seen":96,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud-img-cdn.com/static/6d66886f/spacer.gif","fqdn":"cloud-img-cdn.com","domain":"cloud-img-cdn.com","tld":"com"},"ip":{"addr":"172.67.169.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:32.466Z","timestamp":1784395052466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud-img-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:52:43 GMT","end":"Wed, 23 Sep 2026 04:52:30 GMT"},"fingerprint":{"sha1":"0B:F4:79:C1:D8:3A:20:79:89:CD:9B:3B:66:A6:BD:D2:DA:C0:14:6D","sha256":"A7:8E:38:E1:9C:F0:B3:E5:45:69:0D:E4:87:19:97:89:BA:D4:AE:0F:B8:DD:B2:AC:A6:5D:EF:5B:CE:16:82:8A"}}},"request":{"raw":"GET /static/6d66886f/spacer.gif HTTP/1.1\r\nHost: cloud-img-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:17:32 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piD658HQya%2F6Cxmdd1j%2BRP7BJ20Q2uc0GcFfY65RRDydT3utoaPTryXQ%2FbSzBPASluVUXRurLU%2BXcezfhIHt56r3vsoxdLM9yj2DXoTCUAIQ%2FK8PkjthapDoj%2FVfdxQE9fsguw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d323f61c9b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":596,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-19T05:20:39.512063Z","times_seen":997001,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":12,"connect":21,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brave-browser.ru/static-assets/js/ie-shims.js","fqdn":"brave-browser.ru","domain":"brave-browser.ru","tld":"ru"},"ip":{"addr":"151.243.113.10","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brave-browser.ru/","date":"2026-07-18T17:17:30.398Z","timestamp":1784395050398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brave-browser.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 19:21:10 GMT","end":"Wed, 07 Oct 2026 19:21:09 GMT"},"fingerprint":{"sha1":"ED:DE:6A:1C:19:E6:2C:D0:BE:F4:DF:D5:16:AD:24:90:73:96:89:E3","sha256":"18:B5:FA:CC:5E:81:0B:BC:0B:8C:32:57:9E:B4:34:93:F9:4A:C4:F4:E8:F2:14:40:AB:38:AD:7D:E1:D3:64:64"}}},"request":{"raw":"GET /static-assets/js/ie-shims.js HTTP/1.1\r\nHost: brave-browser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://brave-browser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.2\r\ndate: Sat, 18 Jul 2026 17:17:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1676\r\nlast-modified: Thu, 09 Jul 2026 19:02:19 GMT\r\netag: \"6a4ff03b-68c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1676,"size_decoded":1945,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (783)","md5":"86199c72f83f9867e2b52a6b73152f73","sha1":"81de47c012f73ada5b852e49d5d72f910535fcb5","sha256":"1051d68d0447d0a89b73d91368569845a6d4cdb7c34a58fdf5daf9cb7a6d520d","sha512":"c51846af9179ecae5c90d8e117b8b7225061ce603cfa63c66cf9ef8bb89ce22c93d3b8cc942ec4fab0a7fb9a07db2eeb0d06d1e8467b0545ec63c8a85ae1e862","ssdeep":"","tlshash":"7a3140e63796f9f1038371b2a05f7408f37324ea949a9441d1b4d4c2bd348d96ab3d6a","first_seen":"2023-03-07T22:08:00Z","last_seen":"2026-07-18T17:22:37.089614Z","times_seen":105,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"brave-browser.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}