{"report_id":"5e534c7e-1e83-4eb6-b432-0607ec735ac5","version":0,"status":"done","tags":[],"date":"2026-08-25T21:04:50Z","url":{"schema":"http","addr":"pdfxchange.ru/","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"pdfxchange.ru/","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"title":"Скачать PDF-XChange Editor бесплатно — русская версия для Windows","dom":{"size":13071,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2c5b31b41a90071211935d8f3973d069","sha1":"762331693fa4d76c4ad4330fc51719394eceb129","sha256":"0d6a40ebfc4c2fe2910360ba3bc9f02f676d4413e43c308888a67327f5385143","sha512":"7f2ae10a033dd9dbe6c8b2735c9b053d6492fbef0f72d6266ec8f2c158f9270caafa9c53e5e95ed77d1efc89cdb91d453a9f361319767a252653c575b9dfb8be","ssdeep":"192:TRm/W3bVCAiIeZYTcGgdbV9gTII/JVZ+sImwzIto0KnVEz8:TRm/W3oAiIeZzd2IIF+xItoja4","tlshash":"4042763250e824ab0101614fdd157a0d2daa80ffee5a6a1132bc2d7e7fe3d558a2f61d","dom_hash":"domhash07e45c6a7cc65e7a8066e6bbf8aaa749","first_seen":"2026-08-25T20:54:32.535879Z","last_seen":"2026-08-25T21:04:52.385084Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pdfxchange.ru/","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:04:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"pdfxchange.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-25T20:54:29.491866Z","last_seen":"2026-08-25T20:54:29.491866Z","alert_count":28,"request_count":7,"received_data":219224,"sent_data":3439,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pdfxchange.ru/","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"791e2c2db0ae33e17931ffba361ddc1a","sha1":"1367efe0a0a42171a3242aa58118afafc6428163","sha256":"3859aa0b908039b0817d2c9e1e80607716436ad6a0e440ff148994120c460cd2","sha512":"ddfca6a9bfcc793450ea93d343a57a539c52134aef465095360b7e71810ba0819167b3d4157ee0e177ca3fd8ef0dc7b5dbbb59da13852823422ac345ba9b9741","ssdeep":"","tlshash":"53f0e1b7b88492b5c3f63131532ba31d711718ba20896c34c54dcc817a7fc79102f9ad","size":576,"data":"","first_seen":"2026-08-25T20:54:32.556952Z","last_seen":"2026-08-25T21:04:52.398342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/assets/js/main.js","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1269e6b48c2bc266e69f82760de3121c","sha1":"02187a1214cded6451a639aad7868e2ad6bc8303","sha256":"f166570f8f42fd481bd6207957d0552cfa6af1983392b544fdb055707a17f04a","sha512":"d3c75cfb3ef676851310b8eff76c24cc6ed8b3ff4d9e4c1797b8f1568ced2bdc7fc815784bcb24ce6fedded71242a1740045fa89e16b574eedd1ae8df78e1a36","ssdeep":"96:PsH1UBlu2BB9XIbRdBupoYLiOXuXrJSqKJ6onFUcQKbWfL4PqUL5afufMIpuJKb:PsH1IDBB9KYpnjeFSq25FULKSfCFh0xQ","tlshash":"d4c13164a85932b640f7637eaf4a554cffb0056b9004c2013dac9e4a3fb4b7443b9ee9","size":6061,"data":"","first_seen":"2026-08-25T20:54:32.554377Z","last_seen":"2026-08-25T21:04:52.396356Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pdfxchange.ru/assets/img/editor-icon.png","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfxchange.ru/","date":"2026-08-25T21:04:24.265Z","timestamp":1787691864265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET /assets/img/editor-icon.png HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfxchange.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 9524\r\nlast-modified: Sun, 16 Aug 2026 17:00:30 GMT\r\netag: \"2534-6592cfdb57fd5\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9524,"size_decoded":9934,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c013dbcc7e048578689d2c32991605fa","sha1":"bc18731fd7cfdacfda4829ef4ceb4116288926b2","sha256":"3b62ebfed3921018a9ad0e1f08474a364942e991f0d8115eed281c44d3304623","sha512":"d9e5199761de4358af9ed1f5e73754d9abe3c79b540412db05c04b210f20131e47de61f8899539bda84083f49f0420c3af953a35780de8481e97b638a6a389cd","ssdeep":"192:AWmtLAp6tTjW1u5Svrjxw75hdgfVySOYbCERgtgTBubLhytx:BQAp6Rgu5Ur9wdhdgnOLERVNVb","tlshash":"9512bf44bd177f8d2db2377cf269c0693863cb088c2882500f77069ddebc20095b625d","first_seen":"2026-05-03T08:23:25.155355Z","last_seen":"2026-08-25T21:04:52.388224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/assets/css/style.css","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdfxchange.ru/","date":"2026-08-25T21:04:23.891Z","timestamp":1787691863891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfxchange.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 2707\r\nlast-modified: Sun, 16 Aug 2026 17:00:29 GMT\r\netag: \"2670-6592cfdb08a34-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9840,"size_decoded":3168,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"64f5316c761e0b776e688468340dcac4","sha1":"eb4938541f8b9f8b5633f01b3a3324a3e3da69ae","sha256":"5e011650b648e7005afc02d18d18c470b35ea85abb3c2a78c9ebc9673a651f3f","sha512":"80366db022b65e0a38500fc8d7cdeeee6f968ddc3b0bd9b755e173b1051b7510159e7be04e8af6aadf07b64bcefa5e55800aad68dc259b8a6f43e897313344d2","ssdeep":"96:Dbh3KmofxzntQb8PmiMKc+X0R6oytbPHAMh4TutgR9rKb8FPCqwZnbDjo4v6/qnT:Dbhdo5t2+kEoytrdM14SSbOFZ9ZHPx8x","tlshash":"2d126556e71a6215f13bebe4f783974aa7645013960503bebee05008d2cd5bdd231f8c","first_seen":"2026-08-25T20:54:32.551529Z","last_seen":"2026-08-25T21:04:52.389835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/assets/img/editor-icon.png","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfxchange.ru/","date":"2026-08-25T21:04:23.897Z","timestamp":1787691863897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET /assets/img/editor-icon.png HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfxchange.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 9524\r\nlast-modified: Sun, 16 Aug 2026 17:00:30 GMT\r\netag: \"2534-6592cfdb57fd5\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9524,"size_decoded":9934,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c013dbcc7e048578689d2c32991605fa","sha1":"bc18731fd7cfdacfda4829ef4ceb4116288926b2","sha256":"3b62ebfed3921018a9ad0e1f08474a364942e991f0d8115eed281c44d3304623","sha512":"d9e5199761de4358af9ed1f5e73754d9abe3c79b540412db05c04b210f20131e47de61f8899539bda84083f49f0420c3af953a35780de8481e97b638a6a389cd","ssdeep":"192:AWmtLAp6tTjW1u5Svrjxw75hdgfVySOYbCERgtgTBubLhytx:BQAp6Rgu5Ur9wdhdgnOLERVNVb","tlshash":"9512bf44bd177f8d2db2377cf269c0693863cb088c2882500f77069ddebc20095b625d","first_seen":"2026-05-03T08:23:25.155355Z","last_seen":"2026-08-25T21:04:52.388224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/assets/img/editor-icon.png","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfxchange.ru/","date":"2026-08-25T21:04:24.264Z","timestamp":1787691864264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET /assets/img/editor-icon.png HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfxchange.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 9524\r\nlast-modified: Sun, 16 Aug 2026 17:00:30 GMT\r\netag: \"2534-6592cfdb57fd5\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9524,"size_decoded":9934,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c013dbcc7e048578689d2c32991605fa","sha1":"bc18731fd7cfdacfda4829ef4ceb4116288926b2","sha256":"3b62ebfed3921018a9ad0e1f08474a364942e991f0d8115eed281c44d3304623","sha512":"d9e5199761de4358af9ed1f5e73754d9abe3c79b540412db05c04b210f20131e47de61f8899539bda84083f49f0420c3af953a35780de8481e97b638a6a389cd","ssdeep":"192:AWmtLAp6tTjW1u5Svrjxw75hdgfVySOYbCERgtgTBubLhytx:BQAp6Rgu5Ur9wdhdgnOLERVNVb","tlshash":"9512bf44bd177f8d2db2377cf269c0693863cb088c2882500f77069ddebc20095b625d","first_seen":"2026-05-03T08:23:25.155355Z","last_seen":"2026-08-25T21:04:52.388224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:04:23.428Z","timestamp":1787691863428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 4201\r\nlast-modified: Sat, 22 Aug 2026 13:53:30 GMT\r\netag: \"348a-659a314071eb4-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13450,"size_decoded":4662,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5c6beccad6ae384749b64ac0df88b908","sha1":"6cc10eb4651e131f6a66cae82346055af747a593","sha256":"c942557092f8e7d455273d41b677511b540632192d597c59d4bdca384adfe389","sha512":"ef959339662e30b6f2f337cf44c1d305d0c0c21f5d3a6054503dd3346b512dfcf640c6bb41f2a7f9e436ac83b6b7d922f9a8719a0f73ce4740ba877b3578e84a","ssdeep":"192:uV4OeHQgrLZ79gSII8JVd+PrmfAmD7oQvpVN+TO:ROorLxIIC+vmXoCZT","tlshash":"2842643210c468aa0132611fdd147a0dfd9a81ffab5a5a1132fc3a6f7ff2d14891f559","first_seen":"2026-08-25T20:54:32.548151Z","last_seen":"2026-08-25T21:04:52.391977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":128,"connect":48,"send":0,"wait":67,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/assets/img/shot-editor.png","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfxchange.ru/","date":"2026-08-25T21:04:23.892Z","timestamp":1787691863892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET /assets/img/shot-editor.png HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfxchange.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 158315\r\nlast-modified: Sun, 16 Aug 2026 17:00:31 GMT\r\netag: \"26a6b-6592cfdc819e9\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158315,"size_decoded":158728,"mime_type":"image/png","magic":"PNG image data, 1068 x 735, 8-bit colormap, non-interlaced","md5":"cfec2e747a95fe553b4e8db72565b1ba","sha1":"2b2589193605eccbaa76e1f0a1b859e159c29985","sha256":"cfc026d9ec1532442e820657789653b47d4bb61925658c9cb426cd00ed8535ee","sha512":"900ad85f1d1878c8e435c50cb94d404268da35490ce588a5a88028f4158f2612737f6f088797cc738a8695a9f4333365898484045526cbdd850bc976739cb700","ssdeep":"3072:baJLNorCYQBP7I/ixfLvXEDjCAY5AdykNL7/5GNiw6BgltoAWUewJf:baDKCYEjIK9rEDjCAk1kNR9wrezUewJf","tlshash":"abf313e57bab5e2e3b47a5161082249cad4ecfcfd8d53277b785031831c8da91128d67","first_seen":"2026-08-25T20:54:32.544627Z","last_seen":"2026-08-25T21:04:52.394018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfxchange.ru/assets/js/main.js","fqdn":"pdfxchange.ru","domain":"pdfxchange.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfxchange.ru/","date":"2026-08-25T21:04:23.894Z","timestamp":1787691863894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pdfxchange.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:50 GMT","end":"Mon, 16 Nov 2026 20:07:49 GMT"},"fingerprint":{"sha1":"A1:5F:51:F9:06:AC:B7:E3:C2:AC:D7:A4:ED:CC:63:AB:2D:1C:19:E1","sha256":"D1:D4:E7:FF:26:FC:81:DF:BF:8A:3C:9A:C9:F3:F0:05:60:FC:0D:1B:D4:64:41:49:BD:63:67:10:91:C1:0E:70"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: pdfxchange.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfxchange.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:23 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:01:31 GMT\r\netag: W/\"17ad-659a330b16dce\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6061,"size_decoded":2619,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1269e6b48c2bc266e69f82760de3121c","sha1":"02187a1214cded6451a639aad7868e2ad6bc8303","sha256":"f166570f8f42fd481bd6207957d0552cfa6af1983392b544fdb055707a17f04a","sha512":"d3c75cfb3ef676851310b8eff76c24cc6ed8b3ff4d9e4c1797b8f1568ced2bdc7fc815784bcb24ce6fedded71242a1740045fa89e16b574eedd1ae8df78e1a36","ssdeep":"96:PsH1UBlu2BB9XIbRdBupoYLiOXuXrJSqKJ6onFUcQKbWfL4PqUL5afufMIpuJKb:PsH1IDBB9KYpnjeFSq25FULKSfCFh0xQ","tlshash":"d4c13164a85932b640f7637eaf4a554cffb0056b9004c2013dac9e4a3fb4b7443b9ee9","first_seen":"2026-08-25T20:54:32.554377Z","last_seen":"2026-08-25T21:04:52.396356Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pdfxchange.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}