{"report_id":"8f6d836f-69ba-4545-8768-1478e91f8ee9","version":6,"status":"done","tags":[],"date":"2026-03-18T10:42:56Z","url":{"schema":"http","addr":"eat.ru.com","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":0,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"title":"eat.ru.com/1dda1841f/","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T18:49:25.683007Z","times_seen":17747766,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"eat.ru.com","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":0,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T10:42:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-18","alert":"Detects file containing Telegram Bot API","trigger":"eat.ru.com/1dda1841f/in-house/father.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-18","alert":"Detects file containing Telegram Bot API","trigger":"eat.ru.com/1dda1841f/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"eat.ru.com","ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"domain_registered":"2025-04-15","domain_rank":0,"first_seen":"2025-06-05T05:56:45.727835Z","last_seen":"2026-03-16T04:35:29.532436Z","alert_count":147,"request_count":29,"received_data":765731,"sent_data":13513,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"plugin.intuitcdn.net","ip":{"addr":"2.20.164.106","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2012-08-09","domain_rank":82887,"first_seen":"2017-06-13T13:41:20Z","last_seen":"2026-03-13T04:23:23.164301Z","alert_count":0,"request_count":3,"received_data":97815,"sent_data":1582,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/settings.js","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb51c4a0210f4ef1da549e234212feb1","sha1":"109bc928f15d7d60d88f14425070e89f9851565b","sha256":"b8fa410138811e31593b744c71a6c1ef84dcf942805d293dcafa5d40332adf2b","sha512":"2c22a612acf9a3e8b3d41f2a73c70c39db08339fdf7eac2065ef0280b8314346b7bc60a8ec8c308e31bfecca837786f934a2a18ecb50e7bd2e2c0eab2388a762","ssdeep":"","tlshash":"64d095011a71243d268003fc8148402d5b5d6f5971d4f17f946fd15c4f9e9e1f1314dd","size":263,"data":"","first_seen":"2026-03-16T04:35:30.650445Z","last_seen":"2026-03-18T12:50:22.217134Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/5951.9523b66138f7786cc049b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/5951.9523b66138f7786cc049b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3826\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3826,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3501)","md5":"6709a894ed9188db0511122a257da89e","sha1":"887421dc46cba7cd88d1c12bb72d6f4aeeed5101","sha256":"653796cfcfb0e4a38252d470de2fbd46a53774eb6bf3987e823eb8a80673cb73","sha512":"0a86a336551c966fa4e1947a483bcf2be046de1e6e8b00fb777f451ca8dfee0eb79e3707dae6bb2ae86b0d1b2bf2ad593373179b51bab840254717bcc3f3ba50","ssdeep":"","tlshash":"e581b0edf3216a2ea43796aff6d203cb9200954516e554afaf03891ec9d6ed32570f0c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.542604Z","times_seen":29,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":378,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/5193.9a20e4545d0aa3242672b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/5193.9a20e4545d0aa3242672b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 12729\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12404)","md5":"dceca55961431d34f7cafc2460db5e96","sha1":"36169e7fe5835b0c865a78aea965a77f745bd8ca","sha256":"079e2a5d52097bd723f0ce2e068f30290299cba574b8218910efeab4025a4dbe","sha512":"a0126fd15e207490070637b2f3aebb83cbc5f61b888e18dbeb79b0192d4ae0a3f3f96a25892b7cd8489cdf2b8d64d2341bdb9e06ad7ad96380ee60a7a300f50a","ssdeep":"192:iX+913KjSBWsahPVl8S3lIEFZV/aN5wf6YbAf:iO9dK6WDhPVl8S3lIEFZVyN5wf6kC","tlshash":"7342bd69cb004b3f7e638afddb2f2204a91a4d256d31d84741ac505947e3bf922be76c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.543304Z","times_seen":37,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":411,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/7661.c12c55d011ff5aafbb0db22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/7661.c12c55d011ff5aafbb0db22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4116\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3791)","md5":"e83a089d4a06379c157df159deb17dea","sha1":"7275c16778b8ed9382685ff79f530b568d0a6775","sha256":"423fafde9ff22771695ca35c8c3bfe09407d21bc4c481c3be9badd2d94ee31ce","sha512":"c47eaae7171d6dd0fd456f702a0d9e32ec062a356401f0fbf6960d5638ef0937965707b06a8a43e1792ede53c667603252957ab22cf4a48f39fb452b90652541","ssdeep":"96:iX+Iy39pgiDSSYpoVxWc5yHx8etoMTJBWbMR/Qt:iX+IsTgqSpoVxjIHeM5Qt","tlshash":"35816cbdd74d49bef012ebdda19e6d0842092a58fc311a93f857702653f7ee60833859","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.55273Z","times_seen":29,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T10:42:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 18 Mar 2026 10:42:33 GMT\r\nServer: Apache\r\nlocation: 1dda1841f\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97372,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T18:49:25.683007Z","times_seen":17747766,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":250,"dns":33,"connect":102,"send":0,"wait":164,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/5219.8f9458557f8c531a7222b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/5219.8f9458557f8c531a7222b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 385\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"09ca32dbddbba8c83264546cb32994b5","sha1":"076fd67437af2d01c07366e5e997f67754fcd3d0","sha256":"6d875bd23267c708edb5840f080ae59f4b0cfadeb5154da86277e3c6e991c1fc","sha512":"4af69b7da83da726146cca594aecbbcbfc5379f97817096a54fcd90307d5eb9907949f6ce0faacc2c3aaba4eaf2aa85e54121ccb427e571e609af1f1859623e7","ssdeep":"","tlshash":"70e061ded2f92c3ed73243bb6242558cbb14c8d1e19554676c40855a21a7c2cfb35d7c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.554779Z","times_seen":28,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":197,"dns":1,"connect":104,"send":0,"wait":107,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/6748.6d5ce9f5ef06e04b1258b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/6748.6d5ce9f5ef06e04b1258b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8084\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8084,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7759)","md5":"b8a6d0d4859da592d66a1a3a62390570","sha1":"cd41fa6d2a504e79ffed682c36f8d7d83545f0f8","sha256":"b8c5b8800331a0618ef36b0b7782dc8693efefcec26263c93fa2500d4c17cee8","sha512":"1f4f99e0e44924f2d7c6ad69af20a408659eac1ca2988244226c5842e605f3157c9fe0abcc4c079160ba4dd7ec3d87a0d1b7382ca4540dc9bc882dfd3f754bef","ssdeep":"96:iX+0sXJ8s0gBJXsJg0JRiJTOJuFTJ21JutJY1JbJuC1JEJeJsJKyJGaJJpNJjJGW:iX+0XqX9aE5FNBUGIeIb5wpw6","tlshash":"27f1c4dcb360943994e396de3b17569c640ad40f5a2789bfef02a70474d27bb221cb0d","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.556333Z","times_seen":29,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/9722.547f5937cc9b9749cdc1b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/9722.547f5937cc9b9749cdc1b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 10516\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10516,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10191)","md5":"0926ea2533f28db8d65a144bfdc22d3d","sha1":"8122b0dced6b4fa0659f75e85a782c4bdffae708","sha256":"1f1d9c98dd75f702956053b15955a772ccbe6e474e5a23bcb0f53b3ed10a355d","sha512":"44b3a93a4701c7b9ee6cbc244ec23044c929243d3fde9b10f5312309df9497f779c9c416003b7593e8547047e03c8783f830e8054ccbc96fc7d57f8e71adbf68","ssdeep":"192:iX+b8GHkAbYa/dBSORB2gX8HKeICEr4DGtzAgbWVGrBGc7TI:iObIAB/SORHefEr4DGtzz0GrBRnI","tlshash":"47224478f340107fbb9397fc6e92236a984969f1c8400feb75256034a2e3adf2166d5c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.551103Z","times_seen":37,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":205,"dns":1,"connect":115,"send":0,"wait":114,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/4945.437528e6ed72f5fea2e3b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/4945.437528e6ed72f5fea2e3b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 11095\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11095,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10770)","md5":"53e26c08a76329708c391a8c295af2d2","sha1":"6e3484b99a7aa666f2c49b58a0a8acea65a24749","sha256":"5614d28e0f2daffec19930b489324ff4adbc232dd60d9c7bb8f5ec377917f929","sha512":"f38f530d7264adc8f8a4349a1763c82a4afa7e857956011c5e8fdfa97df86b39e97ccdd28e97834000db08a35f73ca3986a9f1745fd4921c240fcbbb17bb676a","ssdeep":"96:iX+9/b+llsWj+j+ZB+mwPqckGXXutkiIE+RwtHko+s7MesjrAc6nN7K6e3nXvAcV:iX+9b4XF4Fx2+RnvxP162EjikUxEW9j","tlshash":"a13224dbcb54af1fa24293d9b51750603b815cd5953e3d63b9842ad023eb68b843e23f","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.51077Z","times_seen":37,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":206,"dns":1,"connect":112,"send":0,"wait":114,"receive":104,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/6814.5d220b3de3ac7fb97a1ab22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/6814.5d220b3de3ac7fb97a1ab22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5058\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5058,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4733)","md5":"4584a4cf5ec6132fd4a5c99553c3ed63","sha1":"13afb6bc99f6ea96d189dfa6bacd8a4d77438c81","sha256":"de417af518a3b60b5ac32bc08dcd0c89cb4e71264a0b103f57e52e3f4fdf1a46","sha512":"10148f6ba95f8f148587455b386e021963909c95517a42daac8d98399f6a5451c8ce0efa3b1a529d9b595fc204ee35cb84c9b65eed8a50f47190305e36eee2dd","ssdeep":"48:KxX8/4GVelvpVQqifeuvKydicw2mZ6TNtKrqXbm1Fjn2dkOH7:iX+ClnQ7fTKydiZ2mZ6BtKrqXbm1Fj6","tlshash":"04a18f5cd321967bbc6fd7bf3aa8eb882594b15dc40207d57b80c01911daee12526a1f","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.517687Z","times_seen":29,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin.intuitcdn.net/identity-authn-core-ui/ius-base-theme-intuit-ecosystem.1f773202571e27d9de7bb22d17e7.css","fqdn":"plugin.intuitcdn.net","domain":"intuitcdn.net","tld":"net"},"ip":{"addr":"2.20.164.106","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.intuitcdn.net","organization":"Intuit Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:5D:ED:88:3F:D4:8E:43:07:79:25:76:2C:E0:E6:F1:57:51:4B:4D","sha256":"81:52:90:20:13:62:8F:2F:72:13:62:54:D7:C4:A7:20:CA:09:75:65:F3:C0:23:E6:07:23:EC:D5:43:EA:29:1D"}}},"request":{"raw":"GET /identity-authn-core-ui/ius-base-theme-intuit-ecosystem.1f773202571e27d9de7bb22d17e7.css HTTP/1.1\r\nHost: plugin.intuitcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eat.ru.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2756\r\nlast-modified: Thu, 29 Sep 2022 00:50:58 GMT\r\netag: \"034bf728fa613708faea5e370c4d1129\"\r\nx-amz-meta-version: 1.518.0\r\nx-amz-meta-module: identity-authn-core-ui\r\nx-amz-meta-type: plugin\r\nx-amz-meta-slug: identity-authn-core-ui/1.518.0\r\nx-amz-meta-id: identity-authn-core-ui\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-amz-cf-pop: ORD56-P16\r\nx-amz-cf-id: fx1U0hbGtDoNHdCyKa-cG4E2vwNXbvLiDgKdG3O2aGxMM8IozjEsqA==\r\ndate: Wed, 18 Mar 2026 10:42:34 GMT\r\ntiming-allow-origin: *, *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31556926, immutable\r\nx-origin-src: uxf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9977,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9625)","md5":"7f75ff11b6ad0cce38ff0f1815a9277c","sha1":"6a5fc00f51b8bc01c92576e69a53f0e99be54d24","sha256":"41cbd6db6b8e0214003b91c8b73dd087ba7c149e952f7467138abf99d8ade3f0","sha512":"27994bd8fe15157df320ff6c70369e55450841f46013aee72d492a47f713640410585e1286f2d7e744d3c916e4e03baa440a9efb9441a2b4a7be198bbe42722a","ssdeep":"192:iX+VlGkM2p7TneursE3nap+NXbbGYGVOlOQ4BoMkZODr3j3nE9Wlc5fWEduQgq9:iOVlhfPrsE3ap+NXbJlT4BoMkZg3j3yP","tlshash":"ac227531b26135167c7d4cee9031fcc27f677612884229b6b4a3adf4db4e59b2f22618","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.514095Z","times_seen":58,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":52,"connect":3,"send":0,"wait":4,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/9633.175e9e7bd77cf557625db22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/9633.175e9e7bd77cf557625db22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1257\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (932)","md5":"6f07c793655c25691d2d9d0a8c48c388","sha1":"857c6abe421f75583e8b4a27447ac06a5e014619","sha256":"8db34060919612def80e0da1692db3dfe90d2b3590e6f7895b5ef0b14b6d82ca","sha512":"dac88cf27de25e79035fd192c670875120b9c076869a0247f638d868e80f6db4bc5b6a5e997e4c671487316aa9f1a8029ef39e75db825562bfa30f7ba88886a2","ssdeep":"","tlshash":"6721ab8eb3e42e3fad47c3ae35827580461cc5c041127e6af448866667c35f23e10b8c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.545898Z","times_seen":28,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/settings.js","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/settings.js HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 263\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"fb51c4a0210f4ef1da549e234212feb1","sha1":"109bc928f15d7d60d88f14425070e89f9851565b","sha256":"b8fa410138811e31593b744c71a6c1ef84dcf942805d293dcafa5d40332adf2b","sha512":"2c22a612acf9a3e8b3d41f2a73c70c39db08339fdf7eac2065ef0280b8314346b7bc60a8ec8c308e31bfecca837786f934a2a18ecb50e7bd2e2c0eab2388a762","ssdeep":"","tlshash":"64d095011a71243d268003fc8148402d5b5d6f5971d4f17f946fd15c4f9e9e1f1314dd","first_seen":"2026-03-16T04:35:30.650445Z","last_seen":"2026-03-18T12:50:22.217134Z","times_seen":17,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/gtdtls.js","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/gtdtls.js HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 125350\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":125350,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15f3260e252a10cfd8855718ae917699","sha1":"f3a68ecbd26199e4c12787684cd8350c7ff96a7f","sha256":"b195230e6bedb5b23bcdc992db68f0490171e3f5b48ca45b86c468f2cac34dd6","sha512":"e3eaceca1f4a786a7bf9f0a7b9d170b37c05b63b76212becbce93ef4a87529ca090359734496b23dd1ef527e1b8e73030dc9b3184fd309bd95c12c184ab20965","ssdeep":"1536:kAlYtNf4pu4iHN7vAy8+QVdjlM8oY2yPvMmwB9e8exP6pDQBZa:JmF4iHNrAy8+QzpEuW3JQG","tlshash":"cfc32f81b3d1bc8112875bb6771bb2e6e52e4ce874c8488bf104bca0f5bd906fae5571","first_seen":"2023-07-28T08:38:49Z","last_seen":"2026-03-18T12:50:22.221488Z","times_seen":31,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":104,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/ius-hostedui-base.css?v=1.70.0.657","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/ius-hostedui-base.css?v=1.70.0.657 HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9510\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9510), with no line terminators","md5":"465a51d92c323da0dfa34ff504c227f4","sha1":"d65f6a1713191c7c9e861ad79208a847b8638035","sha256":"3bc0d164b1769b94df670119e9fa5b8780a95ef2a340b721766c33134a106fce","sha512":"5362611db28bd8a4088a163bbac593cc8ac1c67dc7072b531740ba281c26770eeb57a7d33c35b45e37da4bbb2d18de00e4470e9eda39c9f52422ea0abbff0ab6","ssdeep":"192:nKWsYrmWoBsY7XsY/z5hF4m6rreAtmAzt/tHKVmTRvkqt4/4fUp:nKBN4V3Bm01qi9kqt4T","tlshash":"6d12873ce4b5da2abf328ddd50732da67c6ab87291428df96443b3a4ff41e610e31524","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.550285Z","times_seen":48,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":195,"dns":1,"connect":105,"send":0,"wait":106,"receive":1,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/7216.ea3151739a4912779b2fb22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/7216.ea3151739a4912779b2fb22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4638\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4638,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4313)","md5":"ff0f67ee31d343494226d26079233ca0","sha1":"ffcecb79defd36281dd8714fc246981196c9c9d0","sha256":"eaaf6decfe593e241583aa9b64d93c5e32096fa980e11f19fbf24d7a8502a19e","sha512":"8fa14d37e85e1b9c2085e217bf2c832c2665cf08acd31eed9d886321a81349c42833cd08fc4dac79d441954139e8fa4185224fc8b99b61a6119e37403414bf09","ssdeep":"48:KxX8/BpfQ201J0iHzte9jtAqer15f9Yh9Ju/OKXk3+OuUn/kqrELOYDOKbTdc9dj:iX+NNgNb/O+u/7EL1DiEEN","tlshash":"9fa17bc9f68655a60803febde3ebfc85c9a81d19cb162e93fd102b9c40a57a71933705","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.555574Z","times_seen":29,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/2151.190afac97f3166cebbe6b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/2151.190afac97f3166cebbe6b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3658\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3658,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3333)","md5":"71fc88b83296d4a5167b7cc76ef47aa7","sha1":"68628b81284780ee8183fc026ab3b92dcea71bf2","sha256":"27b27dbdc5d61d65de91a0edddb6365cee6c8fd6ef0eda9f1fa301b3e3ea7cd5","sha512":"d7d916d0a4613c91f430b197102965f7fb15d88fa5dc2de2e73bd3c253f7ec3d54ba3b5ad14620685f4e4e10fdd743599f1cd1970369c447241937bfddbf5ed9","ssdeep":"","tlshash":"c671ef5fe36375cbb00f859e6246374412334a41c5ab59baee0121de80de5ff932a24e","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.519817Z","times_seen":29,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":413,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/4884.2884023e29b01d06473db22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/4884.2884023e29b01d06473db22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8650\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8650,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8321)","md5":"360964c6d67d8a80c6395f38aebca696","sha1":"50fe065819392f2175db42df5338441c60615a89","sha256":"c399e932a5eeaecbd1152749127cdf8e4040b59e443fff221524ca3a1b9cd9e5","sha512":"68ef0436e7f9ba89d0f7b803ffa341141caa8090fc07c59f0be6c0dc1f7643c2ac672237400e227896d9bd3fadd3f366e1616b658560a2d52b9a22a945c98802","ssdeep":"96:iX+OvPz4NNvCN/X0eRhz6zveFbgM5wYQNl5x+JRLJX4sHzpl2Ni0upRHmCEhM:iX+Ov8jvCphzYveRWKJUQppRHiM","tlshash":"3102737182305025beb54ddde273ad872f07b550d553f5bf7af288a0c68e4de2b62424","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.54651Z","times_seen":28,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin.intuitcdn.net/identity-authn-core-ui/ius-base-widget-header-footer-intuit-ecosystem.e8dd13454b148c04af49b22d17e7.css","fqdn":"plugin.intuitcdn.net","domain":"intuitcdn.net","tld":"net"},"ip":{"addr":"2.20.164.106","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.intuitcdn.net","organization":"Intuit Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:5D:ED:88:3F:D4:8E:43:07:79:25:76:2C:E0:E6:F1:57:51:4B:4D","sha256":"81:52:90:20:13:62:8F:2F:72:13:62:54:D7:C4:A7:20:CA:09:75:65:F3:C0:23:E6:07:23:EC:D5:43:EA:29:1D"}}},"request":{"raw":"GET /identity-authn-core-ui/ius-base-widget-header-footer-intuit-ecosystem.e8dd13454b148c04af49b22d17e7.css HTTP/1.1\r\nHost: plugin.intuitcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eat.ru.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 12155\r\nlast-modified: Tue, 13 Sep 2022 01:42:00 GMT\r\netag: \"438ba73a82c4da7ca17cbaebb4a53367\"\r\nx-amz-meta-version: 1.500.1-apr.3370.b.1\r\nx-amz-meta-module: identity-authn-core-ui\r\nx-amz-meta-type: plugin\r\nx-amz-meta-slug: identity-authn-core-ui/1.500.1-apr.3370.b.1\r\nx-amz-meta-id: identity-authn-core-ui\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-amz-cf-pop: ORD56-P16\r\nx-amz-cf-id: xta-pRy-vEB8GBK6AKp37MCvOBWaNoyYXiXBigHz_FwTKXxeaLWTlA==\r\ndate: Wed, 18 Mar 2026 10:42:34 GMT\r\ntiming-allow-origin: *, *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31556926, immutable\r\nx-origin-src: uxf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58287,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (57920)","md5":"9cde0cf9604e70d6d3039d057c508321","sha1":"30bd0f1f177f2ef59659b43c39c3763c6cf512db","sha256":"fc1c204901c1ed9f7539a61d081a363a5e96ee41849eb29babcdceeee3bfda04","sha512":"e1a03991a1c50dfe397159d3114097688b9166f3a877585bfb721ac174d21341267e40eecce009da49f1eb49b4b6e9b00c1b1931eef114916b8b2651f7b4a28f","ssdeep":"1536:H+iLltG7Spoggalgn7Soogg70RhaMftV54:eiLltG7Spognlgn7Soog80XltV54","tlshash":"3043b83ac61a65f32d3c3cef82b6384d1a4cf696542345e0f05a68e9d51fb3b291a17c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.539533Z","times_seen":58,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":50,"connect":3,"send":0,"wait":2,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/8938.6d5dc1a45cbfbe3b09bdb22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/8938.6d5dc1a45cbfbe3b09bdb22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1066\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (741)","md5":"b2e079aeaabb2d1451ef4bcb0fc3ca17","sha1":"46caa66c6ac932ca3c5223b97729a543454bc0b7","sha256":"002d41264c996946460b2f6fa31fd1be45ed2af681a6113fc47595e13264850f","sha512":"7a6080f1a0fa6a7b25e7ee99b2625bcee435226adeb376844ccc54bfe1c8072dd075602ddfa3e0e7a2d7ed2028f6e4f933ae6b5de4b87d28f7b302e9cfed7ce7","ssdeep":"","tlshash":"d61100ec93346436cd22c3ea338676466310ea91485312f7df21480b46f3ab39210e3c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.534073Z","times_seen":29,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":410,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/father.js","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/father.js HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7941\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7941,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (306), with CRLF line terminators","md5":"0e73478b86a9bdf42f27204603e5507f","sha1":"24390b3e71cfc3b9daff699effa792f1904d626e","sha256":"3274993c2ccd9b85c3597b1e5d08288dadb9611210575b093c33274c9d3bc846","sha512":"0d03df4cd0db1dc8d1fe45ed8f022862ce8ffa8bb8685f6d976f7f28e0d097cfb83e9098a9533983eb3a66afb276a9d3d3fda9dd2ffdfd6b5e4b49db6041252f","ssdeep":"192:7eKU6g0l0OWpZG0cWYB09OWlzSlV09pWqSd0rWNOHEhauLak:7lU6g0l0OW/G0cWYB09OWQn09pWq40ri","tlshash":"7df19eda19fb6c209df3577b1b0f4641ea37653f241b146072de90942f2e250e29bfa8","first_seen":"2023-03-08T20:51:43Z","last_seen":"2026-06-18T11:07:14.544654Z","times_seen":138,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":567,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-18","alert":"Detects file containing Telegram Bot API","trigger":"eat.ru.com/1dda1841f/in-house/father.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T10:42:33.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/ HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:33 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 97372\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97372,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65202), with CRLF line terminators","md5":"671dc7729b2b864da9e424cc095b0f85","sha1":"6216c75d58b536b243b2c7970e90b6000a4cfff1","sha256":"9fb0e0a82e7bb8ec05ea598914cc7fc7c1e8e88c7bcc02d68737e5140d8f65e2","sha512":"0c850bd8fd187514d9a72b629015a3d824e0290d9651cf1704c72d56e129cccf0cdf1de458f27532b9c10cd3fe951448a907fa214b1083cbbbc38144ed8b735e","ssdeep":"1536:7lle7ORPW9HRHp23QF78EYswh5IbkqPWGZyWHFhXsCq/3gXGbGDVNCp+:7lY7ORPW9HRHpKQFgawh+bkqPWijHFhV","tlshash":"f6930a2ace6498157e311defe0fbaecbe609a393424119f0f84d72c98f79f162a1541d","first_seen":"2023-07-16T12:44:02Z","last_seen":"2026-03-18T12:50:22.233623Z","times_seen":30,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/1077.ee6d46e68051f7d05ef9b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/1077.ee6d46e68051f7d05ef9b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 10638\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10638,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10313)","md5":"7e01420c4b5c7397cbee5b653f93dc86","sha1":"fdfac60d80ecb5956bfaddd8b0a511a329dbf389","sha256":"ad8c07bbae3d02e57b080186306862f17d137ef02764122ebcf0b3ae9f59455d","sha512":"6bc0ddd339a7a634edb5208569836ee146301751fb49e3b3fb38d750572e2bbc469f8d3e747315e7cbdad5e5773c21bcd34dd7d451913762595c58f7583cc15e","ssdeep":"96:iX+LxroELua60ITl3Gou8BQ35ZvxO8waRU/RQzGKMLu4eqXavtYRo:iX+KlatI0Kk5ZJO8Ve/RQzGKMjetFYRo","tlshash":"0f229798a307692fa53381bd61915b51178e084d8de3adb6f9186047179ffea0bf8e0c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.527965Z","times_seen":37,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/41.37bae48b1095e94ab516b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/41.37bae48b1095e94ab516b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5171\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5171,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4848)","md5":"5a9ae128491fd530ad0d8e2013bcbd01","sha1":"88e9943851034aa9cd1af8e74b040c8e27892850","sha256":"d18594370adca19e9087a787fce366d384222910eb369cb116b4bc306100f3ec","sha512":"3fc54248918ea150ce8f123f4a3a6c45b8b3862e9fc424d9133bf4c94e3e782226412f9a0b7238638e6b83db50b97310c4c5ba68aba2bfb2400368afbc8b57b8","ssdeep":"96:iX+K8lhibsonykLjA7AfA1A7Eo4uWuTI4wnrQ7im:iX+KGGsC8EoKhvrSTm","tlshash":"12b169778f104beb763285e9d6169883b03a790187206e37dac5c0769ddfcd60a3b95c","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.538859Z","times_seen":29,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/1336.c11d35cd2d69b0853a3fb22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/1336.c11d35cd2d69b0853a3fb22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6134\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6134,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5809)","md5":"876b715abbddadfd1e2eceaaa7e47578","sha1":"1a9cd75f2948d7d4d8f3da09f5075f7c456e8810","sha256":"2279527cf434abb103e01215fb4fd3ee2eafc603a9590c08a09b7401e680ed15","sha512":"46982da6e2d7448a5ea86c990b06a76b3d9443b126236d7c2c2c024f5f06d71308a48dd428a7653bb16942f92e52e44dd4980d3051cda6bc1d9431b5d6f4ddc2","ssdeep":"96:iX+jM74AgiUSoSrSg9yh15vQvIHxllf/LxHh7UrFNot:iX+glgiNR2g9kftBRt","tlshash":"6ec1118ce704456feb43f3df6783f98025864e0184662973aa17b5c5caff996423392b","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.521872Z","times_seen":29,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/script.js","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/script.js HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 17682\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17682,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17682), with no line terminators","md5":"68975ce1d5d5e72390393c3bb308c850","sha1":"c7fea88432013d458a4c44399b35cec544a608f5","sha256":"4e8d896005806dc645ac6621644fc1e503f67ad17886595dc1d9c675de13c32d","sha512":"228a026b59713b270b40f4a579a3448c41096c3c042d25a6f406dfad47f0c397438ef78863323e65743096acf4a57c0ebdb27bfaebd1dfc9d40d887bd9ba3157","ssdeep":"384:1zE2SoQMi5mHtQZWdudFyyL6vaASBqysv9biQ3nSga:1zE2vQMi5mHtT4dFUaA6qysVmQ3Sga","tlshash":"508246003e9067985a5687ff311aa1c6e17a4cbe7d804c4fe4189d5726eb70be3fa474","first_seen":"2023-07-28T08:38:49Z","last_seen":"2026-03-18T12:50:22.232361Z","times_seen":31,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":584,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-18","alert":"Detects file containing Telegram Bot API","trigger":"eat.ru.com/1dda1841f/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T10:42:33.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 18 Mar 2026 10:42:33 GMT\r\nServer: Apache\r\nLocation: https://eat.ru.com/1dda1841f/\r\nContent-Length: 277\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97372,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T18:49:25.683007Z","times_seen":17747766,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/2275.a61e6c08e2313433a3c0b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/2275.a61e6c08e2313433a3c0b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6362\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6362,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6037)","md5":"de02c13efa699e5f43cb8e9f75f2f275","sha1":"3ae10cce6580ced8dbe08f11d6b809ef5dc2371e","sha256":"21309a702ce610e0f5407b7a84409f57dddd704083888b5a5b480037ba3778f9","sha512":"17ce70d0f01cb8e8e1740127b7eb5f4bcad005b699264c68d6c7256560b26f0effcff667ebf4271f7055e354b024ad91c366aa5caa7a20c1d3236890c2318305","ssdeep":"96:iX+ZlzdG5YyzAn+Y6Mz2kTrybOqKFB3FgJtUgYIOUsWJg:iX+dG5YYMHfD4UjIO7","tlshash":"87d19ab9d251f277acc6cffd72d8d58d1d8013218c0226a6ba37496025ea49b173bf2d","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.541121Z","times_seen":29,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/101.bf80c1ff99285b8ad727b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/101.bf80c1ff99285b8ad727b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 96920\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":96920,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65276)","md5":"899de19744d1ad4169daefd1038be61f","sha1":"db9625429912ba90dc2824da5c4f8f3b7baae2d4","sha256":"728c681f214f818c29aa0e26fba92fb435e52109ab6499dbfe6d6af66d52ab70","sha512":"21ac3a7be21c27e30a52c78b46b2176de943aee52ded9739785951d81b6812eb14da1f5d6386267f223edd318fc7b0a987750cc423660e2eeca7d0594fd95a5b","ssdeep":"1536:H+i2i65VENWw4D6V9E9Ki0VfqJekhD93EY9gri6EVENi07fqJgkhDGVE+0RhyRNA:ei2CWlm09VgrpU20XyzBWl9GVC6nFj3q","tlshash":"9493983a574a64f33d3c3cef829b3d4d5589f3a158635690f0e68d9dd00ea2f351a2a8","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.522714Z","times_seen":35,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":110,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin.intuitcdn.net/identity-authn-core-ui/ius-base.93e29c591f70e748a2c1b22d17e7.css","fqdn":"plugin.intuitcdn.net","domain":"intuitcdn.net","tld":"net"},"ip":{"addr":"2.20.164.106","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.intuitcdn.net","organization":"Intuit Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:5D:ED:88:3F:D4:8E:43:07:79:25:76:2C:E0:E6:F1:57:51:4B:4D","sha256":"81:52:90:20:13:62:8F:2F:72:13:62:54:D7:C4:A7:20:CA:09:75:65:F3:C0:23:E6:07:23:EC:D5:43:EA:29:1D"}}},"request":{"raw":"GET /identity-authn-core-ui/ius-base.93e29c591f70e748a2c1b22d17e7.css HTTP/1.1\r\nHost: plugin.intuitcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eat.ru.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 7331\r\nlast-modified: Thu, 29 Sep 2022 00:50:58 GMT\r\netag: \"c35416576f4b8232fa947cf3a6296496\"\r\nx-amz-meta-version: 1.518.0\r\nx-amz-meta-module: identity-authn-core-ui\r\nx-amz-meta-type: plugin\r\nx-amz-meta-slug: identity-authn-core-ui/1.518.0\r\nx-amz-meta-id: identity-authn-core-ui\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-amz-cf-pop: ORD56-P16\r\nx-amz-cf-id: j2S47c3QIqK-xAFHi6-_SsScdIdvqptA7OK1P7tSiaXGQ_ipvAEN2A==\r\ndate: Wed, 18 Mar 2026 10:42:34 GMT\r\ntiming-allow-origin: *, *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31556926, immutable\r\nx-origin-src: uxf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":26845,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26516)","md5":"1d286de0b9853b33c8599a86954f29be","sha1":"4e42358aea1d405e83b4d3f57f230808a5d4ca98","sha256":"6e2f47313b9fa6ce42d9999e701644b60af8e30cf65972468843f32c1eccd701","sha512":"61d716792e5402160859d0ce0f6b89a7e812bf40bde50a602ff745b4aedbf1629ae9f44715eb61a5bd3f7ccf648d9a9990be411b29a0e73f60680c5ea8302962","ssdeep":"384:iO2OObymyzKZ7ifqaRylRqaRaqaRtAqaRmCSRRqaRTqaR+qaRLUqaRcPLz+LT6EZ:iOzOt2sijtC7hsYL/k6hpjpH8lACJ","tlshash":"97c2b632960521297c3b8cfed0716cd96f56bf02968356fdf493ece4c24d49b2b26228","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.523453Z","times_seen":58,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":72,"dns":53,"connect":1,"send":0,"wait":4,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/bakcbone-proto.js","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/bakcbone-proto.js HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 89664\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89664,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-08-06T18:46:14.695125Z","times_seen":34137,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":110,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/5456.cd17850a95d090b67c49b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/5456.cd17850a95d090b67c49b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4915\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4590)","md5":"66470f6cb3de3aee16fc427879824546","sha1":"083ef731fea789a44eae5da4ddb9fc3e0a095bd2","sha256":"c1dee08056ece72abe5b46f4d5d1b98fe0152da36096805b12ce8f06901d826f","sha512":"1d328041a7c70d21104cfa131995de997c0a8a0785cb7e8834689e36b6260713b241bc613690f471849d2c2e0e932aad7a18687384c22c8c678047ad072ce3f4","ssdeep":"96:iX+wQSLLVc90U8A0cz36IDiBv4lBdnGnkYUmCTn:iX+wQSLKCyNDh0U/n","tlshash":"22a17ce49270abbb75bd6a5e3fa1cc255fc1f543e53049efbe047d9804c29a70623258","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.545374Z","times_seen":29,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":204,"dns":1,"connect":110,"send":0,"wait":114,"receive":1,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eat.ru.com/1dda1841f/in-house/7363.fb0b79462a878040dc66b22d17e7.css","fqdn":"eat.ru.com","domain":"eat.ru.com","tld":"ru.com"},"ip":{"addr":"155.2.192.158","port":443,"asn":2386,"as":"INS-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eat.ru.com/1dda1841f/","date":"2026-03-18T10:42:34.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eat.ru.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 13:41:55 GMT","end":"Fri, 22 May 2026 13:41:54 GMT"},"fingerprint":{"sha1":"82:7E:8F:B8:C5:CB:98:5E:1D:10:75:65:24:8F:FD:18:8D:73:82:0C","sha256":"F5:09:DD:05:0A:2C:EA:C0:6B:DD:1B:C7:EB:1D:BC:66:B4:86:66:E3:7C:5E:F0:44:7F:D6:94:08:E9:5F:04:12"}}},"request":{"raw":"GET /1dda1841f/in-house/7363.fb0b79462a878040dc66b22d17e7.css HTTP/1.1\r\nHost: eat.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eat.ru.com/1dda1841f/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 10:42:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 18 Mar 2026 10:42:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 10970\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10970,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10645)","md5":"99dde04b2d7a4173b196e8b3e51eafbf","sha1":"3d57d4d3a9789e456abd0aeb52e3af67f237adf9","sha256":"07451d2094ab791114245ffa3f2631caac0c7f20bef2df21bffe976b94315da5","sha512":"0048d08b6a4a3d97f97d0222f90368261ea17cc77c19e5fc460fa1ec06bb5fb5ec26116a15afb8cb4e64a54c3da505d67a35b82db2f396c49f8cb26fec14cdfb","ssdeep":"192:iX+j75j6osZg6W9zO+TyZ4MYkuJC1ZH00Kk:iOj7Yo9++q4MYrJu0G","tlshash":"2332cf84bfbdb53ddd9f4baf31eb8c5d5222865289012cdba925500e48f76bb00b724d","first_seen":"2023-04-07T20:38:12Z","last_seen":"2026-06-18T11:07:14.537241Z","times_seen":37,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":309,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"eat.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"eat.ru.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}