{"report_id":"f510124b-c6ab-4460-bc2c-40c5c7a50cc6","version":0,"status":"done","tags":[],"date":"2026-09-19T11:38:42Z","url":{"schema":"http","addr":"t-servis.com/","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"t-servis.com/","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"title":"Т-Сервис - Транспортная компания","dom":{"size":121382,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1646)","md5":"8824a7e40a08a168b0aee0b63800f368","sha1":"f3355b8940e8c8c0a0385482f166d7d2ecc2ea9c","sha256":"e9ace81b3bbc54ab6015f98068c7d9d3dc2bace04fabc103cbabd3dd8f73d8f4","sha512":"70bffcb77af26e7b02adcfd5c9e894f49f553fba032a3c183c056125475c314af89fbff09fb5fdf91e44022d3c8b7591b4d51eb4689b24153dc3fef2ff301aa5","ssdeep":"3072:7K0vhKg0dN4MYPR0yx6rN88koeM0s+Dg/9P:710yi88kFDg/V","tlshash":"dbc3e86055f4146b0042d086fd256f0a7de9d0bfae1b4600b6fc1aed6fd7ca8c82b25e","dom_hash":"domhashf41e9895f4d6f001508b5d808b529490","first_seen":"2026-09-19T11:38:47.70453Z","last_seen":"2026-09-19T11:38:47.70453Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"t-servis.com/","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T11:38:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"t-servis.com","ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-02","domain_rank":0,"first_seen":"2025-07-06T07:23:57.074948Z","last_seen":"2026-09-19T11:21:36.907562Z","alert_count":129,"request_count":43,"received_data":8703174,"sent_data":26243,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Yandex.Metrika","description":"Yandex.Metrica is a free web analytics service that tracks and reports website traffic.","website":"https://metrika.yandex.com","common_platform_enumeration":"","icon":"Yandex.Metrika.png","categories":["Analytics"]},{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":1,"received_data":847158,"sent_data":498,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":1,"received_data":1654,"sent_data":473,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t-servis.com/bitrix/cache/js/s1/t-service/kernel_main/kernel_main_v1.js?1753269214148417","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9163880889edacfd1925a488f1e9c2f","sha1":"40cf1a0326c6e45b2c379b101642046426877a24","sha256":"64ab56f2b82e02f49ca4d6b67b1c2d1b8095edc2dc77bb991a02487558797473","sha512":"ac86a918c8c02ca53182045a359a3b08e5205d5a1d263638c9bc86886de36fd3186d8fee880e23f6954923021d96de1d74c3dd0e0563cd42ac8b398a7db122d9","ssdeep":"3072:+Mqm08nytsqlT+zXSk3TXBH4XNRk5+U+MlC:+lGaT+zXS4YNR7QC","tlshash":"25e3e7497061313ea3f6d1b9113b030572319419ea8b586cb968edfa5cf8d0732bafb5","size":148417,"data":"","first_seen":"2026-09-19T11:21:40.145367Z","last_seen":"2026-09-19T11:38:47.705771Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c332c85e79e41b93beec167a4f7d38d8","sha1":"e6e7ae7e12ef45e5b49474d45efb1238cabc552f","sha256":"968b9d3d9dcfb9d38daf0913b7a310525fe9af23015cf3dbca84481ac2985c7f","sha512":"0a0ed0fde7a16492a6f8cc6512e66686bb0e86879ccdde685acd87300b5382456d09f0e948130f64a0b370cba95d3a3fa81b5565f57af0fd2344635d83e92f51","ssdeep":"","tlshash":"0e1121b71604f0354b3209e5e1fecbb5e442701cf15885e8a425dec52e6adc7ce05684","size":976,"data":"","first_seen":"2026-09-14T20:50:39.039311Z","last_seen":"2026-09-20T12:59:10.131587Z","times_seen":446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/cache/js/s1/t-service/template_ea9499feae90dd78230650cd86cb86f3/template_ea9499feae90dd78230650cd86cb86f3_v1.js?1753269214583709","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20ffaca142cd7632e59ae0248a3a291b","sha1":"cd1839818275ebf93f5950cac8c674f36e946421","sha256":"f787b351987ae25eea41df5e07ca2a71dbecf3630c583732c0d25e778056218c","sha512":"67bbfdc1e413dbc44ea0b33418b2f017ba438f69fd35ba01d72b053a217a6cffffacdbc1a09df664a56d9d34468ceee5115ce725d0eeb0c85c79d31c546affe4","ssdeep":"12288:wSeK+/GzwkPpl1Z9rSs3P+xiVvuo+ZCgrdH:wSeK+/GMkPpl1Z9rz3P+xiVvuo+ZCgrR","tlshash":"1ac42a89b251325282e730a4517f420bb27769aaf808c4a8b5b9c4d67e7cd4c11bff7d","size":583709,"data":"","first_seen":"2026-09-19T11:21:40.132977Z","last_seen":"2026-09-19T11:38:47.716141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","size":846252,"data":"","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-20T14:31:28.828262Z","times_seen":2496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/js/main/core/core.min.js?1751287383230432","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"61e3c9b6d06d1d8ddc1956e74f6a14e1","sha1":"fc0de710d6f6a7058b48feed58f669cb62add010","sha256":"eaa34fbb9335f85d874a78a6aa187fd1d021cbc3b875eef0a0fc800abf2bbc3d","sha512":"37e8aee33a8d099e143b9862daa32d658120816e0e242619e8c16fee2f89b5d594256cd61d0492fab798318dd5e4e4b2bebe644f5c79420830213dcaeb26d469","ssdeep":"3072:kn38SMLrVpfRWpd0wqMIAgrus1CjPVqUdIbF6wGTQMjce:kn38SMLrVp2r8C+RHe","tlshash":"4934188871d2b17683eb24b4542f610bf23568a6658ec090f27cecd27db0d1a9677f78","size":230432,"data":"","first_seen":"2025-06-12T11:04:32.425017Z","last_seen":"2026-09-19T11:38:47.711452Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"t-servis.com/bitrix/cache/js/s1/t-service/kernel_main/kernel_main_v1.js?1753269214148417","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.936Z","timestamp":1789817886936,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /bitrix/cache/js/s1/t-service/kernel_main/kernel_main_v1.js?1753269214148417 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 23 Jul 2025 11:13:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6880c3de-243c1\"\r\nExpires: Mon, 19 Oct 2026 11:38:06 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148417,"size_decoded":34498,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (61485)","md5":"a9163880889edacfd1925a488f1e9c2f","sha1":"40cf1a0326c6e45b2c379b101642046426877a24","sha256":"64ab56f2b82e02f49ca4d6b67b1c2d1b8095edc2dc77bb991a02487558797473","sha512":"ac86a918c8c02ca53182045a359a3b08e5205d5a1d263638c9bc86886de36fd3186d8fee880e23f6954923021d96de1d74c3dd0e0563cd42ac8b398a7db122d9","ssdeep":"3072:+Mqm08nytsqlT+zXSk3TXBH4XNRk5+U+MlC:+lGaT+zXS4YNR7QC","tlshash":"25e3e7497061313ea3f6d1b9113b030572319419ea8b586cb968edfa5cf8d0732bafb5","first_seen":"2026-09-19T11:21:40.145367Z","last_seen":"2026-09-19T11:38:47.705771Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/arrows.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.973Z","timestamp":1789817886973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/arrows.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 379\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-17b\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":379,"size_decoded":730,"mime_type":"image/png","magic":"PNG image data, 50 x 25, 8-bit/color RGBA, non-interlaced","md5":"83448987358218ab790bdef8a0cfd671","sha1":"fd0608c66aa531f4f3372cbbaa8e21f4cddf2f0d","sha256":"3436d64f347e9b30fa876e1b0fe1b98a9fb43f5684831e01833535c79790a0d9","sha512":"bf7f4aad3e180b4024a6df2d48c72bf4ed002d25879bcbc9f250eb3e67ab2fc4a8d8a0b78da647d9da96fcc73cad7603e82f4c0f7e5c6cbbe5d7b6eabea8aa2a","ssdeep":"","tlshash":"a0e068b8b3494c3afe549521211c0df8a52248596ca98219f057d27832f9969e992729","first_seen":"2026-09-19T11:21:40.159028Z","last_seen":"2026-09-19T11:38:47.707174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/b32/woman.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.987Z","timestamp":1789817886987,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/b32/woman.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4694\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-1256\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4694,"size_decoded":4999,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"4b48be38362a8a5a143cb5ccedc9226e","sha1":"12e316cf68c6d5a6621085191d1866cdeebb3a34","sha256":"dcf1a7587839df36dd9847b1bcd078912e67692caef7ee897c0f8c2241ff17c0","sha512":"08471868a95af6a3404ea017c445c66ccea94d2a27a03f068b82b660a0fdc3f0d718956614f5ab3b3a8d125922a9275cbb3f16a74b74efc16c033dc5f407460a","ssdeep":"96:4o7F52Cnn8sLPO7++txp8lPPkvcT7XGgm239b:t7FR8qPO7++tx+1PqcHXs23x","tlshash":"04a16dcdf9761547dd499cc93cf7824eae128fd0c2d2a3bcd8d3156a6d850ba411e8c6","first_seen":"2026-09-19T11:21:40.109894Z","last_seen":"2026-09-19T11:38:47.708004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.061Z","timestamp":1789817887061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://t-servis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 89253\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354533,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-20T14:31:28.828262Z","times_seen":2496,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":16,"receive":62,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/037/man.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.979Z","timestamp":1789817886979,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/037/man.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4269\r\nLast-Modified: Thu, 11 May 2023 03:06:46 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc6-10ad\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4269,"size_decoded":4574,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"00b4a1473ed246f4b2c192162225359f","sha1":"95b5f5c2da7a3c6bd47e81b3dee977b9d0230cba","sha256":"2957c23ae2b73209e412ff10134d9d72c6a933b949c8505f9a0f0e0845bd492a","sha512":"2513dd67d44669c4ac2381612366dc9f175f6943facd180477a51945d63e50db28ceab82b7b24740b4bb1504dbec646accd7c4ce3f6c7476610815d83046c7e7","ssdeep":"96:4o7F52f2h7HxZPm1M5an8qPXF6W60MYxkTSXvICCWD0zojmDeQ0T3W:t7F328TZYfX/tPaDym","tlshash":"85915d20e880ff927bc1bec920ea8453e6354c9096d5e18e7a4cd0a07d502f91d7ed8d","first_seen":"2026-09-19T11:21:40.118179Z","last_seen":"2026-09-19T11:38:47.709852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/6b7/blago_sibirskiy.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.993Z","timestamp":1789817886993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/6b7/blago_sibirskiy.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 75263\r\nLast-Modified: Thu, 11 May 2023 03:06:48 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc8-125ff\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75263,"size_decoded":75571,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 905x1280, components 3","md5":"a38964a7591d20179ebb1ebec44b4d12","sha1":"68180f9c01ebe3fca5e50eb42b013b3c9e946e86","sha256":"df2e7b8fad80bacaa36b639342ddf1da45ca603891b170d22cedcede55b296d8","sha512":"02924e24ff609747883dfcdff1aa79f329b7a0f7cb95a5bc455cf9ba61d2a951083cea9454d6823b3e07df9faa7750af71384a2eac814174f0b2c405a6a55e3d","ssdeep":"768:z2CN8lQiz/KmiQb54D47TzXUwLryccqWvZhGpw3jKQgePYV5RvEVNwTlQo7r31NF:zx6t4U7TzX8qaG6gxV30a+o7rHaed","tlshash":"3a73df135c1b8563705fc9761a28351a621605081ad3477aba6c3fbfb2bd96f2cebc41","first_seen":"2026-09-19T11:21:40.124341Z","last_seen":"2026-09-19T11:38:47.710628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":59,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/js/main/core/core.min.js?1751287383230432","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.665Z","timestamp":1789817886665,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /bitrix/js/main/core/core.min.js?1751287383230432 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Jun 2025 12:43:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68628657-38420\"\r\nExpires: Mon, 19 Oct 2026 11:38:06 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230432,"size_decoded":68035,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65418)","md5":"61e3c9b6d06d1d8ddc1956e74f6a14e1","sha1":"fc0de710d6f6a7058b48feed58f669cb62add010","sha256":"eaa34fbb9335f85d874a78a6aa187fd1d021cbc3b875eef0a0fc800abf2bbc3d","sha512":"37e8aee33a8d099e143b9862daa32d658120816e0e242619e8c16fee2f89b5d594256cd61d0492fab798318dd5e4e4b2bebe644f5c79420830213dcaeb26d469","ssdeep":"3072:kn38SMLrVpfRWpd0wqMIAgrus1CjPVqUdIbF6wGTQMjce:kn38SMLrVp2r8C+RHe","tlshash":"4934188871d2b17683eb24b4542f610bf23568a6658ec090f27cecd27db0d1a9677f78","first_seen":"2025-06-12T11:04:32.425017Z","last_seen":"2026-09-19T11:38:47.711452Z","times_seen":538,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":73,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/572/man.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.981Z","timestamp":1789817886981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/572/man.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4269\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-10ad\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4269,"size_decoded":4574,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"00b4a1473ed246f4b2c192162225359f","sha1":"95b5f5c2da7a3c6bd47e81b3dee977b9d0230cba","sha256":"2957c23ae2b73209e412ff10134d9d72c6a933b949c8505f9a0f0e0845bd492a","sha512":"2513dd67d44669c4ac2381612366dc9f175f6943facd180477a51945d63e50db28ceab82b7b24740b4bb1504dbec646accd7c4ce3f6c7476610815d83046c7e7","ssdeep":"96:4o7F52f2h7HxZPm1M5an8qPXF6W60MYxkTSXvICCWD0zojmDeQ0T3W:t7F328TZYfX/tPaDym","tlshash":"85915d20e880ff927bc1bec920ea8453e6354c9096d5e18e7a4cd0a07d502f91d7ed8d","first_seen":"2026-09-19T11:21:40.118179Z","last_seen":"2026-09-19T11:38:47.709852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/b31/woman.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.984Z","timestamp":1789817886984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/b31/woman.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4694\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-1256\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4694,"size_decoded":4999,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"4b48be38362a8a5a143cb5ccedc9226e","sha1":"12e316cf68c6d5a6621085191d1866cdeebb3a34","sha256":"dcf1a7587839df36dd9847b1bcd078912e67692caef7ee897c0f8c2241ff17c0","sha512":"08471868a95af6a3404ea017c445c66ccea94d2a27a03f068b82b660a0fdc3f0d718956614f5ab3b3a8d125922a9275cbb3f16a74b74efc16c033dc5f407460a","ssdeep":"96:4o7F52Cnn8sLPO7++txp8lPPkvcT7XGgm239b:t7FR8qPO7++tx+1PqcHXs23x","tlshash":"04a16dcdf9761547dd499cc93cf7824eae128fd0c2d2a3bcd8d3156a6d850ba411e8c6","first_seen":"2026-09-19T11:21:40.109894Z","last_seen":"2026-09-19T11:38:47.708004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/7d6/_-_005_pages_to_jpg_0001.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.989Z","timestamp":1789817886989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/7d6/_-_005_pages_to_jpg_0001.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 440997\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-6baa5\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":440997,"size_decoded":441306,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 905x1280, components 3","md5":"c2d49f76ec22197abe12e3455e520848","sha1":"2ddf64e096dbb3708c30615dd72613eab2b32bf2","sha256":"0c7d1776f2dbb7d85e1a373ead811098994aea34728409f0fb98d73448e190df","sha512":"d1c40d7b1a3448912ea6706084114298eb311497a16fee0971f7839255bfdc86eb9230821913e0010a6964c1e08a594401e8d92001aa2b020004ebc3043697b2","ssdeep":"12288:3rpmmcjVqMQzVaAnLzBqld2olNsp1x0pAZamAq:3rcDxMhaAn0XhK3x0p+rX","tlshash":"d4941204afc5e985650cd7b8e4d014b8057c8f3586b6c289a0d45e27b7de6caaefc23c","first_seen":"2026-09-19T11:21:40.153128Z","last_seen":"2026-09-19T11:38:47.71198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":34,"receive":576,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/fonts/Roboto-Regular.ttf","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.227Z","timestamp":1789817887227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 171676\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-29e9c\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171676,"size_decoded":172047,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"3e1af3ef546b9e6ecef9f3ba197bf7d2","sha1":"dd1b1db13ff1f72138c134c62f38fef83749f36a","sha256":"79e851404657dac2106b3d22ad256d47824a9a5765458edb72c9102a45816d95","sha512":"81a9260aa3597c02c40ab4642c565d7584d99ddcb8a59addc92c15ba93f96f05f2c94dc77c2d5c11c1805f593d84e5e9c62373ecc6ca43a76d15c05c1b1d116e","ssdeep":"3072:Jyz4u0oy2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXZ10uNOIOU7og2i:JahOmCeu+bqPp1hWUMxFnI","tlshash":"50f3d601d642aa19c6d5f2787c7ca3be4c75e82dfd4a602734e5af2115c8c50ec69bbc","first_seen":"2023-04-06T12:06:13Z","last_seen":"2026-09-20T10:20:48.653391Z","times_seen":11192,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T11:38:06.115Z","timestamp":1789817886115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nP3P: policyref=\"/bitrix/p3p.xml\", CP=\"NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA\"\r\nX-Powered-CMS: Bitrix Site Manager (bcfee801cad55411a0d4bfb148d93fef)\r\nSet-Cookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; path=/; domain=t-servis.com; HttpOnly\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self';\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj","quoted":false,"path":"/","domain":"t-servis.com","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; path=/; domain=t-servis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Yandex.Metrika","description":"Yandex.Metrica is a free web analytics service that tracks and reports website traffic.","website":"https://metrika.yandex.com","common_platform_enumeration":"","icon":"Yandex.Metrika.png","categories":["Analytics"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]}],"data":{"size":102425,"size_decoded":21369,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1612), with CRLF, LF line terminators","md5":"968f96333227f24817d4788b09e91973","sha1":"56f92ac73f3a76b12a0eb366d5839fd5ec33d682","sha256":"cfb30129d44f403701aff4c66051087b70c9766b012f9b5e3cbf1405311cc82d","sha512":"3232bff9df022c36ddf05192d537197397ed69e7afc314569e22e6851e61f7d49e1825ab99747885e5510a8b53fdac5625858cb2176b2e4036ecdf22645be863","ssdeep":"3072:8QjhKg0dNNMYP50ykOhRNaZS5uuhponl38:8J0y7NaZSknl38","tlshash":"94a31a6065d018a70172c196fe256b0dfde840bba747870072fc299b6ff3c2ad52769e","first_seen":"2026-09-19T11:38:47.713184Z","last_seen":"2026-09-19T11:38:47.713184Z","times_seen":1,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":37,"connect":31,"send":0,"wait":193,"receive":30,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/e7d/blago_drimline.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.992Z","timestamp":1789817886992,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/e7d/blago_drimline.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 65876\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-10154\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65876,"size_decoded":66184,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 905x1280, components 3","md5":"4366371f7d81f8e710015a8359238a37","sha1":"da5a48689dc10e896c56cecaf346f143ba1b92c5","sha256":"72a51130de75bfc8b9e4712672b2cdc91957dcdd676afa6a4bbcdebe8617f866","sha512":"14a6510ba0be67c2de11f3d1b7694d03216d5457b2112b6d39632573cb64240f3e738ebf878ea6b2c4345cf990a3dff94a56378fb73fa0f9d44e7df399e85f21","ssdeep":"768:YXg8fHEjiTSACOgdj+0AkPbr3yMzUldpRzXWHKhlfc7uclmyYiaef2OLsjwKa1YY:YX3fkopqripbdfmflCJEF1y4RhZ","tlshash":"9253f1bd081a892fcf3e713b47395149272b1921ab065a6fef949315c7e1face366043","first_seen":"2026-09-19T11:21:40.147023Z","last_seen":"2026-09-19T11:38:47.714339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":56,"dns":0,"connect":32,"send":0,"wait":63,"receive":32,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/bf6/blago_tehnolog.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.995Z","timestamp":1789817886995,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/bf6/blago_tehnolog.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 84600\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-14a78\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84600,"size_decoded":84908,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 905x1280, components 3","md5":"7f16c792ee641f58f4511ad64eed07c1","sha1":"698ef475a1ef83456998bb143acc88525397a8bd","sha256":"afe9b0c1cff8eab9f2fba0b54cc727a044eec58e111991acb584f2d2f227e5e3","sha512":"32beb9117a1f03821679b87ef994c66f8f25b9b2801ec3ea3693887e4a13722c4b12826bc93d92465034b426aab4b0bcdf76fadfe0dfc0c46fbf6eeb03aa1ff9","ssdeep":"1536:LAAsVRq0ybh98zXm3103aZfacVAp8lB3VGqZ71TZaX:8hRv2yDs1bCSAeBcqhaX","tlshash":"5d8335574c139437a21fc9714fa03298685a520107875a703e7a2fffb6be41eacdbc89","first_seen":"2026-09-19T11:21:40.111662Z","last_seen":"2026-09-19T11:38:47.71495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":60,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/favicon.ico","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.717Z","timestamp":1789817887717,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 946\r\nLast-Modified: Thu, 11 May 2023 03:03:46 GMT\r\nConnection: keep-alive\r\nETag: \"645c5b12-3b2\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":946,"size_decoded":1300,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x13, 32 bits/pixel","md5":"25c53a74a7502a4d22d3962484d5c580","sha1":"cc95e89a22838b76e2077475fa734ce7a47dfc94","sha256":"7b6ae99a460154a7556ce1e16eb31b833f508d56eba86691d8bb1f0e2ef01e0b","sha512":"4dce3a7400c5271ba3a900440d1dbab89ba5ca80f6dc10392395ebf193850e582dd9526b6a6f866119d6863ba0dfdbe0ab208161f14660c08dc755a16d44a44d","ssdeep":"","tlshash":"de1120003f2a6e8cd4d7ea332745cb3811abde9a192c93524788389a4ef628016e6e11","first_seen":"2025-07-06T07:23:58.158696Z","last_seen":"2026-09-19T11:38:47.715597Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/cache/js/s1/t-service/template_ea9499feae90dd78230650cd86cb86f3/template_ea9499feae90dd78230650cd86cb86f3_v1.js?1753269214583709","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.940Z","timestamp":1789817886940,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /bitrix/cache/js/s1/t-service/template_ea9499feae90dd78230650cd86cb86f3/template_ea9499feae90dd78230650cd86cb86f3_v1.js?1753269214583709 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 23 Jul 2025 11:13:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6880c3de-8e81d\"\r\nExpires: Mon, 19 Oct 2026 11:38:06 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":583709,"size_decoded":164697,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31997)","md5":"20ffaca142cd7632e59ae0248a3a291b","sha1":"cd1839818275ebf93f5950cac8c674f36e946421","sha256":"f787b351987ae25eea41df5e07ca2a71dbecf3630c583732c0d25e778056218c","sha512":"67bbfdc1e413dbc44ea0b33418b2f017ba438f69fd35ba01d72b053a217a6cffffacdbc1a09df664a56d9d34468ceee5115ce725d0eeb0c85c79d31c546affe4","ssdeep":"12288:wSeK+/GzwkPpl1Z9rSs3P+xiVvuo+ZCgrdH:wSeK+/GMkPpl1Z9rz3P+xiVvuo+ZCgrR","tlshash":"1ac42a89b251325282e730a4517f420bb27769aaf808c4a8b5b9c4d67e7cd4c11bff7d","first_seen":"2026-09-19T11:21:40.132977Z","last_seen":"2026-09-19T11:38:47.716141Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/dd6/woman.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.978Z","timestamp":1789817886978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/dd6/woman.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4694\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-1256\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4694,"size_decoded":4999,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"4b48be38362a8a5a143cb5ccedc9226e","sha1":"12e316cf68c6d5a6621085191d1866cdeebb3a34","sha256":"dcf1a7587839df36dd9847b1bcd078912e67692caef7ee897c0f8c2241ff17c0","sha512":"08471868a95af6a3404ea017c445c66ccea94d2a27a03f068b82b660a0fdc3f0d718956614f5ab3b3a8d125922a9275cbb3f16a74b74efc16c033dc5f407460a","ssdeep":"96:4o7F52Cnn8sLPO7++txp8lPPkvcT7XGgm239b:t7FR8qPO7++tx+1PqcHXs23x","tlshash":"04a16dcdf9761547dd499cc93cf7824eae128fd0c2d2a3bcd8d3156a6d850ba411e8c6","first_seen":"2026-09-19T11:21:40.109894Z","last_seen":"2026-09-19T11:38:47.708004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/servicesss.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.251Z","timestamp":1789817887251,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/servicesss.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 1878483\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-1ca9d3\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1878483,"size_decoded":1878841,"mime_type":"image/png","magic":"PNG image data, 1591 x 1200, 8-bit/color RGBA, non-interlaced","md5":"e34e92f7b75f20619f4ef4cfa7aa1c47","sha1":"45e2d5683ce5a5291e878ec796d2ece3ad87daad","sha256":"e7cc52046d8fb8854e1a25abac402b69760d3e7050099fd6aad8f6edf6d43e43","sha512":"4f3d9876d3539ae7130bdffc789ac3dec8085c64e232ec627808723d1e0a10329aa7238cbbcf3a6c1b38247b250468f61afab3b6ba3c38c48a682c57bc19c8ec","ssdeep":"24576:BDr2ytL7f61MEhmV2h98tZDA1iZFTFmhgRAPZ401:Bvnf6YV2h98tZE1gFEqw401","tlshash":"a925332bfacf1c1f8e548dd586920a28e9f68015d37b82e2da50d277891d1dc8e57fb0","first_seen":"2026-09-19T11:21:40.131068Z","last_seen":"2026-09-19T11:38:47.716757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":36,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/c23/woman.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.985Z","timestamp":1789817886985,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/c23/woman.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4694\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-1256\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4694,"size_decoded":4999,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"4b48be38362a8a5a143cb5ccedc9226e","sha1":"12e316cf68c6d5a6621085191d1866cdeebb3a34","sha256":"dcf1a7587839df36dd9847b1bcd078912e67692caef7ee897c0f8c2241ff17c0","sha512":"08471868a95af6a3404ea017c445c66ccea94d2a27a03f068b82b660a0fdc3f0d718956614f5ab3b3a8d125922a9275cbb3f16a74b74efc16c033dc5f407460a","ssdeep":"96:4o7F52Cnn8sLPO7++txp8lPPkvcT7XGgm239b:t7FR8qPO7++tx+1PqcHXs23x","tlshash":"04a16dcdf9761547dd499cc93cf7824eae128fd0c2d2a3bcd8d3156a6d850ba411e8c6","first_seen":"2026-09-19T11:21:40.109894Z","last_seen":"2026-09-19T11:38:47.708004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":58,"dns":0,"connect":30,"send":0,"wait":30,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/resize_cache/iblock/7ac/osfe6bemfhrp0za0j8rm8dtijyco5rjd/280_160_2/images.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.976Z","timestamp":1789817886976,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/resize_cache/iblock/7ac/osfe6bemfhrp0za0j8rm8dtijyco5rjd/280_160_2/images.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35159\r\nLast-Modified: Fri, 17 Jul 2026 07:47:26 GMT\r\nConnection: keep-alive\r\nETag: \"6a59de0e-8957\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35159,"size_decoded":35466,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 280x160, components 3","md5":"ee6c2c07c10bcb6c504c1ecc24671fa8","sha1":"d09b615485086acccad5ae4d86c366bf20b9392d","sha256":"1dff127ccc67544b016db3eef171a330b7978688c56bac25ab29b50c577f6702","sha512":"637ef85fb87438033b73fe9784ff346d695dafc4b4877d90c8369cd0eafd54313438ad47717f7827c8a74759efbee731e7a639b3643800f64711078529b6a951","ssdeep":"768:2qUFEPW1CQJwCW7XR9Ss2KdELg9uDAMx2VFgVB1PZaaFMXT/:2qUFEzQaCW7XR9d2Kd6ggpx2VFYP484/","tlshash":"ecf2f1a7c471a414c9af19e84f49a30adc16bf20cdad24497b60949dea64b391f30fb3","first_seen":"2026-09-19T11:21:40.116933Z","last_seen":"2026-09-19T11:38:47.71735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/triangle.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.222Z","timestamp":1789817887222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/triangle.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 214\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-d6\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":564,"mime_type":"image/png","magic":"PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced","md5":"24e37a39f0c4d5975918e3ba9b9099a8","sha1":"0aac494726dc86cb2df33923e489fe71aaee6b16","sha256":"4f4d76e09ce4b60b1f4233ad9125dafbc3a51cd06a4ff5dd07474be548a1de1c","sha512":"dfeb5298e31b3e8af47cfb1f6008140fa2fc6c42a1f253f78c3290f4ca0dcbe9e25c9b12a4df61cc26ca1d91dda87cd0ca7bce747d37c23c0c4aef5acd452135","ssdeep":"","tlshash":"ffd023c76653dd37c3c1d3b5b54b4120d5600d5501c50586551caafd512271551a1347","first_seen":"2026-09-19T11:21:40.155234Z","last_seen":"2026-09-19T11:38:47.71791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/facebook.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.255Z","timestamp":1789817887255,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/facebook.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2465\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-9a1\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2465,"size_decoded":2817,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"4edebe50e0322d9c9a18ae9545ca6eaf","sha1":"0ed972660abde62e2d000854b912412aa16b73cd","sha256":"055b86bac8b7e6902f4cce2ff8c77d055cb439f2f94e9c784c968a0f9a5fd7ef","sha512":"f96eb6083c7733b4171f4a56d0e6b729f46fab74ce090f351f485cdfc7c9164126f5d2eeb90931e09e89b7c6365120c4767e5c28fcc0c3faef4a0222601ad150","ssdeep":"","tlshash":"29510acff853f5c2c2caf52a0ec917369062e986647a85514319e83cce539f64435ec4","first_seen":"2023-04-17T13:25:52Z","last_seen":"2026-09-19T11:38:47.718633Z","times_seen":671,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?175128705323463","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.660Z","timestamp":1789817886660,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?175128705323463 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Jun 2025 12:37:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6862850d-5ba7\"\r\nExpires: Mon, 19 Oct 2026 11:38:06 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23463,"size_decoded":4673,"mime_type":"text/css","magic":"ASCII text, with very long lines (23463), with no line terminators","md5":"6bd6f9ea8f0c54e08e3a12b977f1b720","sha1":"c115c5cf987a3edc217f8e1ecfa0a59edcb4d85a","sha256":"8909230ab0cbf3ec50721843f05a08256c6f3087b8cee954c2e921feed611f5a","sha512":"3524e572b6d7c8646333759c99a0598f9abefb10250d70fbe9b9a57a5dd17f1ec24f11a3a825aee09288f796ca024b6aa7b1ea251a7c52499765343d4bfcefaa","ssdeep":"192:6YB5e1lXgD+eKA5sWbbRRKQrRcsbY8e56WFKG9PNB82FHI8FetwIpE6dyWsa8zR/:dEicPCwvqjVegYIGk2jCdSHYG","tlshash":"5fb25aacf7d24817376f4abe95e892fdb7644897441342e9a371718b7c892f72843223","first_seen":"2024-06-10T03:52:20Z","last_seen":"2026-09-20T09:34:57.836471Z","times_seen":5245,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/3ae/woman.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.982Z","timestamp":1789817886982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/3ae/woman.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4694\r\nLast-Modified: Thu, 11 May 2023 03:06:46 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc6-1256\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4694,"size_decoded":4999,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"4b48be38362a8a5a143cb5ccedc9226e","sha1":"12e316cf68c6d5a6621085191d1866cdeebb3a34","sha256":"dcf1a7587839df36dd9847b1bcd078912e67692caef7ee897c0f8c2241ff17c0","sha512":"08471868a95af6a3404ea017c445c66ccea94d2a27a03f068b82b660a0fdc3f0d718956614f5ab3b3a8d125922a9275cbb3f16a74b74efc16c033dc5f407460a","ssdeep":"96:4o7F52Cnn8sLPO7++txp8lPPkvcT7XGgm239b:t7FR8qPO7++tx+1PqcHXs23x","tlshash":"04a16dcdf9761547dd499cc93cf7824eae128fd0c2d2a3bcd8d3156a6d850ba411e8c6","first_seen":"2026-09-19T11:21:40.109894Z","last_seen":"2026-09-19T11:38:47.708004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/484/blago_amt.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.990Z","timestamp":1789817886990,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/484/blago_amt.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 84543\r\nLast-Modified: Thu, 11 May 2023 03:06:48 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc8-14a3f\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84543,"size_decoded":84851,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 897x1280, components 3","md5":"f21e8a37610285b8549931f5acb32113","sha1":"a3e9ff12124dbafff8922c14b30044c715ef3244","sha256":"7c6c8743bde21ea130ce570769a69c539ee2639f13df849b43252d53227a653b","sha512":"607aa8beedd3b81ca7831296556ff6f21af3fcdd03146fa2d148bf96753da95320f78a8abc3d134b4f815e04483310ef5229f1a6b43cc6f577a9317c97101ea5","ssdeep":"1536:Gy2znOpOvyGOoBx7frS45qJNAJpW0LuqiMvjLWiDN0ynt+JNL+itsfpGUzOnJCLo:Gp4OqGOoxrl5qJyJpWjJMvjt0MtkNFWw","tlshash":"ec83464359239423b62fd93a2a41714960971a02a6c79738396c7efffb7d84f4ddb810","first_seen":"2026-09-19T11:21:40.12279Z","last_seen":"2026-09-19T11:38:47.719638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":42,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/993/blago_alyans.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.991Z","timestamp":1789817886991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/993/blago_alyans.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 116229\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-1c605\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116229,"size_decoded":116538,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 853x1280, components 3","md5":"1d5014633a332a8277f129ab0d9f9fa2","sha1":"90a62619ff56fa7f92b7eb187744d02f75b44a5d","sha256":"039815ce259dffa0a50eb9d2a2dcbe18999a0cbe93b3fc5dbe9eba138bd82754","sha512":"28c24d046d86779ccb4691eab4948787c3d030fdf4a7b005415a905f03e9283ff9b1aa7041c8b180da526f0796e8bfe6d138b95bf82c452eccf408e4d129db38","ssdeep":"1536:Oz5+y+N3Sl39yrDdpo+1jLZ8u0HiRblJ9LjhNjh0TA1LBy1dBKJ94aIi88Zm7EAw:OoFC2Pdpowj50C59hNPA1w4jeNH","tlshash":"c0b3cf538d158b87e128e7b87e430e999f492b1dd4823aef10239fdb7a613715c4e06e","first_seen":"2026-09-19T11:21:40.150991Z","last_seen":"2026-09-19T11:38:47.72016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":36,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/cancel.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.253Z","timestamp":1789817887253,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/cancel.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 433\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-1b1\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":433,"size_decoded":784,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"7bb40604e984db379059236c8fe4e765","sha1":"7508372e0eb0966077fc4d66391eab81e7cca0a6","sha256":"9815a4e198ead0609a2cd166a59916db7715abaaef02f8a0a821da24891d9d56","sha512":"cb0b6b316854431c406dbefffb1dfe07af38d01621d9f1e30705067c18bf8f82ba24fbfcfedb7876f149e94fa3f5411e7f1378ddbf2596cdf134ce4b1fd45869","ssdeep":"","tlshash":"5ce023c6e042f9dcc1c3225380342ab0d82289c3a60f10919b70e80816087485635b00","first_seen":"2026-09-19T11:21:40.148327Z","last_seen":"2026-09-19T11:38:47.720764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/video/vv.mp4?v=2","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.268Z","timestamp":1789817887268,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/video/vv.mp4?v=2 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 3929441\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-3bf561\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Range: bytes 0-3929440/3929441\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3929441,"size_decoded":3929830,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"88fe4c942e5a854fd6ceadd96f681e29","sha1":"8cbf1194e33f0471e621ad4d0756bb49ba45c55c","sha256":"ea00f82c010edbed57c366e377b21240795ac2eb2a9d723478402c373d5cc728","sha512":"916738c74575a60d4725285d92e544af33ff6bb5e3c71aedd93f39035a26ac8999eef8556e7f584066b1cce24d848e78b31a2968b1e2f6618d1e1dff4f260198","ssdeep":"24576:kC961OemIfGO/ypM9Dx5IkXrfG7XMwq9LEX7VIGSpkrEK95L49f:r0OemIuOapYDw0fqokp98yHL49f","tlshash":"a52512360b93493ccd862cb055b703602676e585c294a3af29ee9734fd27bde9da07c1","first_seen":"2026-09-19T11:21:40.144032Z","last_seen":"2026-09-19T11:38:47.721401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":30,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/5bd/man.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.983Z","timestamp":1789817886983,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/5bd/man.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4269\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-10ad\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4269,"size_decoded":4574,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"00b4a1473ed246f4b2c192162225359f","sha1":"95b5f5c2da7a3c6bd47e81b3dee977b9d0230cba","sha256":"2957c23ae2b73209e412ff10134d9d72c6a933b949c8505f9a0f0e0845bd492a","sha512":"2513dd67d44669c4ac2381612366dc9f175f6943facd180477a51945d63e50db28ceab82b7b24740b4bb1504dbec646accd7c4ce3f6c7476610815d83046c7e7","ssdeep":"96:4o7F52f2h7HxZPm1M5an8qPXF6W60MYxkTSXvICCWD0zojmDeQ0T3W:t7F328TZYfX/tPaDym","tlshash":"85915d20e880ff927bc1bec920ea8453e6354c9096d5e18e7a4cd0a07d502f91d7ed8d","first_seen":"2026-09-19T11:21:40.118179Z","last_seen":"2026-09-19T11:38:47.709852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/fonts/Roboto-Bold.ttf","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.228Z","timestamp":1789817887228,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 170760\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-29b08\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170760,"size_decoded":171131,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"ee7b96fa85d8fdb8c126409326ac2d2b","sha1":"0ce37ced9c5fcac9bdc452a432c1258870ba4677","sha256":"7d0b991ee3e0be7af01ad7ea8cd2beea6c00a25e679a0226b6737f079aafff86","sha512":"63849d833a0d2f923066da3cd83332c1c48e5d599730a96e6cb36738a0ac7a9e108236e74e3edac3a6d680a9a7c4776bef801e492536ab2a1db66588d1ad5a72","ssdeep":"3072:q4X4HXYXXXXXX+zkBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PO9:qRLX6XiuMPT/eKa+JSTyXI","tlshash":"c6f3f601e6479729c9c6b2787c3cd3be1970e029bc6ba11735e4af3149c8945ec69bbc","first_seen":"2023-04-06T20:55:42Z","last_seen":"2026-09-20T10:20:48.605525Z","times_seen":887,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/instagram.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.254Z","timestamp":1789817887254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/instagram.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 8036\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-1f64\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8036,"size_decoded":8389,"mime_type":"image/png","magic":"PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced","md5":"5200bc176f31891620738af502b1ede0","sha1":"f5f389bf958d5249bf6200fc70b817020a8d46b1","sha256":"1d6b8386ec4bb75fa25661a33a60b85db9c39df7bea1bd69c2fdafe87228bb70","sha512":"9cdf93591bc3802a92cb9ce70fd1ac6ea1fef2839b0767f778c17e87a599fb53f5e5957c6c451f7154b8e1e02c81834f11ad241c004c4367d65e840a1e90927d","ssdeep":"192:oOEQ17F8knEcH+nFQzs7eb+Kmn4mSJULKoGf+eWzAhFV67O:oOr1NnEcHwFQzsyjmSJYKoGEzAfM7O","tlshash":"22f15b657c60eca0ce8a6c4effda95571b33abd26795d050ae86481344f02f8ceed6c1","first_seen":"2026-09-19T11:21:40.142743Z","last_seen":"2026-09-19T11:38:47.722525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/logo.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.972Z","timestamp":1789817886972,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/logo.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 25369\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-6319\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25369,"size_decoded":25723,"mime_type":"image/png","magic":"PNG image data, 321 x 91, 8-bit/color RGBA, non-interlaced","md5":"3e9190c545b1544f95451aab10b17148","sha1":"f3583895cdceaf36962309248b35e6d23bf82cd2","sha256":"e1ec095f0ace6109fa964fd657e9d9578c0fe8cb056c6c64e7d55daff6ba7758","sha512":"9668283f674444cb9792182312af1040b00f3f9013f0d4c666d2be54c1500ddde9ea4d38625b371083453a62089d5aceb79c893bab3fc7d0257e3413478aa2ff","ssdeep":"768:RDegdEV077dIkW5eSnzuphzXDbqkPGu7fuw1/Z2V:NesY077qkShzuplbqkuvw1R2V","tlshash":"6fb2e05f77505b6c0680bcc1699aa2ad1fd68b4ccfc8b16598ce1274bcf0b68b0b8d74","first_seen":"2026-09-19T11:21:40.135861Z","last_seen":"2026-09-19T11:38:47.723096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/fonts/Roboto-Medium.ttf","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.262Z","timestamp":1789817887262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 172064\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-2a020\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172064,"size_decoded":172435,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 28 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"d08840599e05db7345652d3d417574a9","sha1":"5f16f4d6dbb4a4f12d8ae96488ac209bb49762a5","sha256":"f205cc511821ea56078a105557fcea6253129404d411c997e1866fbd006abb68","sha512":"1610097ac5709edbe56a05e6b337769dcb338bb4417693717b5a5e157e824e25e0af4eda1c297f35553df05754d9785136fa230ab1cafabfc44da63c7547715b","ssdeep":"3072:2zC+qmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWUemhASD/JwXI:2825wklN7T3QtSUXzqefSTyXI","tlshash":"e9f3e701d341bf25cac6b2787c7c93be4db5e41abc4aa52730d9ab3159c8850ec58bbd","first_seen":"2023-04-10T05:56:10Z","last_seen":"2026-09-20T13:19:04.233318Z","times_seen":8428,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":31,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/next.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.412Z","timestamp":1789817887412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/next.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 1898\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-76a\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1898,"size_decoded":2250,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"5386dbc6a24eb447da8009bd3008270e","sha1":"6b2f5dfcba1cc83d1162b537d967567cbd34006d","sha256":"8f9ef3ed96e1e9214d76d9426081e584c1f0a092325a41c500306c689615d857","sha512":"4721acbd32ae8c199c24ae98b47f86ad41a8e351b9a0d245307ea7afc1e708ac3bdf66d8af079409006a12af2f12343055b1d4dcac7b712a03152b9b5bc9c26d","ssdeep":"","tlshash":"8541f7e43ef59bc4d36223e6ba990415e7a169f53c049fe990174cea9fc038d6d0f820","first_seen":"2026-09-19T11:21:40.157112Z","last_seen":"2026-09-19T11:38:47.724276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/resize_cache/iblock/f3d/s52s2vds40isfc9g5opnhu15fdowq5et/280_160_2/images.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.977Z","timestamp":1789817886977,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/resize_cache/iblock/f3d/s52s2vds40isfc9g5opnhu15fdowq5et/280_160_2/images.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18464\r\nLast-Modified: Tue, 30 Jun 2026 05:39:07 GMT\r\nConnection: keep-alive\r\nETag: \"6a43567b-4820\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18464,"size_decoded":18771,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 280x160, components 3","md5":"6d68666289498a238f8c132b2c1806f5","sha1":"484e763c730975a3e11dd92bcb1f82b713f09abf","sha256":"8b08bb41d6e7544ba56fcb71969e75bedd5d6ef63208cb351a8ed88be4f4dd0f","sha512":"fc8f69f10a608b347d1f593aa3d28decd0a457018849dc6adfb04dde1562d308524414baa9dd37f43a8308637752736c96da810d494dd04e3d983fca7fd362dd","ssdeep":"384:6v+ijl9B/P+XKTAXBfUpBRHSjLBE1caFSJCNbYLP45rHz5N:2+gFP+8AXuDRI98Fm6bYE7","tlshash":"8082aef9fbc7a711533f5ebe86ac3c72a36ca1f0e68486465c6b4ca24690f61950306c","first_seen":"2026-09-19T11:21:40.134334Z","last_seen":"2026-09-19T11:38:47.724802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":253,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/4d7/blago_vodokomfort.jpg","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.994Z","timestamp":1789817886994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/4d7/blago_vodokomfort.jpg HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 88412\r\nLast-Modified: Thu, 11 May 2023 03:06:46 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc6-1595c\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88412,"size_decoded":88720,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 897x1280, components 3","md5":"a4746ada9d2773bd1d1f408036736fda","sha1":"ac8185dcda4ecdb07d8ab023c3f2acef81f0ca57","sha256":"5334678b27b106b4960f6a96e64eafb511a6032ccf0bf566076485373e1dd7eb","sha512":"3606e3b6ec6a8a073d46251873c1795c7d6a7a3310107adc1509ff16c96e0073d8b64500398134188a0730308e7347b1e71db4cc765f49c34120ebd3f3366c74","ssdeep":"1536:bSk4stWIkGLyvXYCa0gxu3IxWn+3rOxpxyEsoQJN6eo8kT5IIygWhAZ:bL4iWIkGAXY0uu3aWka7atrW9eL2","tlshash":"bc838a67190bd027708bc8609a4a726d30635648a2e353b5ac6d3bbfb37c06f4eded15","first_seen":"2026-09-19T11:21:40.127886Z","last_seen":"2026-09-19T11:38:47.725346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/medialibrary/87d/ati.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.996Z","timestamp":1789817886996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/medialibrary/87d/ati.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 3940\r\nLast-Modified: Thu, 11 May 2023 03:06:46 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc6-f64\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3940,"size_decoded":4244,"mime_type":"image/png","magic":"PNG image data, 200 x 55, 8-bit/color RGBA, non-interlaced","md5":"fae42d999434f13d9a9d51875e3c85b0","sha1":"60b0176f60c9552ed540ae4acb4baefa650947d6","sha256":"cb09a51d34fc60759f9b7a20d01dd7536b4afd3be864052e654f072e8a6a108c","sha512":"a342a7519663ad2280898037c170b5d9ff60e0b894f1c34840e4fc1af12008ab06b8ccf45c5486fb9d97f6b99a73853d8172166651984c75a541fbaf6e3ff008","ssdeep":"","tlshash":"bb818ced106cb3eea51ee23de21319aa993d428b25c25329c43981c41213abbcca1c1d","first_seen":"2026-09-19T11:21:40.129669Z","last_seen":"2026-09-19T11:38:47.725923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.662Z","timestamp":1789817886662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 23 Jul 2025 11:13:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6880c3de-164b2\"\r\nExpires: Mon, 19 Oct 2026 11:38:06 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91314,"size_decoded":21374,"mime_type":"text/css","magic":"ASCII text, with very long lines (65475)","md5":"417c621d69a6b2d5e92b117a394e98cd","sha1":"afa86908522a8c653607f521c20d68b726622f14","sha256":"eec1673e73306cb138378b7b40586cc3e5dc78f471938e8d374397e78185ae0f","sha512":"95c8381ca1d991139b9d36ec434fda25655376916c8f5746351162a90207e35dc2a40b4bc040ad01ea19e650297b60424a344682eb6eed7808098493838db77c","ssdeep":"768:ju7BE/glgyVa+eYY9thc0Z5DMETRkTQsyMx10I6wlx4TrS:C7BmpU0Hc10I6wlx4C","tlshash":"f293f632d217252d712bd211b4d1bbde7c39c217f1224aeefd696026cacb8d901bb64d","first_seen":"2026-09-19T11:21:40.113994Z","last_seen":"2026-09-19T11:38:47.726546Z","times_seen":2,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":71,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/bitrix/panel/main/popup.min.css?168377422620774","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.664Z","timestamp":1789817886664,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /bitrix/panel/main/popup.min.css?168377422620774 HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:06 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 11 May 2023 03:03:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"645c5b12-5126\"\r\nExpires: Mon, 19 Oct 2026 11:38:06 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20774,"size_decoded":4035,"mime_type":"text/css","magic":"ASCII text, with very long lines (6874)","md5":"aa5b76434495b512d768973240b85938","sha1":"ad2d67fa396289bc94db9fcdbe81b05ba254171e","sha256":"5bd6f2366e5400a184c30e1e39c984b5c0f78d43c9ac42a0e7385396db3cf3dc","sha512":"f27571d5640899b4a86710401ed07c08dddf70276cbfa7af49f896aaf6f2710a917ba32ac63887da1ea5bba9f356523b03bd91189cba590a1d3e6de1eea4e253","ssdeep":"192:AqoWOawd4FYiWQAJbIT5JLUYJb9vycFlklwUYvY9BgYdYG6YJCb8YrpYdozYfYl/:moIOvlWXn7Oh05Jyf","tlshash":"509233f01589307a60d60253e521e618b36af412dfc32e75ea7c3df0c592f966273ab9","first_seen":"2023-04-06T18:26:25Z","last_seen":"2026-09-20T04:20:29.684769Z","times_seen":1832,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":34,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.937Z","timestamp":1789817886937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 19 Sep 2026 11:38:06 GMT\r\ndate: Sat, 19 Sep 2026 11:38:06 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":1287,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"c332c85e79e41b93beec167a4f7d38d8","sha1":"e6e7ae7e12ef45e5b49474d45efb1238cabc552f","sha256":"968b9d3d9dcfb9d38daf0913b7a310525fe9af23015cf3dbca84481ac2985c7f","sha512":"0a0ed0fde7a16492a6f8cc6512e66686bb0e86879ccdde685acd87300b5382456d09f0e948130f64a0b370cba95d3a3fa81b5565f57af0fd2344635d83e92f51","ssdeep":"","tlshash":"0e1121b71604f0354b3209e5e1fecbb5e442701cf15885e8a425dec52e6adc7ce05684","first_seen":"2026-09-14T20:50:39.039311Z","last_seen":"2026-09-20T12:59:10.131587Z","times_seen":446,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/arrows2.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.975Z","timestamp":1789817886975,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/arrows2.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 511\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-1ff\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":511,"size_decoded":862,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 8-bit/color RGBA, non-interlaced","md5":"1a05c80b8baa3fdd105c86e33a5eceaa","sha1":"8c0a8d0b80dee24ec8b9f91d5c6e44017399b6ac","sha256":"3ea0a5bbfd98cbba005f3c50c2cffacb9e57454d0b9b71c193d326d9f240e87e","sha512":"02997d8b5b0dcdd0627205bbbe62663143918038546314377f1a4ca5ab3798ebe82d48e5985b309db6494b9cc40c638a9deaf4c0c51120aad33a0ddf1b3aaf8c","ssdeep":"","tlshash":"9ff005932330e555a117242283056534bf3d456990096d0ca099726d6bf9925a3957da","first_seen":"2026-09-19T11:21:40.115639Z","last_seen":"2026-09-19T11:38:47.728112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/b3c/man.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.988Z","timestamp":1789817886988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/b3c/man.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4269\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-10ad\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4269,"size_decoded":4574,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"00b4a1473ed246f4b2c192162225359f","sha1":"95b5f5c2da7a3c6bd47e81b3dee977b9d0230cba","sha256":"2957c23ae2b73209e412ff10134d9d72c6a933b949c8505f9a0f0e0845bd492a","sha512":"2513dd67d44669c4ac2381612366dc9f175f6943facd180477a51945d63e50db28ceab82b7b24740b4bb1504dbec646accd7c4ce3f6c7476610815d83046c7e7","ssdeep":"96:4o7F52f2h7HxZPm1M5an8qPXF6W60MYxkTSXvICCWD0zojmDeQ0T3W:t7F328TZYfX/tPaDym","tlshash":"85915d20e880ff927bc1bec920ea8453e6354c9096d5e18e7a4cd0a07d502f91d7ed8d","first_seen":"2026-09-19T11:21:40.118179Z","last_seen":"2026-09-19T11:38:47.709852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/resize_cache/iblock/e3b/6sl2t61f0w960i201q1dhzfv6syohwbw/280_160_2/S-8-marta_.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.978Z","timestamp":1789817886978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/resize_cache/iblock/e3b/6sl2t61f0w960i201q1dhzfv6syohwbw/280_160_2/S-8-marta_.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 64865\r\nLast-Modified: Thu, 05 Mar 2026 02:08:09 GMT\r\nConnection: keep-alive\r\nETag: \"69a8e589-fd61\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64865,"size_decoded":65171,"mime_type":"image/png","magic":"PNG image data, 280 x 160, 8-bit/color RGBA, non-interlaced","md5":"3ceee41e6d40ad556bde357d59948926","sha1":"c62cbfd36e074245a3fbf0dbc742cb266febdd15","sha256":"d84b635253de46e2ddaf064ce84a760c2d0215a81d4e59664f7c25e340f5c12c","sha512":"70983bf175248cf0cd1de0e1718615d09e0e1ec3bfcdad0553a20e7ff1fb1e7a7dad3709e2aa6eecee605b3b663817a3862718ce436651e08b527acc77f3eafb","ssdeep":"1536:fki47p0pyH/NAKbhqwOotVOrl3X/e+ZpXmEfoRbt2aO:fkVpBAKbUw1m/tpPf4bt+","tlshash":"65530269368f288cec85dcf0ee11c5ee8e6c2172c1e02e52913dc2f7b05369857d9aa5","first_seen":"2026-09-19T11:21:40.139489Z","last_seen":"2026-09-19T11:38:47.729113Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/upload/iblock/4fe/man.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:06.989Z","timestamp":1789817886989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /upload/iblock/4fe/man.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4269\r\nLast-Modified: Thu, 11 May 2023 03:06:47 GMT\r\nConnection: keep-alive\r\nETag: \"645c5bc7-10ad\"\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4269,"size_decoded":4574,"mime_type":"image/png","magic":"PNG image data, 87 x 97, 8-bit/color RGBA, non-interlaced","md5":"00b4a1473ed246f4b2c192162225359f","sha1":"95b5f5c2da7a3c6bd47e81b3dee977b9d0230cba","sha256":"2957c23ae2b73209e412ff10134d9d72c6a933b949c8505f9a0f0e0845bd492a","sha512":"2513dd67d44669c4ac2381612366dc9f175f6943facd180477a51945d63e50db28ceab82b7b24740b4bb1504dbec646accd7c4ce3f6c7476610815d83046c7e7","ssdeep":"96:4o7F52f2h7HxZPm1M5an8qPXF6W60MYxkTSXvICCWD0zojmDeQ0T3W:t7F328TZYfX/tPaDym","tlshash":"85915d20e880ff927bc1bec920ea8453e6354c9096d5e18e7a4cd0a07d502f91d7ed8d","first_seen":"2026-09-19T11:21:40.118179Z","last_seen":"2026-09-19T11:38:47.709852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-servis.com/local/assets/images/prev.png","fqdn":"t-servis.com","domain":"t-servis.com","tld":"com"},"ip":{"addr":"89.108.65.141","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-servis.com/","date":"2026-09-19T11:38:07.410Z","timestamp":1789817887410,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.t-servis.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 02:03:26 GMT","end":"Mon, 04 Jan 2027 02:03:25 GMT"},"fingerprint":{"sha1":"09:0D:DB:51:C1:3C:76:4D:03:43:48:7D:CF:3C:A7:6C:15:7F:F6:1C","sha256":"8F:34:7D:65:88:11:54:9D:CD:10:1A:64:E2:6F:C9:22:F4:E7:AD:C2:8F:CB:C8:5B:F0:0C:9C:AE:5D:39:A3:DD"}}},"request":{"raw":"GET /local/assets/images/prev.png HTTP/1.1\r\nHost: t-servis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-servis.com/bitrix/cache/css/s1/t-service/template_b016d8f9220a6efe7dbf8c594eace29a/template_b016d8f9220a6efe7dbf8c594eace29a_v1.css?175326921491314\r\nCookie: PHPSESSID=X6d8kchwzA2rkqcDbPg0oXxLi3pEN4nj; BITRIX_SM_TZ=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.2\r\nDate: Sat, 19 Sep 2026 11:38:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 1903\r\nLast-Modified: Thu, 11 May 2023 03:02:31 GMT\r\nConnection: keep-alive\r\nETag: \"645c5ac7-76f\"\r\nExpires: Mon, 19 Oct 2026 11:38:07 GMT\r\nCache-Control: max-age=2592000, public\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1903,"size_decoded":2255,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"d795b0aecfc9a585cc252a954bf3d2e3","sha1":"d3b9be0805e29dc79add689124a8d7c7d2ddfada","sha256":"026a44faa3c6b7b38cdc5f899f15eecfd36bfe2922b9965a8d7129dab0428d5d","sha512":"86e6aed624cf94bbeae3af4fba3e6e4bf035a1fdfb3ad89587630512d229cee09f28f62a70a89aa3d8a5c59835582bf50f00b171dc9a8fdcd1f36aaef5397e26","ssdeep":"","tlshash":"66415dedc6b8c821dc2523174591420f5d4109fc393acf92d18f0dbd585d488814793b","first_seen":"2026-09-19T11:21:40.119477Z","last_seen":"2026-09-19T11:38:47.729994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"t-servis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"t-servis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}