{"report_id":"0733b100-8a21-4566-aeeb-f877a97e5eff","version":0,"status":"done","tags":[],"date":"2026-08-25T21:13:54Z","url":{"schema":"http","addr":"regorganize.ru/","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"regorganize.ru/","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"title":"Скачать Reg Organizer для Windows бесплатно на русском — фан-сайт regorganizer","dom":{"size":18608,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (314)","md5":"9b4f4475758a4b352bf01a2b346d98c5","sha1":"0cd2a5ee5960e1301903e81b5f6a263049c98c36","sha256":"5b0b3a83216cc49b38acf961edfc0acfeef4702300a995a2e42a8ff1f0dbebea","sha512":"c649d5c90879c4eae4ea1e815fd33d7366da95a3054c2e123aad53680867a298c8cc14f430954ff1b35bb596f07fd476d8744ad04144f7ccd880555f2169098f","ssdeep":"192:zrYi/YAmDgZ/kE4cono8V9bImNoXOq3W8AkZwM4DfSIq4:zrYi/YAmDgZ/kE4no0783aqw","tlshash":"9a82832151f810af42069287de24771d3cab41fbaa4e2511717c3aad7fe3d96ce2b60d","dom_hash":"domhash0d10b19a717b58bd50b7b05275692536","first_seen":"2026-08-25T20:57:10.859223Z","last_seen":"2026-08-25T21:13:54.970797Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"regorganize.ru/","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:13:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"regorganize.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-25T20:57:08.349993Z","last_seen":"2026-08-25T20:57:08.349993Z","alert_count":16,"request_count":8,"received_data":193833,"sent_data":3922,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"regorganize.ru/","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"38d75b2056428aa9881f18ef6e2a6806","sha1":"56573480a6a1fb0aa7fe4c579e57cfe794d90d94","sha256":"e4bc82f8417ed35624515548c73ec27cd2cdc79af8ba3790f7948b1558d888a3","sha512":"02dbd500ace5fdcc08205d334e5288c2c78f68553346ce37a86c0fd2272fa2c467ccd80132fbe7676852d158845a4dcf185d2d12c022c92eba4253ffea114d5e","ssdeep":"","tlshash":"7cf0e177b88492f5c3f62131532ba30d711718b920896c34c50d8cc1397bc69502f96c","size":576,"data":"","first_seen":"2026-08-25T20:57:10.884473Z","last_seen":"2026-08-25T21:13:54.982093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/js/main.js","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b056985f2df8b51aa01bb4c71a8fa4e","sha1":"7bfdbfd7e967025eb73cccad68128748bc142893","sha256":"6c5b8cc1fe93c416b48340f8e4fdee2fa52012a4ee85ceeac53adcd2b1c804a3","sha512":"b099b731c7edd6016e74a28681fd08944612ec3175f1bb76c479b5c5e12a0f8bdc9c877bd33a1a61097dbbd2e41731b16887d73aaad2e1801359ca86d5f2cb0b","ssdeep":"96:qJtWJhvQ9ioiRUdNEu2/D20AgdssG2e26L7m14xsjQMvfHXG6bK2pTScvRSzfYne:ItiLUs/ygdssGz/u4W1vf3NR+fGGt","tlshash":"77e18414ed06347654b3a3bbbfaa555cfb71016b8045c21039fc86552ff0aa186bedec","size":7427,"data":"","first_seen":"2026-08-25T20:57:10.866565Z","last_seen":"2026-08-25T21:13:54.978119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"regorganize.ru/assets/favicon.ico","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.841Z","timestamp":1787692407841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5638\r\nlast-modified: Sun, 16 Aug 2026 17:01:32 GMT\r\netag: \"1606-6592d01726f6d\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5638,"size_decoded":6051,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced, 32 bits/pixel","md5":"ba978d0cbceefb795a46db566a09a47a","sha1":"70f59558839f622825a2f023f74edc9b991fdc30","sha256":"ddb75f846e114584b6118ac7b471922b756d2cb6dfc315d75bed9e72f1e1213c","sha512":"dd37a3248a12378b5b557b809d82eeaf303506b51ea2c6a8c673e0d6121852c6162b79b0afccdfe9b4dec66c771601debdda4f9c1220e4121aeaa1be4100cbc0","ssdeep":"96:ETIx6/aCnMNWpuMoquman3SeQJ1WDHegxJQxzB8oaFydmsCPvE7gYkcIP52K:uJSCnMNWsxqul3S3J1WTeggfqFylFRA9","tlshash":"6fc18e179065cf1c9afa51b3d33fb01bad3a385a1d27b6c9194109fd68121bc4fc8b59","first_seen":"2026-08-25T20:57:10.875518Z","last_seen":"2026-08-25T21:13:54.972245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/assets/hero.webp","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.408Z","timestamp":1787692407408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /assets/hero.webp HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63300\r\nlast-modified: Sun, 16 Aug 2026 17:01:35 GMT\r\netag: \"f744-6592d0193e67b\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63300,"size_decoded":63712,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ea63784519fe2740c6538808a053705","sha1":"31e435bf7a685f6e8580228793bbe03e587ddcd0","sha256":"7169916d0a8c6da7ab242ceb6dd370c892cb7d20af0871b17c4a3a3245e9027e","sha512":"dc99983482d3f62bc54446dce8449f4ad24cab790a139e2e44cadb1dce7ee35755aca0f1c72d85ecd23a31bb1080e23022876cdf059518030f2d2408fcbd4ce5","ssdeep":"1536:doGlvBJGCrPkhfASmXSZR/dXuAZt4XgYQ42FeL/w:dtBIiMASR/CSFX","tlshash":"6c5302b4683392d0a8446ca26748961efeff740c1ee3a5ddfc07e16c8d7ad066357512","first_seen":"2026-08-25T20:57:10.880538Z","last_seen":"2026-08-25T21:13:54.975082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/js/main.js","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.409Z","timestamp":1787692407409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:01:46 GMT\r\netag: W/\"1d03-659a3318e1e43\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7427,"size_decoded":2984,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (305), with CRLF line terminators","md5":"2b056985f2df8b51aa01bb4c71a8fa4e","sha1":"7bfdbfd7e967025eb73cccad68128748bc142893","sha256":"6c5b8cc1fe93c416b48340f8e4fdee2fa52012a4ee85ceeac53adcd2b1c804a3","sha512":"b099b731c7edd6016e74a28681fd08944612ec3175f1bb76c479b5c5e12a0f8bdc9c877bd33a1a61097dbbd2e41731b16887d73aaad2e1801359ca86d5f2cb0b","ssdeep":"96:qJtWJhvQ9ioiRUdNEu2/D20AgdssG2e26L7m14xsjQMvfHXG6bK2pTScvRSzfYne:ItiLUs/ygdssGz/u4W1vf3NR+fGGt","tlshash":"77e18414ed06347654b3a3bbbfaa555cfb71016b8045c21039fc86552ff0aa186bedec","first_seen":"2026-08-25T20:57:10.866565Z","last_seen":"2026-08-25T21:13:54.978119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/assets/features.webp","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.761Z","timestamp":1787692407761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /assets/features.webp HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44152\r\nlast-modified: Sun, 16 Aug 2026 17:01:34 GMT\r\netag: \"ac78-6592d0182fa1f\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44152,"size_decoded":44564,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x853, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b42510f645e6a7b89d1f6b7576d5bde","sha1":"10c65980d72c99ad74436582d30479cdfbc8401c","sha256":"f4f3dc7463838d4c3d8918c0495adab43afe09083ec86bfecf262659c09007e9","sha512":"34197f92e45606a971858195b4e248dc6b6455a76909cc701bb502922f0d7f6587479d69babfb11b64768f4f43ad00749d2ca39682ec29498d666e8fcfdc3166","ssdeep":"768:E+QJQL7Aywo1hEuTiI4w/83bBHX1Lt5aNQw/psWBn+Rzx5iE8ybJt8cU3GxgmPUe:v4QL7AiEumi83tHX1Lt5UN/RZ+RNEybf","tlshash":"ab13020ea0153a2ee57a5839ff3169b275f0b45450d04752afe442be3c5fc129887bde","first_seen":"2026-08-25T20:57:10.87026Z","last_seen":"2026-08-25T21:13:54.978732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:13:27.081Z","timestamp":1787692407081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 4654\r\nlast-modified: Sun, 16 Aug 2026 17:17:44 GMT\r\netag: \"4a33-6592d3b5c4f68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18995,"size_decoded":5115,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5febe45ffa8aeeb715ee3d5fdc406378","sha1":"f0413c79d68aa515ee414bb3b2797a147f204fd1","sha256":"17a327e2c21444347b4365a7bf292ac723d658cd121ae96cbf5b43845f9ae7fa","sha512":"30b11d0a161b672feda03d2de316c5a528f8e29876ac2a3a3cd186ed11074328d0a54a7b714b4c3ad17e0fe2c40732fb3ef69c5b4a42336de21faa0a3b70749e","ssdeep":"192:StgAkI9aEZ79bIdrwOWLnnX9P9RD4jf/NQD8:Stg09aE02XN83v","tlshash":"bd82602151c8246f42329186de247b9dfcab41fb6a4a551131bc3baf7ff2d14ce2b609","first_seen":"2026-08-25T20:57:10.863154Z","last_seen":"2026-08-25T21:13:54.979352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":8,"connect":48,"send":0,"wait":65,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/css/style.css","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.404Z","timestamp":1787692407404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 4379\r\nlast-modified: Sun, 16 Aug 2026 17:01:38 GMT\r\netag: \"4242-6592d01c918b4-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16962,"size_decoded":4840,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"29bc4202db7df40f59be85fb0ea300a2","sha1":"e2259fd254bed7fd553589b9f3300148b7f7ae08","sha256":"9d9e8f30bd4bac74cc94f7896de2dc799400b486209ef57eccdaba2f3ddc824f","sha512":"17018cfb5c113858e85713d51f5e017b0b60a9b87e5a45ce8fe131529f2d60a5624482584c6a2a9860adc2eb916db8df4cddf53e9449d8d4ebe0db557c895f6b","ssdeep":"192:wFt+CKnl76GlZmucAbpUVrwCmhlRBr5eLWgaw3nRsjyOwaALAt2rMbJdHfoVg9:dCKOCVUVrw935ekGjaQA7d","tlshash":"4e7252a26b246134f637f765f787e78de668b112950802bdbcd51008c1ce2ba51bef8d","first_seen":"2026-08-25T20:57:10.878113Z","last_seen":"2026-08-25T21:13:54.979922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/assets/logo.webp","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.413Z","timestamp":1787692407413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /assets/logo.webp HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4434\r\nlast-modified: Sun, 16 Aug 2026 17:01:38 GMT\r\netag: \"1152-6592d01c3ffea\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4434,"size_decoded":4845,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 560x159, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"895ad597408f3bb0c5965741dad19cbd","sha1":"c6f0de7b9ffd94d59526a1dca08639d0b732328e","sha256":"7410a5086abe677f8bb3f35fa34d4a0be60fadce717ea2d50979735d112b4b86","sha512":"cdff866e8b174adae62881bb9bc996d7415849fe23e1b6965561be247a115c50a0f5ded7d03a27abf8537f29a36d17787637777c6c000936b91d387a3fd8c7dc","ssdeep":"96:30y6XzSaSnC3LvttMS83B+CKVVmd2VougWkM9OOer:30y6GS3LvjM13BPKLmd2LV85r","tlshash":"23917dbfa0259a179e418de20b8d300e9414489b642ebf6c09c6847be76d4d45290dd1","first_seen":"2026-08-25T20:57:10.882733Z","last_seen":"2026-08-25T21:13:54.980536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regorganize.ru/assets/favicon-180.png","fqdn":"regorganize.ru","domain":"regorganize.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://regorganize.ru/","date":"2026-08-25T21:13:27.839Z","timestamp":1787692407839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.regorganize.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:39 GMT","end":"Mon, 16 Nov 2026 20:08:38 GMT"},"fingerprint":{"sha1":"4D:E2:DD:FE:83:72:1C:9C:18:DF:88:29:A9:69:AF:31:0A:8F:59:F0","sha256":"9E:25:96:BD:4F:6A:8B:B3:9C:DF:18:21:E9:F2:52:0D:4B:90:C8:28:FC:AF:3F:6C:69:C9:A5:C0:92:E9:12:DD"}}},"request":{"raw":"GET /assets/favicon-180.png HTTP/1.1\r\nHost: regorganize.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://regorganize.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 29523\r\nlast-modified: Sun, 16 Aug 2026 17:01:31 GMT\r\netag: \"7353-6592d016305d1\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29523,"size_decoded":29934,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"54fbe84b9e06515e6994ef2afba5e1fe","sha1":"a3b52330a2d1fe4a5b5d6b85e9dfa27a093fb766","sha256":"227542212993969052b28618172ee2db8a5648c1d39f3be9090926e5ab1586cf","sha512":"0e67fe4b1ec8f15749857f82886bda6d243fb81595075341d625d55866f1b9f809cb2793cc9e0d25bf08f135c7e4749021f0a7a10a892a917a7888e6b18838f9","ssdeep":"768:jgVaGqMhImekFVHHynpTXENACOoqFS8vS+8+USB:jQ1eAHyTXL8T7SB","tlshash":"89d2e1207ce443ba1770dc59ba117e14ef95a5a13e719293efb454a20a0239e84ece6c","first_seen":"2026-08-25T20:57:10.87305Z","last_seen":"2026-08-25T21:13:54.981407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"regorganize.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}