{"report_id":"118f8c04-f1b7-4f88-96c7-9c559bf97990","version":0,"status":"done","tags":[],"date":"2026-08-25T20:59:51Z","url":{"schema":"http","addr":"fallout24.ru/","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"fallout24.ru/","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"title":"Fallout — версии, установка и загрузка на ПК | Fallout24","dom":{"size":12371,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (860)","md5":"af39faf0a36ee120ab4fab04d76716d7","sha1":"88b3c5c0ee7cf67496fabfa36986d9ee721ff804","sha256":"ac657c57cf20aafc5f4b2aeed50af8688e5ac57d6aac46c8f2e9160a6da62d8e","sha512":"ebd7fd78e3a3d77048efaa4b17cb212c60ba6ec594b702dbf4aeca00e9fe76529cf04a0c31a2888bd7a50f0a6d9368ccb697076f648c7830de48a1ab21068a63","ssdeep":"192:2tQeOvekvaenIueHB0cBe+UAEauLBwM08tajUmeks81bb4Kyo+:3hqOR1cB/ZEauLBwM08tENEKV+","tlshash":"8b42243255a8146f1313a6cfd911bb4d74e781fefb37461241b82e7e2af2c448e295ca","dom_hash":"domhash3949874f2729baafe84637a15c884f66","first_seen":"2026-08-25T20:58:56.917801Z","last_seen":"2026-08-25T20:59:52.694911Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fallout24.ru/","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T20:59:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fallout24.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-25T20:58:53.371288Z","last_seen":"2026-08-25T20:58:53.371288Z","alert_count":14,"request_count":7,"received_data":242034,"sent_data":3372,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fallout24.ru/assets/js/site.js","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff1aee5e864b2b6743a552dfac766960","sha1":"36977df025efd1d84b8434180b06434321f9def4","sha256":"8d30695f6145351c6fadf44a54a255fb96705f6d95715881314c6e37ba2caf6b","sha512":"95e75afdfff5960cf90cd66ce0f5eeb3de25787325a5209c24657b89e28a30e12af3b14c43ae1a0a1e56061dd81f57e1d41f7051b2cb3077d8a61dda35a0656e","ssdeep":"192:qtckBqzQOcw7KnGlna4Io9861S4hRs0VI:njXne29Blns0VI","tlshash":"e1f165a85535227648b773b9bb83a409ff7504637082c2407fac85443fb4a65d6f6fe8","size":7675,"data":"","first_seen":"2026-08-25T20:58:56.936152Z","last_seen":"2026-08-25T20:59:52.706597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fallout24.ru/assets/images/power-armor.webp","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fallout24.ru/","date":"2026-08-25T20:59:24.584Z","timestamp":1787691564584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET /assets/images/power-armor.webp HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fallout24.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 126744\r\nlast-modified: Tue, 11 Aug 2026 19:00:48 GMT\r\netag: \"1ef18-658ca16c41c11\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126744,"size_decoded":127158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"871867015ec8a031119c04a1cac17294","sha1":"fb63fc580553e9fde02dfcf2b32f1c074160ac87","sha256":"3966d94e5a7952c29a85f4491883e0f029cab1d9118851694953529ba66f8865","sha512":"24d32574128c5187a625325e251e66622b867101eeb14fb863e8c30376a5c69e92c2d8237f89d7f6802330403f42d235a4b27a7e2f9fdc0bd85d158baacd9d50","ssdeep":"1536:Ggp/7Y/rnigOJ7P3SpjbvLB1I2ZqvU6ySndrmdJl5xsBrSMQK5KW2zTujK1M8IF0:GSNJkYLySndr0b5MQ/TuG68cqHF5Jqc","tlshash":"dbc302359e87bb76a6ec5fb3901418111a9d1c627f38194143afe2bf0b1a43f3a3d199","first_seen":"2026-08-25T20:58:56.942908Z","last_seen":"2026-08-25T20:59:52.697724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fallout24.ru/assets/icons/favicon.svg","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fallout24.ru/","date":"2026-08-25T20:59:24.747Z","timestamp":1787691564747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET /assets/icons/favicon.svg HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fallout24.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 240\r\nlast-modified: Tue, 11 Aug 2026 19:00:47 GMT\r\netag: \"157-658ca16b6602d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343,"size_decoded":652,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed84b48767d3f62731ec20916ea68996","sha1":"1a6ec2872cc4531bb35ef2ce97c1c3553665a9b0","sha256":"d0bf2cbac6269292a084deb94e928afbd5de611652e59d4b008dd3dc77094fbb","sha512":"bc4f6e2d1d7a9ac21a973374931eb50d307d5456c4f239b7729ed533485166178ac892b76a30eafbc8f9aebaf561e47c06c0277fddcafbbd523f586b8aec61bc","ssdeep":"","tlshash":"2fe026a1411c9e1ce5530638c66d302a036f30c77e6a022568b421f0630e76fec6725c","first_seen":"2026-08-25T20:58:56.927445Z","last_seen":"2026-08-25T20:59:52.699964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fallout24.ru/","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T20:59:24.085Z","timestamp":1787691564085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: text/html\r\ncontent-length: 3635\r\nlast-modified: Tue, 11 Aug 2026 19:00:46 GMT\r\netag: \"305a-658ca16a2eb54-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12378,"size_decoded":4096,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (860)","md5":"40c5bd0f1cfcbcdea663080308c93eac","sha1":"4cecc0a6959d8d405e949315bde57c1442cedad4","sha256":"e9f91b12cc67ef9184c0f8bdb7b8144a5b6fc259c490091825221b20a6d928d9","sha512":"e0a4b71654cb215cd8419484f73d997ee19929cd1cbbf7df67dbbba7e446bb3c9a28662124e045edaf38530def75e12987ff51aea6ea1f0d88d3b89c6f32fbc9","ssdeep":"192:6tQeOvek3aenIueHB0cBe+UAEauLBwM08tajUmeks81bb9KyP/:7hiOR1cB/ZEauLBwM08tENZKY/","tlshash":"fa42143255a8546f1313a6cfd911bb4d74e781fefb37461201b82e7e2af2c448e295ca","first_seen":"2026-08-25T20:58:56.930653Z","last_seen":"2026-08-25T20:59:52.701809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":5,"connect":54,"send":0,"wait":66,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fallout24.ru/assets/css/site.css","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fallout24.ru/","date":"2026-08-25T20:59:24.461Z","timestamp":1787691564461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET /assets/css/site.css HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fallout24.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 3810\r\nlast-modified: Tue, 11 Aug 2026 19:00:48 GMT\r\netag: \"3280-658ca16b9001a-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12928,"size_decoded":4271,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3362)","md5":"07e45678388b56f0e18481a8218f9edc","sha1":"ad0b4dcabf8e5fae4514dd97bbd709f7b4372101","sha256":"121e7d0dda8ccb5af414b9b5d53e4d1581a7edc748b72a7c2153e6322c9af24d","sha512":"3ec8faa0334522c20e5cd6781abd48e21a4ea91c0a726288ffdebca7b4408c1d5953154ebcc69edbf10a0e3641381e4cdb749def2699cd0920a97b2ebd886e50","ssdeep":"192:QRglfwN9Sj37XfnrOZh27zuPFHVSe28iyheowsGFLi4n9+iBn:gFN4j37vyZo7zgxVIPyYowsGFLicsiBn","tlshash":"644293b1a260723cf627f655e3c5968d7020f217e82347edfdc2a66444c36f71ab5609","first_seen":"2026-08-25T20:58:56.933322Z","last_seen":"2026-08-25T20:59:52.703965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fallout24.ru/assets/js/site.js","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fallout24.ru/","date":"2026-08-25T20:59:24.464Z","timestamp":1787691564464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET /assets/js/site.js HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fallout24.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:02 GMT\r\netag: W/\"1dfb-659a32b5d209c\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7675,"size_decoded":3096,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ff1aee5e864b2b6743a552dfac766960","sha1":"36977df025efd1d84b8434180b06434321f9def4","sha256":"8d30695f6145351c6fadf44a54a255fb96705f6d95715881314c6e37ba2caf6b","sha512":"95e75afdfff5960cf90cd66ce0f5eeb3de25787325a5209c24657b89e28a30e12af3b14c43ae1a0a1e56061dd81f57e1d41f7051b2cb3077d8a61dda35a0656e","ssdeep":"192:qtckBqzQOcw7KnGlna4Io9861S4hRs0VI:njXne29Blns0VI","tlshash":"e1f165a85535227648b773b9bb83a409ff7504637082c2407fac85443fb4a65d6f6fe8","first_seen":"2026-08-25T20:58:56.936152Z","last_seen":"2026-08-25T20:59:52.706597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fallout24.ru/assets/images/fallout-hero.webp","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fallout24.ru/","date":"2026-08-25T20:59:24.468Z","timestamp":1787691564468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET /assets/images/fallout-hero.webp HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fallout24.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78284\r\nlast-modified: Tue, 11 Aug 2026 19:00:48 GMT\r\netag: \"131cc-658ca16c091bf\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78284,"size_decoded":78697,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bccfbbe6beeb6a197c957da5ff88f766","sha1":"175fb5ce442fd7543ecb285161d4d851cbf99219","sha256":"68be6caaf793ab8f6176a38f79670775a4b71fc42abe6bcad90ae9bd7712a379","sha512":"149468896e4b43552ace023f22589ad5a407b1beef3c796cd9dd5b442ad351b7c3d7ffa7963e524261c6a7a744dfc80338f355b9d5c12fe7febd0aac301f7527","ssdeep":"1536:VFjRR1euq9IW9a7jk3oVSHBL7fkYMVrUaxy06Nm4S0e7Xtr+/m7X7:jj8uoI9jUtMhUa006s7Xta/gr","tlshash":"c77302fc05cb9a908de2d195d38885b03ee2a27b93d5431f7be160057ba8a6c3527875","first_seen":"2026-08-25T20:58:56.938792Z","last_seen":"2026-08-25T20:59:52.708195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fallout24.ru/assets/icons/sprite.svg","fqdn":"fallout24.ru","domain":"fallout24.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://fallout24.ru/","date":"2026-08-25T20:59:24.557Z","timestamp":1787691564557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fallout24.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:16:06 GMT","end":"Sun, 08 Nov 2026 19:16:05 GMT"},"fingerprint":{"sha1":"35:40:33:FF:14:2C:1E:2E:CF:91:9D:CA:E6:15:3D:96:FD:EF:BD:15","sha256":"7C:6F:18:93:5D:FF:14:53:BD:B5:B7:7B:AF:A3:FE:B7:62:49:D5:E8:66:F5:13:2C:5E:4A:14:F2:28:CD:88:AA"}}},"request":{"raw":"GET /assets/icons/sprite.svg HTTP/1.1\r\nHost: fallout24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fallout24.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:24 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 339\r\nlast-modified: Tue, 11 Aug 2026 19:00:48 GMT\r\netag: \"2b0-658ca16bc7eb3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":688,"size_decoded":751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a010fe3adcad89d79ef0d4629f10b78","sha1":"fc54133b6caa524ad40bb3a85d8a4f74137da977","sha256":"a9748df21ab6b61a8f13b53dfdb6eed7b1dfd185da5dc67867fa1a2ba1c53471","sha512":"fcb47140b8bafd13ec42dad09509c152fedfbe747b9da6daf023bf39f26c923a3805e707d21cb86d4be8f7e1cf7c6f7af115b601d2e0a62d3c1afec78c18d233","ssdeep":"","tlshash":"c8019e2d84bca81c88824a3a13f4f9f5417f73ce92c0807c78bd539003166e1ec62ba0","first_seen":"2026-08-25T20:58:56.940948Z","last_seen":"2026-08-25T20:59:52.709487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fallout24.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}