{"report_id":"148d8784-4c31-499a-8862-72dd8a22f66b","version":0,"status":"done","tags":[],"date":"2026-08-25T21:11:20Z","url":{"schema":"http","addr":"getbandicam.ru/","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"getbandicam.ru/","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"title":"Скачать Bandicam для Windows бесплатно на русском — рекордер экрана и игр","dom":{"size":15416,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (375)","md5":"8fc2d90f6ea07fad043bd67d79417f71","sha1":"d02133e554898f351d960ec860e1e3d108b6e750","sha256":"01ef2eb7a054df8fae3bd84e997031b25116571c06f79b69741ee9fc4daaf660","sha512":"a0dcc320e6d288343d6831b812a0f86ca2bffbe4751b4d46487dac1c9a04a41a9e6cc59c462e84aab57ec4d1f10860300b17118114b7b42c86df80ae5299a0fd","ssdeep":"192:zRsb4/KinBkBbm9bn9bZ7V9sDxIINxAbhqrT7EETdzsH4hGkbNQcPH707UVzR:zR//KinBkBCbZeII3Ce7JTpI4hBP47ed","tlshash":"d962813255f428af5601a047ed147b4e7de281bf6f9a5b1131bc2d6e3fe2885c92b20d","dom_hash":"domhashb8612c5bba66dc4ff0b30a6aadbaeedb","first_seen":"2026-08-25T20:59:12.233968Z","last_seen":"2026-08-25T21:11:21.244912Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getbandicam.ru/","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:11:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"getbandicam.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-25T20:59:08.783143Z","last_seen":"2026-08-25T20:59:08.783143Z","alert_count":16,"request_count":8,"received_data":363296,"sent_data":3972,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getbandicam.ru/","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b532abe1763158deac2394b308314b98","sha1":"1bf82f98463a487072865bb3880406beca50d3a5","sha256":"ef28031b9de4de636dc9e27357bd63e571f77cefc8a73003b5ec7c7ce383f313","sha512":"78e40a2908a586c7388a82741e7ec19e61986b6fe4e86a9d961b224d559b693f04084ebb401325f7ba0bd2d083f99d2b214e0fa7543bee3062d8adee3e6c1a86","ssdeep":"","tlshash":"2ef0e177b88492f5c2f63136532ba34d711718b92089ac34854d8c813abac5d502f96c","size":576,"data":"","first_seen":"2026-08-25T20:59:12.260908Z","last_seen":"2026-08-25T21:11:21.250895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/js/main.js","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8ddc81ebe9c6d5f6a98f6dde69e593b","sha1":"675df87a006242cb67de58a4f9a248147d063c16","sha256":"5f2473f76099eb505b663b0a933ffed7cb7427804bebab37c6c130fc9a25268b","sha512":"fd70e7d7c9a138843e25272eb5b81d898a6af9b6cf0564bc379d2ad72e385014833e4299193abe9292fdda23faaba4351a7f6717ac37e475554f67e9c1b975e7","ssdeep":"192:OkGQa9yxFlrmQihmQlrvMpr9uTWLJEfLyMfgqP27hknrq4bqWjhKlonAFg/:OkQQhGd6EfL6qe7ae4mWdKlCAA","tlshash":"3302b828bce330725063a1aeae8f658cf5b04167d409cc013d6c97862fd4e7657bdae9","size":8471,"data":"","first_seen":"2026-08-25T20:59:12.244279Z","last_seen":"2026-08-25T21:11:21.247264Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getbandicam.ru/assets/img/favicon-32.png","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.809Z","timestamp":1787692253809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/img/favicon-32.png HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 750\r\nlast-modified: Thu, 13 Aug 2026 21:51:51 GMT\r\netag: \"2ee-658f4b62b5f98\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":750,"size_decoded":1158,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"93bec81867c196fb3f1d5886a367d238","sha1":"7db3531c1571ca64dd5fc216c8b672730856999c","sha256":"860d410224152b11eeb77f7a7fb1dae7d0fec2eb4b907d2363ef59e31d8b8b12","sha512":"079a8e46104fe2691c4c1b5657ddc4415fa6db2ddf85e9ad0bd2e76e2a495ae1c458e11667b729ee0e24bb0c6936e42c47314846815b881ff951927efd9de063","ssdeep":"","tlshash":"f901baf21080ccf0fbb8c92944d77edd08c8425f479b8719109ab47e51c20c1c90c339","first_seen":"2026-08-25T20:59:12.251033Z","last_seen":"2026-08-25T21:11:21.245925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:10:53.126Z","timestamp":1787692253126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 4844\r\nlast-modified: Sat, 22 Aug 2026 13:52:28 GMT\r\netag: \"3e44-659a3104af284-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15940,"size_decoded":5305,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (375), with CRLF line terminators","md5":"3555ced8b5a5645fb6f893dea187e061","sha1":"0a62aaed19bafae25277d4644f0b8a10339eb772","sha256":"dae934f8c14b901051a27fe95fa97cdac033c5d204bd9c907f3ef20aab218622","sha512":"7b4ca5db81be7601e7bf7dbdaba700fab6f8ff62828df34b9fc3fada69e277630aa6e40d75c066c3c59672cfe8a27aa5937749683e22e6499a53a9bd2b2b9f20","ssdeep":"192:+bPwJbImQBZDZ79sDzIIO1bhqrv7jCizs6+iO5bNQrPHZ71SxmO:ABZDwIIO3S720n+itP57sz","tlshash":"2c62403255c4686f5632a047ed147b8dfdd281bf6b9a4b1130bc2d6f3ff2854892b609","first_seen":"2026-08-25T20:59:12.237263Z","last_seen":"2026-08-25T21:11:21.246651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":3,"connect":42,"send":0,"wait":56,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/js/main.js","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.495Z","timestamp":1787692253495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:31 GMT\r\netag: W/\"2117-659a32d1894ce\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8471,"size_decoded":3276,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b8ddc81ebe9c6d5f6a98f6dde69e593b","sha1":"675df87a006242cb67de58a4f9a248147d063c16","sha256":"5f2473f76099eb505b663b0a933ffed7cb7427804bebab37c6c130fc9a25268b","sha512":"fd70e7d7c9a138843e25272eb5b81d898a6af9b6cf0564bc379d2ad72e385014833e4299193abe9292fdda23faaba4351a7f6717ac37e475554f67e9c1b975e7","ssdeep":"192:OkGQa9yxFlrmQihmQlrvMpr9uTWLJEfLyMfgqP27hknrq4bqWjhKlonAFg/:OkQQhGd6EfL6qe7ae4mWdKlCAA","tlshash":"3302b828bce330725063a1aeae8f658cf5b04167d409cc013d6c97862fd4e7657bdae9","first_seen":"2026-08-25T20:59:12.244279Z","last_seen":"2026-08-25T21:11:21.247264Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/css/style.css","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.491Z","timestamp":1787692253491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 3744\r\nlast-modified: Thu, 13 Aug 2026 21:51:51 GMT\r\netag: \"3867-658f4b621ca48-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14439,"size_decoded":4205,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f17ba2a1ec4f1e1e53537d50bc06bf25","sha1":"e7c9c6a905279f87de4317c51f6a5783f9dcc6fc","sha256":"ebce8eddd85b4a33b8e2b1b592d202d7e32cd2b9f8cb0838b5a40a43ed4e70f8","sha512":"1fa7a780f91147700622a2cac13b4205c60667575269e39dc0b63cfa380fd965e579bd9f6195b4156fb2f3b1b591963f22a45413da977c5ffae4b98d91cd95bb","ssdeep":"192:mhbeAef6eH9aWED5/ZwGVnIP471qkMn9wygl3VRNH:9Ae0/ZwGVIP1hwySV3","tlshash":"925285a56f286134a533e7a5f797e78df76c71025a0503bdbee5000882ca3bd507af98","first_seen":"2026-08-25T20:59:12.240487Z","last_seen":"2026-08-25T21:11:21.247898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/img/hero.webp","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.493Z","timestamp":1787692253493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/img/hero.webp HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87368\r\nlast-modified: Thu, 13 Aug 2026 21:51:52 GMT\r\netag: \"15548-658f4b636641f\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87368,"size_decoded":87781,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7613261d9b378a345a49cf9f425a7922","sha1":"5948429884aaf50ad88e6aaa49c8cf6c5f88f6fe","sha256":"db9d15f9d0f8b2913e8831b32d8cc3e12239b0fb0a8d69fd0963296ebbebc951","sha512":"226ba25e2d5d9c629e4119e3f3416418cbbd9600d3d3e03557c2ed3180153c2a35ecb7513e13dbbecb0261ca2a9428ab358af18d3e19519558089805973d1b2b","ssdeep":"1536:7ziWt1z9kMpvkhYzQv/8TJY0CrAIZiO8A6hlwZZhPV1Llj3buXq9mZnJtTD0RXMm:PhX97cUQaJY1rApInh37mlJB0n","tlshash":"eb83023b3af51bf2788027fe4ebe0bc54665d65d291553e5188c76fa2263883a0bc437","first_seen":"2026-08-25T20:59:12.253925Z","last_seen":"2026-08-25T21:11:21.24855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/img/logo-horizontal-dark.png","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.498Z","timestamp":1787692253498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/img/logo-horizontal-dark.png HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 197008\r\nlast-modified: Thu, 13 Aug 2026 21:51:54 GMT\r\netag: \"30190-658f4b6501e8f\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197008,"size_decoded":197421,"mime_type":"image/png","magic":"PNG image data, 1092 x 205, 8-bit/color RGBA, non-interlaced","md5":"3c134eadec1fcf48789bec2737cce4e9","sha1":"5089adb0478d6b00797daf30fb450abe0ce24ef6","sha256":"4a8b7b41dd2554c8d7444cb0f826618c093419ce4710040cd27365902f2793ed","sha512":"592c51083a479d2c92cb4905a9a7c69662e6fa254c113c5fab4c53011422950dedae4a9f4cae72d3c0f970b2dd79ac22012ddbbdc84f7b421a677cf9fd04e695","ssdeep":"3072:YbQQB3TXmvJrtIqt3KRvdUKfZnNICJt8rRqo0RXDX3tjH51G5OxeFi:Nm3TXobIqRKRjNIC38t7+XDXdLP6i","tlshash":"a314234bcffa44f698b0ba6b15fa304068a7d67951ae54630c19e4475206b2f7fac3c2","first_seen":"2026-08-25T20:59:12.25641Z","last_seen":"2026-08-25T21:11:21.249176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/img/cards-set.webp","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.756Z","timestamp":1787692253756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/img/cards-set.webp HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29510\r\nlast-modified: Thu, 13 Aug 2026 21:51:51 GMT\r\netag: \"7346-658f4b626cba1\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29510,"size_decoded":29922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50570df531e424e793b32d049cbf7612","sha1":"336aea0ea36ac206e20c7ea64a68eff44ed0ed8b","sha256":"baa69d72cbf649b52dfad37e741f558510440bf3b5dfbd9ac8a35ef8ca8c3f54","sha512":"d0d7882f82c7fef8dedd304f84f6861da4b8bcc63940d888053a75921aeb09ec8692df7c4d31fde8e122c85fa06b74ee50ec66538860fded47e9a7300434efbb","ssdeep":"768:J05+uwNIKmLAY2iKx+vJmWwHww/XTKwOm07ziz8:JVJNmLB2iHRwHwwvTKxp","tlshash":"b3d2f25332297db66b086d792b21df06c474f8d0ac17ff2624e405aa76266575f423f0","first_seen":"2026-08-25T20:59:12.247508Z","last_seen":"2026-08-25T21:11:21.249754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbandicam.ru/assets/img/icon-180.png","fqdn":"getbandicam.ru","domain":"getbandicam.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbandicam.ru/","date":"2026-08-25T21:10:53.808Z","timestamp":1787692253808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbandicam.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:44:05 GMT","end":"Wed, 11 Nov 2026 19:44:04 GMT"},"fingerprint":{"sha1":"39:F0:81:03:5A:12:F2:3D:F6:37:06:7D:21:54:7B:52:AF:35:03:AC","sha256":"81:AF:15:13:81:1F:00:42:DE:BE:84:20:C5:46:0D:B1:02:10:D3:B2:6F:97:3F:9D:61:37:33:58:FB:52:66:44"}}},"request":{"raw":"GET /assets/img/icon-180.png HTTP/1.1\r\nHost: getbandicam.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbandicam.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 6411\r\nlast-modified: Thu, 13 Aug 2026 21:51:52 GMT\r\netag: \"190b-658f4b63af816\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6411,"size_decoded":6821,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"58cbeeb4a66424cc198250153592756e","sha1":"2d879f789c33faf7a49d864661c71acd329c6280","sha256":"4e7431024782309cf54ae256b3144d01093264dab4e7a467bce89f037c6511dd","sha512":"cb82a810be28a3f59467d1c24559ca692cccd6f960d66c705a867214853466b3ec4628eb7a0ba7d208b1e83def9afdc61ebf38c269be50c0ded978e5b77f2b12","ssdeep":"192:gzDa4CJRhJIgN9fnbTRXTVuOA7yhE87z1EadE:OfE7J9fFxK031ldE","tlshash":"f8d18e4cd3c8cc293ccd9027792427a5b3e1607da5b83413896e59a4fe4e67c96ce04f","first_seen":"2026-08-25T20:59:12.258708Z","last_seen":"2026-08-25T21:11:21.250292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbandicam.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}