{"report_id":"188839c4-ca1d-4032-9af9-94a1c465101c","version":0,"status":"done","tags":[],"date":"2026-08-25T21:10:25Z","url":{"schema":"http","addr":"farcryplay.ru/","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"farcryplay.ru/","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"title":"Far Cry — скачать для ПК и выбрать версию","dom":{"size":13181,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (752)","md5":"74b342c851ebc3a024dc04780e8765c0","sha1":"ad3fefb0f40172d7209156bafe15f4a102839086","sha256":"2b2146cd6ce4787dbf924153e27851bf34bcb7d660793b65234a7513d4347bdd","sha512":"29aa7baf7aaaad51a0042140921f490d30026d5b892257f55f2df69eb8246db8e3c11efba26a910c746c219c50c40769a62379427e2e04205e532eb740e4cea6","ssdeep":"384:TRIm/asV7gB6uKLsBsYbWLACONSGfBQnl:UKLsBsmWLACONSG5Qnl","tlshash":"3d42553154d514af4312a5cbf910bf0c78a781ffdb1b9b2252bc1c9a2bf6c609a1f51a","dom_hash":"domhashf240b8fda7fffa505f6785f26fb63ae8","first_seen":"2026-08-25T20:59:25.570515Z","last_seen":"2026-08-25T21:10:26.679924Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"farcryplay.ru/","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:10:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"farcryplay.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-25T20:59:21.532679Z","last_seen":"2026-08-25T20:59:21.532679Z","alert_count":16,"request_count":8,"received_data":488085,"sent_data":3870,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"farcryplay.ru/","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b7e91aba6f370b54ca8dbc5d2d9f61d","sha1":"f735ea501470bd4a6a026ff9d52d3e25de17dab7","sha256":"524014fe159d0e559809ea63be85604981396f11a4422c92a97c8657513a547a","sha512":"01c5d1f8a82a3dd3afc2eafcc9d9a1327ea8ae1b3c81e4a5fa449cf8d4f59da887ce5dd5fe8dbdaa514d291adc4623a2fd596ddf86702e23986f6147e9752b37","ssdeep":"","tlshash":"83f0e177b88492b5c2f72132532bb34c711718ba20896c38864d8c813a7ac5d102f96c","size":576,"data":"","first_seen":"2026-08-25T20:59:25.594383Z","last_seen":"2026-08-25T21:10:26.691246Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/site.js","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe9c8056e7af61e116b07852988012e","sha1":"d0d879a1db38dc222f75db0009b8574e51e93ea3","sha256":"89319c0309aebe6ae1165895f8fa1f0189a22b575cd2e9e9710450d2a1037655","sha512":"c07510fa37dedf8b239dd4048079758b98af593e8936bb1f2fcba24d2a531ce052ed766689354517e58809ec412e58410f9a41ab1f6f6ea78be88e76e188708f","ssdeep":"192:qtNYUnPW9NGEO7yr6rF0Pkuram7tO3+X9IuNKWZrM:TUuGEO73qMgI3QIuNZrM","tlshash":"a212a66815543076007f63bebb836948fe35006b740691657eec4f892fb5a6183f3ee9","size":9089,"data":"","first_seen":"2026-08-25T20:59:25.5858Z","last_seen":"2026-08-25T21:10:26.683785Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"farcryplay.ru/","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:09:57.915Z","timestamp":1787692197915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 4118\r\nlast-modified: Thu, 13 Aug 2026 21:51:30 GMT\r\netag: \"3473-658f4b4e7e88a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13427,"size_decoded":4579,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (722), with CRLF line terminators","md5":"8f9de4fab31975afbbc698161984fab7","sha1":"b457846ef894f2c5f3f28a905b46a316e0ead7c8","sha256":"08221dcdca8285ccfed7d931b7bbee4e34502ac8b81f41fda5fe4e8d465ea3f8","sha512":"e3a9ec77abbc6b9e8bf3a2236b8d3b8745471e965cf62f12a85b6ad0ee8faa3ffad4c0559f64d5a0ecf9950377f446ea6e2650479ea24a18fbaddc883cf4b738","ssdeep":"96:Q7mEVbTpZ76YMtgMIPaTNRKBMj5rO0+Kui6bMBOqzLA1nvcvOHjEeScaioiyy7jN:zENpZ79iT12Bk0bbCLAqOHzSEdfBx+eh","tlshash":"c242242114c5546f0333a58bf910bf4cb8a781bed7179b2672fc2d9b2af6c609a1f506","first_seen":"2026-08-25T20:59:25.575148Z","last_seen":"2026-08-25T21:10:26.68166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":58,"connect":51,"send":0,"wait":66,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/site.js","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.328Z","timestamp":1787692198328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /assets/site.js HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:05 GMT\r\netag: W/\"2381-659a32b930e56\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9089,"size_decoded":3462,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4fe9c8056e7af61e116b07852988012e","sha1":"d0d879a1db38dc222f75db0009b8574e51e93ea3","sha256":"89319c0309aebe6ae1165895f8fa1f0189a22b575cd2e9e9710450d2a1037655","sha512":"c07510fa37dedf8b239dd4048079758b98af593e8936bb1f2fcba24d2a531ce052ed766689354517e58809ec412e58410f9a41ab1f6f6ea78be88e76e188708f","ssdeep":"192:qtNYUnPW9NGEO7yr6rF0Pkuram7tO3+X9IuNKWZrM:TUuGEO73qMgI3QIuNZrM","tlshash":"a212a66815543076007f63bebb836948fe35006b740691657eec4f892fb5a6183f3ee9","first_seen":"2026-08-25T20:59:25.5858Z","last_seen":"2026-08-25T21:10:26.683785Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/icons.svg","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.625Z","timestamp":1787692198625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /assets/icons.svg HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 287\r\nlast-modified: Thu, 13 Aug 2026 21:51:34 GMT\r\netag: \"26b-658f4b51ca590-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":619,"size_decoded":699,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fbe9d81af10a1040c800de649b7e164","sha1":"88909267f3fc34899d4e2bcb2dd73eb96dfdcb50","sha256":"e7dd17a4837fff8fd3542fd5e1cc2d9d59031f322464b0067a951962243c8b66","sha512":"9727d108f2aae7137a7c9517e9eec6c4da1a2e2fd8ab2ba49f5b868c0290566e6daa01c592aa0a1ee56699e0519d8822890016e194c66ce71d6657be421bacae","ssdeep":"","tlshash":"9cf0282bd5bc6e0cc491a3b317a4b6a6203f33cb07c9413cb86147420789ba6ac527a4","first_seen":"2026-08-25T20:59:25.590503Z","last_seen":"2026-08-25T21:10:26.684515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/far-cry-jungle.webp","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.627Z","timestamp":1787692198627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /assets/far-cry-jungle.webp HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 152552\r\nlast-modified: Thu, 13 Aug 2026 21:51:33 GMT\r\netag: \"253e8-658f4b5126845\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152552,"size_decoded":152966,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e00b1f1547251ee6339dd99f1694a01","sha1":"4ef6af91591d9aa724f997047d1b81d12206da57","sha256":"f921957c6479d9d208c7953b75d779fd6d468d681c392aa4c0d837d6174c7402","sha512":"f4c68a2a65a5bdc9499ff57da62180fbaf7fb1f597593d5ad4c565d946fe474f7f3deeed52b9826715c06c645ab1fca55401c00b4d51a1a3f7f978793f920dfa","ssdeep":"3072:XDFBGaD20VHd8ptXtxXlZrYaHOb2W47tiVCvkrC0LEXb6nd:XDFBGaC6Hd8pbxXUaHOB47tNsdLEXcd","tlshash":"c7e312b9b466600f6c7bb972d7905fcbb1de4565731612186abc9140a2eff3d0289433","first_seen":"2026-08-25T20:59:25.592291Z","last_seen":"2026-08-25T21:10:26.685927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/far-cry-mountains.webp","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.628Z","timestamp":1787692198628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /assets/far-cry-mountains.webp HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 202848\r\nlast-modified: Thu, 13 Aug 2026 21:51:33 GMT\r\netag: \"31860-658f4b51863a2\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202848,"size_decoded":203262,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed31a2dc2eb598632dc6b47d38d36a30","sha1":"f1dadd4b50caed55cc92eb28a8068aa0c4e36a9d","sha256":"6bb6dd2646f95eac866b555508b6d3391aa105d5c1349868725820d37c411534","sha512":"7fd4a7af68eed75dc57f139a30f9ba21bb50948c435f078617c8d3352524634665afe16f27f620a6a1070d22ea158f06232761ee8c7b2c0dddaabedcbd58ac2e","ssdeep":"6144:J+ji5CE4FV0Rrp+abClM8X5xT/jV7yy3F:JBMEJt+Nq8JprxJF","tlshash":"681423547e6af2390f054a4a7199ad4d9886f9823dc8398803eb9b7c4f5176337a4cfc","first_seen":"2026-08-25T20:59:25.57855Z","last_seen":"2026-08-25T21:10:26.687761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/site.css","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.326Z","timestamp":1787692198326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /assets/site.css HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 4348\r\nlast-modified: Thu, 13 Aug 2026 21:51:34 GMT\r\netag: \"3dbe-658f4b5211e2e-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15806,"size_decoded":4809,"mime_type":"text/css","magic":"ASCII text, with very long lines (9720)","md5":"450b99dc9a2bf44fe0b44e2a17e65a4f","sha1":"b86e6343595da8f78248ffc867a5fe1720b67491","sha256":"6bdbeb7d216b15b42aad660fafa6ca48c771ad10e9b95dc90419bb35d3b24fe2","sha512":"9fa90bff12553fa4745c7dc5520c83db61fd84e8cd6d50efdf1871ba0b79eafe4f9ffc69b8e6b0318b7ee0ad4e7a6b88501092258eaaebd44e216342aefbdf11","ssdeep":"384:1SsMiMeTKDszGI3LriNc8zRsqrQDYlpCCKu00qKNPIy/y:s4Maic8tsZL3JS/y","tlshash":"d162737263143239b13ba99ae1c1f75eb110d122e42743eded85ea6589c71f32732b4e","first_seen":"2026-08-25T20:59:25.58297Z","last_seen":"2026-08-25T21:10:26.688505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/assets/far-cry-hero.webp","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.334Z","timestamp":1787692198334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /assets/far-cry-hero.webp HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90170\r\nlast-modified: Thu, 13 Aug 2026 21:51:33 GMT\r\netag: \"1603a-658f4b50cd661\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90170,"size_decoded":90583,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d0e860f02e4bbf7d95c7e784f9c9e2c","sha1":"a4d18ca3c404cb0f4e60a65ca46e1ef2e027f3b9","sha256":"c3a54143cdd100a123b24785f036a11560f7cbb7e980fe02a2877c72678fc692","sha512":"0669a1fe2e108bff3daa0fc963e8fcf0f51fcf735c35fcb2f6f3ea09494784b21e6568db61f67e6dfb16fd83fb0acd043f5f144a4d109364a811100b652305d2","ssdeep":"1536:pjIwxo3GKPyBeMrWdvDdeKrAtixUXihUENQItmcHbBuWtCMy7mHcKx+4Coj97eH:+Mo3GKQeM2vEKWWWihUAn7B393tFj97q","tlshash":"1c93024af80a2971f314a0d1d7b656b9b847ea68db2c60ab364ff3409cc6579fc99304","first_seen":"2026-08-25T20:59:25.588784Z","last_seen":"2026-08-25T21:10:26.689216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farcryplay.ru/favicon.svg","fqdn":"farcryplay.ru","domain":"farcryplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://farcryplay.ru/","date":"2026-08-25T21:09:58.805Z","timestamp":1787692198805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farcryplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:46 GMT","end":"Wed, 11 Nov 2026 19:43:45 GMT"},"fingerprint":{"sha1":"1D:2C:13:5F:E1:BF:30:B9:8F:B4:03:8A:26:92:90:B0:C2:DC:2C:BE","sha256":"2F:8D:E1:DF:70:62:4E:29:28:B8:C7:3A:7B:D2:27:33:AB:C8:A6:CA:D8:1C:AF:A0:CE:7A:45:F6:53:70:5E:28"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: farcryplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://farcryplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 151\r\nlast-modified: Thu, 13 Aug 2026 21:51:30 GMT\r\netag: \"a7-658f4b4e1f114-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167,"size_decoded":562,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7bdee5ba2720def7443b44e1b03e3cf","sha1":"c79bf82f2a53cff5e63555a8ecf1933dec27c055","sha256":"8e226cd794f1d0ff67494510792b0183c2dad483ff6a527facdd92b7867073ff","sha512":"f33eabab2cf6d796ee29cd05df73d0013db0e5427508ba0b0141f4628170c51bbde2be2fd26c3b5f04e38b077ab653e2527b94d41b1680cc4714fdac032b5ae6","ssdeep":"","tlshash":"c0c080da547c7c0455144a505968fc894996314a248d01ddf1b0583c330dfd6bc45518","first_seen":"2026-08-25T20:59:25.580957Z","last_seen":"2026-08-25T21:10:26.690562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"farcryplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}