{"report_id":"3e355a0e-433c-4a59-ae5a-b4d4c7c37de8","version":0,"status":"done","tags":[],"date":"2026-08-25T21:05:16Z","url":{"schema":"http","addr":"pubgplay.ru/","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"pubgplay.ru/","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"title":"PUBG скачать бесплатно на ПК — версии, установка и требования","dom":{"size":11767,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (682)","md5":"7aa106a7746564d6afe002a6d1224181","sha1":"70d31c37aef2514779e3d06ff5b6839139e77617","sha256":"efb2ae40b74b62367c010b15b76e9fd978b46937674e14af8438e28231feedcf","sha512":"1d8b94a095a793dafc6225af8eec437972042a2c844aebfa6b822c9e0238450b746c1dd38cc29d4987a2b1cafad0d0e5d8c8c412aa58c8ee7d73ba98ce3b1129","ssdeep":"192:meU6NziOgt+cumtv08mpUNCUGGXB0bok7XMV9g9IF6:ZDNz1YMmy8myNCUGGXqbokAV9o","tlshash":"8732952291d558af0201a2c7eb117b0da8ba52ffeb96121171bc1dad2ff3d50cd2751e","dom_hash":"domhashe797da8e6f8acf8b0bf7d14caf5479d0","first_seen":"2026-08-25T20:52:52.608496Z","last_seen":"2026-08-25T21:05:17.762698Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pubgplay.ru/","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:05:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pubgplay.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-25T20:52:46.557732Z","last_seen":"2026-08-25T20:52:46.557732Z","alert_count":14,"request_count":7,"received_data":339496,"sent_data":3411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pubgplay.ru/assets/site.js","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a338988efee398d13f7c6dd7d81f4f2","sha1":"ada888478c9667314fd8e9ae07ba1e2659624805","sha256":"019155cb1f9fef74fcf263f1f36aab91c18620ceaec0c49ced788ae019c71521","sha512":"f1f1a8ca422b26936495ccdebdaa601f009fde76516ba77247bc3bb0c54e7ea7f4179120bf7bef230b28b237ce5a22047561f3bdfb6167364f93479ef6b29cfc","ssdeep":"192:qtrQkEj9b5NHzUt9iRkAnrMYbpldpqNv3Hhvlvf:e+rltuAnrFpld01Xhvlvf","tlshash":"86f1e6589191367a40b753beaf43a948fe7205bbb00681053eac4f453fb1921c7f6dd8","size":7868,"data":"","first_seen":"2026-08-25T20:52:52.624281Z","last_seen":"2026-08-25T21:05:17.765526Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"37e8a6e0a9637640da2a9b54a975b759","sha1":"ea81b61787d0666d6e96c4da8a71891c360b9e8e","sha256":"ff2a26dda14b676e74fe2051cc9f6e5570beff928f0b437ae5b1cc254f3cbb8e","sha512":"e7041cde4dfb79ee5a6d38c26492697300175538e94e06d50817e580e39c2d0e8e4bbd2f888e096858247a288de78cb08b70fc62fa7203b99c6149c280a4d1f5","ssdeep":"","tlshash":"64f00ce63c894028c3a302b13b7392483039243b340ebc52f50d18522fa0f6514a750c","size":615,"data":"","first_seen":"2026-08-25T20:52:52.628641Z","last_seen":"2026-08-25T21:05:17.768198Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pubgplay.ru/","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:04:48.840Z","timestamp":1787691888840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 3629\r\nlast-modified: Tue, 11 Aug 2026 19:38:29 GMT\r\netag: \"2eee-658ca9d84e8a5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12014,"size_decoded":4090,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (601)","md5":"65663a2386dbfe8dcea84fef45c7f5ec","sha1":"5a23b478bd2b5399b92f2f4ac902b358a8f41792","sha256":"abb93324b657f1d8821dcf9c33591e7459c3220d2c62531e7bb41a7cabf025c4","sha512":"4fa1b2d0b56cfa043b8b6eaa1b276bcc820129e0644f131be11991a29aba2a2dcc33a559c7670d2a41cdebbb3b60c709b38a4a948766bd316a3050fee5b5bf16","ssdeep":"192:0eU6NziOKtLcAm9v08muUNCHGPXU0yXksyMV9g9IF6:rDNz1WHmC8m1NCHGPXNyXk0V9o","tlshash":"8f32952291d558af0201a287eb117b1da8bb92bfeb56121131bc1ead2ff3d10cd2751e","first_seen":"2026-08-25T20:52:52.615212Z","last_seen":"2026-08-25T21:05:17.764196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":74,"connect":54,"send":0,"wait":71,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/assets/site.css","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pubgplay.ru/","date":"2026-08-25T21:04:49.290Z","timestamp":1787691889290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET /assets/site.css HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pubgplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 3389\r\nlast-modified: Tue, 11 Aug 2026 19:21:34 GMT\r\netag: \"2cbd-658ca610738ef-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11453,"size_decoded":3850,"mime_type":"text/css","magic":"ASCII text, with very long lines (2095)","md5":"f62f45b83cf4c556b25035b3fdafe6f2","sha1":"331944617b9ea26101651426d3879144f1253c15","sha256":"fb6eb10457db087a4d237e5e3ebbd9756b20bedaa46538e63c10d2e5ab78528c","sha512":"0fcb86362810f641ee3d402821884516b552d0027ad61d7e1ef53d437b76ef09e17dd6aed2aee35b0b017bc1383312144cddb9b74b25fbce14e35970a9704b9e","ssdeep":"192:dFzOefy2MAdXRnB2RNO+Qsuygpsk698gf14ffs+D:TzOefytAdXRnBSoAgpJWn14ns+D","tlshash":"8432927562543238f637a5a5e2c1e30eb224e212e53747eafd51e76480c72e71ab270e","first_seen":"2026-08-25T20:52:52.616751Z","last_seen":"2026-08-25T21:05:17.764847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/assets/site.js","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pubgplay.ru/","date":"2026-08-25T21:04:49.291Z","timestamp":1787691889291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET /assets/site.js HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pubgplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:01:40 GMT\r\netag: W/\"1ebc-659a331348ebe\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7868,"size_decoded":3168,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5a338988efee398d13f7c6dd7d81f4f2","sha1":"ada888478c9667314fd8e9ae07ba1e2659624805","sha256":"019155cb1f9fef74fcf263f1f36aab91c18620ceaec0c49ced788ae019c71521","sha512":"f1f1a8ca422b26936495ccdebdaa601f009fde76516ba77247bc3bb0c54e7ea7f4179120bf7bef230b28b237ce5a22047561f3bdfb6167364f93479ef6b29cfc","ssdeep":"192:qtrQkEj9b5NHzUt9iRkAnrMYbpldpqNv3Hhvlvf:e+rltuAnrFpld01Xhvlvf","tlshash":"86f1e6589191367a40b753beaf43a948fe7205bbb00681053eac4f453fb1921c7f6dd8","first_seen":"2026-08-25T20:52:52.624281Z","last_seen":"2026-08-25T21:05:17.765526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/assets/hero-battleground.webp","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pubgplay.ru/","date":"2026-08-25T21:04:49.296Z","timestamp":1787691889296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET /assets/hero-battleground.webp HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pubgplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 135312\r\nlast-modified: Tue, 11 Aug 2026 19:21:34 GMT\r\netag: \"21090-658ca60fd3a25\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135312,"size_decoded":135726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a2511e1b867bca57c1e612501cd6e08","sha1":"c4eaae7c17e891f65737943122781bc68e49d3c0","sha256":"37ae61c9f94ee9f1de6e726328e5e2bcceec6524349c1125eb25c1f3839eb013","sha512":"f8a54fcb6f6374f7ccf40aecc6eeeffce51c6af13a15cf9f5b3c8fb9aca02e66d8d768e145a9a07b146d6f47cc35dd49763d3a734a5c2a2054ec824a8b2017d5","ssdeep":"3072:08bQ83utLBqFdISRGtqWl1mBBQNS+A4ljAJ:08qLELISBaSzMa","tlshash":"8dd3122098b2d4807127f969cd8a97efcd210c32f70ddaa9a7267dff7dd081140d6a92","first_seen":"2026-08-25T20:52:52.626832Z","last_seen":"2026-08-25T21:05:17.766096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/assets/pubg-play-logo-dark.webp","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pubgplay.ru/","date":"2026-08-25T21:04:49.301Z","timestamp":1787691889301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET /assets/pubg-play-logo-dark.webp HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pubgplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 107880\r\nlast-modified: Tue, 11 Aug 2026 19:21:34 GMT\r\netag: \"1a568-658ca61042f88\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107880,"size_decoded":108294,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e226f63e443c4dc2738728f610c888d5","sha1":"c3efe18ea3f41011c17d4012efd4ac251d5c3b0b","sha256":"bacbf193098e1adce0bcea139d07e14a01203b9244dcbf0c62ca28d6d30198d3","sha512":"8abdf01713536b1472f45f7cc865a6c9a736d1fb48a3e76239a7725338900a7075ceaa8d986dfdd3ee556f05e33689e70d1939f5886455c7aa3bdcd504b4f052","ssdeep":"3072:PdYy7GS9oVOLUvbyt7eKFaObgafOvkcVb6wDjTp:P/SS9oV2SbK7bgafIr6wDXp","tlshash":"8bb3120273e163397f16a2ecaa311d8a52465bbfcd374ea4654e50bea13ec571a0102f","first_seen":"2026-08-25T20:52:52.611185Z","last_seen":"2026-08-25T21:05:17.766644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/assets/apple-touch-icon.png","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pubgplay.ru/","date":"2026-08-25T21:04:49.609Z","timestamp":1787691889609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET /assets/apple-touch-icon.png HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pubgplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 46991\r\nlast-modified: Tue, 11 Aug 2026 19:21:33 GMT\r\netag: \"b78f-658ca60fa30be\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46991,"size_decoded":47402,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"9dc581491c2bc6bf365596815b774f87","sha1":"78c081207622f48abdad482f1469e1303d934c44","sha256":"433ae9dbec84fa5a66475101820b2cd95275c6a8f678e4e0d2f306dcaad930e4","sha512":"f14ec58689a6eaeabfee1812ed506726a7ef98ea9287135a003fdeb56114b73e5809c539c692ea1f1f6c274f54cb501d064bd5982b2a8cbf5a842f95c382e026","ssdeep":"768:V2v/FiuriSHKDsMaS7nP6DT2Qt5G/ynVEZh7Hipkp+7P3qrkvuBc/zn/xTl4ZrGv:VIiu8DszS7P6DqQtTyziT7iQSKzn1lUy","tlshash":"ff23f2d9d80dbadd1290805131b0798f087227353f37b9a7321f6920b9b739e72ad926","first_seen":"2026-08-25T20:52:52.612442Z","last_seen":"2026-08-25T21:05:17.7672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pubgplay.ru/assets/favicon.ico","fqdn":"pubgplay.ru","domain":"pubgplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pubgplay.ru/","date":"2026-08-25T21:04:49.611Z","timestamp":1787691889611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.pubgplay.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:24:11 GMT","end":"Sun, 08 Nov 2026 19:24:10 GMT"},"fingerprint":{"sha1":"B0:53:EF:D4:37:FF:64:D8:8A:35:6E:A5:73:7D:1A:3F:FE:D4:9E:82","sha256":"28:BE:DA:AA:2A:22:5C:43:25:66:96:6B:57:86:BE:61:D2:58:67:4E:EC:1D:44:19:04:0B:8B:6C:D1:FF:F9:F6"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: pubgplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pubgplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:04:49 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 14982\r\nlast-modified: Tue, 11 Aug 2026 19:21:34 GMT\r\netag: \"3a86-658ca60fb9ff5\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14982,"size_decoded":15396,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"584d9e134df2e7ca4d8f384cd0130043","sha1":"58f39d5964ecfa447a970f1a2a4e0e181cbc8d7c","sha256":"0696631c0e72db01387c98a0bf46375a63fa61944b273476f8ef79771ef70ae1","sha512":"0c8166cbd2489675275f9296026b291a54efab9a9b247d3264d6eb337648edda08ac63643c4170bff7dd943bb90da3667c695905c5791a60a92dc87efff9b160","ssdeep":"384:fI4cT5oZ0xPf1Y6dJ5Pn5mqSFQy8smYWiTFPKX:zc5oMn1Y6bPTS6yQFAMX","tlshash":"5b62c0e384233cbd9d67987c5971c7555ba8128d2e2312ed0c9f39794f625c4b5e03b2","first_seen":"2026-08-25T20:52:52.613891Z","last_seen":"2026-08-25T21:05:17.767718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"pubgplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}