{"report_id":"484a5370-dd40-4ee0-9fed-7088ec1e7fc6","version":0,"status":"done","tags":[],"date":"2026-08-25T21:17:14Z","url":{"schema":"http","addr":"uninstalltooll.ru/","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"uninstalltooll.ru/","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"title":"Uninstall Tool — удаление программ и остатков в Windows","dom":{"size":20875,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"771d8aff23c53c90b6947c723819360e","sha1":"77b60fb7721c0e2893353019c96c20d08acf7795","sha256":"ad0755c7ce738282a7b220f0caf3c363ce8bf3e2ed84008377d16e9cb2c4ae2a","sha512":"e08012584503ea9e2da2c1759257365ff3343f814b58d6bf4ff5c275512fe8e74ea07e1b1ef25c069c0721ba5c4589bd857778c3db9c657a9177bc482d80a499","ssdeep":"384:TRMK/77d1yarw+96pZ/Sn7sLC37u9P1v5tO9f7K6DyCQO:4+wv/S4uA1BYzmCN","tlshash":"ff92213154f164bb1142a09bed016b0e7ee685bfae9a060131fc2d6d3fe3c65c92b54e","dom_hash":"domhash2e01b76cdec08a819f3402da441f732e","first_seen":"2026-08-25T20:55:44.625712Z","last_seen":"2026-08-25T21:17:14.953117Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"uninstalltooll.ru/","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:17:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"uninstalltooll.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-25T20:55:41.816158Z","last_seen":"2026-08-25T20:55:41.816158Z","alert_count":56,"request_count":14,"received_data":270966,"sent_data":7198,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/js/main.js","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c741e9c93f464e02b3f73bfeaa9db2c0","sha1":"1e055e2d368fb90d166b89adcfcb305e1fc5bc41","sha256":"082f42b4bc8ff3e033002b81b44ef339828ac0d07e7cf02f7ec3cac042fb610a","sha512":"ed71fa3739481cdd9e260cda6d3e0b5ca19d35b87d426aa2b5224e67b5e684b2de6874ada732aa804fa4a5f0543ad3b061784266b0755005944507c9ff09ea52","ssdeep":"192:PsHr56Vifn5PqNWP6RxgyzUFyFoJgwt0yTHQB:PsLz5ktzpFeDt0y7s","tlshash":"7ed12fb9e85932f298b7737c9f669448fbb506734006c2107dac8c403fb8a2552bdde9","size":6209,"data":"","first_seen":"2026-08-25T20:55:44.637498Z","last_seen":"2026-08-25T21:17:14.958706Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e99e7426683d1ec9b67a330638ca854","sha1":"1aeefeb2138b09c5adcf93319966563300924b21","sha256":"afa4c0fc65ad24db41c9483fa45dd763b7922280c63ac4fc015b93c436586b78","sha512":"2f29f5df85069de961b7a90b5083d88879c4462fb44ef60b4875b763178bf947eaa745d736db027837e48d72b64bf4b417e5f8e8d5441317da1f21425a197bea","ssdeep":"","tlshash":"0cf02677b885d2b5c3f72131632bb30d715718b92089ac34c51d8882397bc79502f97c","size":576,"data":"","first_seen":"2026-08-25T20:55:44.686144Z","last_seen":"2026-08-25T21:17:14.962788Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon-batch.svg","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.780Z","timestamp":1787692607780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon-batch.svg HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 200\r\nlast-modified: Sun, 16 Aug 2026 17:01:19 GMT\r\netag: \"127-6592d00a5bd05-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295,"size_decoded":612,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76bded21c5499371ba3b812771c1c583","sha1":"6881a63967eb60cd900908ae0baab6a4c54df2ec","sha256":"7d40f62b094b6313b7e84bd1df00ed051fa59e1cf2f0f4b682beddb3a20520c8","sha512":"d85ee37ebdad1be26cd64c229581c0458f469838662df5827fe4afb55c48bc3d74ec416f24366bf4922eee104b4306d5bfbad9f36f49bd7a4d6b87c4f3432e3f","ssdeep":"","tlshash":"93e07205a209083cf5264208eb18b239127a02c32288a052882406301071a0ded3b6d8","first_seen":"2026-08-25T20:55:44.650435Z","last_seen":"2026-08-25T21:17:14.953901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon-startup.svg","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.782Z","timestamp":1787692607782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon-startup.svg HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 233\r\nlast-modified: Sun, 16 Aug 2026 17:01:20 GMT\r\netag: \"1be-6592d00b51319-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":645,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ac0f4bcbff15b2cb6016075c9ed5d97","sha1":"e9ce5d232cd4038cce3711b733520c6fbd21c77f","sha256":"1399760d482107040bdd50680403a377a23057afd5ca15a308c4f94f9ad37a1f","sha512":"da777851a10e56b891a82ab6dcd8dd804c75debea404d6a0cb56708ec7bee3211f40e9e37b7751c93573cdafb4af5d98db333374d0b96cbdb359bd337d60542a","ssdeep":"","tlshash":"2bf0ec55a268083cf563064ce719723d527f93d3530861457a241a781436b1efe7b6e4","first_seen":"2026-08-25T20:55:44.683848Z","last_seen":"2026-08-25T21:17:14.954812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon_32.png","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.774Z","timestamp":1787692607774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon_32.png HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1647\r\nlast-modified: Sun, 16 Aug 2026 17:01:21 GMT\r\netag: \"66f-6592d00bd3549\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1647,"size_decoded":2056,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"b49a5bcff0b86fa263359048a4856259","sha1":"6a4d4ddb1ca3213e142a3b07df4e9a7af067851f","sha256":"50f676785482ca68f7d617c670f6f1eecb294b34d224974d7e7dc187b9c1c70d","sha512":"19c8fc35e8c699173a09e66a9487ff03be0f87e4a33ed0735037a9869cc3ec507cc8839764b6dcc6961edfa3b16b13bdbcd27a86d5ec9ec4992da040a18c0afb","ssdeep":"","tlshash":"9e310c1055d4d2c8ecf83602a7bad3b57b73816d2337537e119c2346073919484d1bce","first_seen":"2026-08-25T20:55:44.657994Z","last_seen":"2026-08-25T21:17:14.955426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon-clean.svg","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.779Z","timestamp":1787692607779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon-clean.svg HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 220\r\nlast-modified: Sun, 16 Aug 2026 17:01:19 GMT\r\netag: \"17c-6592d00a96e67-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":380,"size_decoded":632,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0a56107b806768a696904c52804b93b","sha1":"291590399ba866511dcb80ad241938fc2a3ae664","sha256":"0915fc9532a3bfb9d935582e00089d57ea463a20ba3c1a1aec46aa276971ee08","sha512":"84ac8f6341a04c44b4a6169c87f1d0489b33e4199977a836a3736856e52272fd1396e47c5b5272047dd5eaf0ed56b0244b4483be472bb52b6d996081ce71568a","ssdeep":"","tlshash":"2fe0d8149248093cf667424ce718717c52bb52c3532c7009a9581539153561eecb76fc","first_seen":"2026-08-25T20:55:44.648172Z","last_seen":"2026-08-25T21:17:14.956086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/favicon.ico","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:48.058Z","timestamp":1787692608058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:48 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3247\r\nlast-modified: Sun, 16 Aug 2026 17:01:16 GMT\r\netag: \"caf-6592d007b58a2\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3247,"size_decoded":3659,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"ce7867e77fe1f3cf2b14cc950c26a734","sha1":"c651fc5c662b3de3bac41bc968754488f43237d4","sha256":"4be2f9973eebb3066021d763f36dc139c1f59138d29ee4b443d17c8894ba7435","sha512":"4935ff1684df605ba16435d45d2ba80ca3242d6d795063a8410943b3be05c62e2fd375549e824729d519fcaa5de0a3cfb677c3176c5bea35851b05be9881a074","ssdeep":"","tlshash":"b0616dd2b2e0bf74550cb72052b778b36ef61d385fd2382a36f259153a49709c231d00","first_seen":"2026-08-25T20:55:44.643161Z","last_seen":"2026-08-25T21:17:14.956736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:16:47.427Z","timestamp":1787692607427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 5640\r\nlast-modified: Sat, 22 Aug 2026 13:54:31 GMT\r\netag: \"537f-659a317a496ed-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21375,"size_decoded":6101,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"de903ddbf13758646479fd21944ffb40","sha1":"e8fcc199030b2659bdf058aa6addded4599e182d","sha256":"a38701287ba15024502d9ac2e98620dae763f3d7e7e8aad19880f2d84309ef5f","sha512":"bab394964e9c63c3109426f64aff94dbfdeb2ad31fd409a289a11cfa6be92e2151216d8b0c6831fa374230ed8acc9bfaa6eb725ceabbc2e3369a0885f10df973","ssdeep":"384:Zh9JczZ9Afz7R/Cl7IpK3t9X9sKnsEz7W:Zhst2f5QZ3tt/9zq","tlshash":"0392ef3154c164ab1132a19b9d016b4efde581bfab9a460631fc3a6f3ff3c24c92754a","first_seen":"2026-08-25T20:55:44.645758Z","last_seen":"2026-08-25T21:17:14.95731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":59,"connect":24,"send":0,"wait":40,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/css/styles.css","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.768Z","timestamp":1787692607768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 3390\r\nlast-modified: Sun, 16 Aug 2026 17:01:09 GMT\r\netag: \"3744-6592d000afcbc-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14148,"size_decoded":3851,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8eae33e2dfca164ab5763a5ad856430a","sha1":"8cfdbcb666f17674d7f81f6883e78922f6631d47","sha256":"1f201c24b1a398b01ff2c0930f5eb27f15303a633500e1c51c0dfbb1fc25f48f","sha512":"70ea2c8a4f14bfcc2109a8e8a8e18ef5f335aae1cd0ad7f7bcb829fd50c67e5ed6729ea0abe115c7ba02552d8102e255307df19f4f7d3aec36ece6a9052f3c73","ssdeep":"192:4kf6CqPwv7pvDIlqmj+s1oiG+7H2abN+O72DVuQKXW+Gdq675te:FSUpvWon4QKXW/N7q","tlshash":"845277e8db19b169b637fb78bb85570ab7a051228a02037dbff05008a5c51bdd171f8c","first_seen":"2026-08-25T20:55:44.629553Z","last_seen":"2026-08-25T21:17:14.957822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/js/main.js","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.771Z","timestamp":1787692607771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:02:23 GMT\r\netag: W/\"1841-659a333c8cb69\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6209,"size_decoded":2219,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c741e9c93f464e02b3f73bfeaa9db2c0","sha1":"1e055e2d368fb90d166b89adcfcb305e1fc5bc41","sha256":"082f42b4bc8ff3e033002b81b44ef339828ac0d07e7cf02f7ec3cac042fb610a","sha512":"ed71fa3739481cdd9e260cda6d3e0b5ca19d35b87d426aa2b5224e67b5e684b2de6874ada732aa804fa4a5f0543ad3b061784266b0755005944507c9ff09ea52","ssdeep":"192:PsHr56Vifn5PqNWP6RxgyzUFyFoJgwt0yTHQB:PsLz5ktzpFeDt0y7s","tlshash":"7ed12fb9e85932f298b7737c9f669448fbb506734006c2107dac8c403fb8a2552bdde9","first_seen":"2026-08-25T20:55:44.637498Z","last_seen":"2026-08-25T21:17:14.958706Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon-force.svg","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.783Z","timestamp":1787692607783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon-force.svg HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 226\r\nlast-modified: Sun, 16 Aug 2026 17:01:20 GMT\r\netag: \"1dd-6592d00ad5292-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":477,"size_decoded":638,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f93a64698c90af276e1171562c9f5292","sha1":"861dec30509c8c0824a99eed8f28fff394ee0aa0","sha256":"3313aef5ad28f7e2153fcc8cadea2e2f0d467906ea172467ea457772646f4fd4","sha512":"3a3ef9a60ca7b85871f3c6c94c20b9f6e8696b32cc89cc96c8a4c9a9247ead87350f11fac10dc7cd6ebc91deecde76cffe8fcbfafff7565b8c6b1621287bf2c6","ssdeep":"","tlshash":"36f08c09a318083cf523078cdb18323d627a92c3531d7109ad692a79157162eedbb6e8","first_seen":"2026-08-25T20:55:44.640485Z","last_seen":"2026-08-25T21:17:14.959246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon-portable.svg","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.784Z","timestamp":1787692607784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon-portable.svg HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 248\r\nlast-modified: Sun, 16 Aug 2026 17:01:20 GMT\r\netag: \"1a2-6592d00b132d6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":418,"size_decoded":660,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98ba76ee424331e17f6984144e7fca94","sha1":"54959140e39a9ec5355bf67a11e206df7de2686c","sha256":"011441cdaf2b414e5bf292e88ae128b791b450fe4ae0c4fda5f0847b3689c8e0","sha512":"3f48d920a2df90cf5f660622624e6bf6dfa88533b2f0ad8f30a99894adddc3d02353155d2b5aa4afb937db55c4923e2eeeb75c1712042d49294d34674e6c4dc6","ssdeep":"","tlshash":"f2e02b04a318483ce122434ceb19717d122f92c2230c1145794c2939ed711aeec772dc","first_seen":"2026-08-25T20:55:44.653243Z","last_seen":"2026-08-25T21:17:14.959843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/hero-uninstall.webp","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.778Z","timestamp":1787692607778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/hero-uninstall.webp HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 119100\r\nlast-modified: Sun, 16 Aug 2026 17:01:18 GMT\r\netag: \"1d13c-6592d009a2023\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119100,"size_decoded":119514,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"654bf08bea8243a40edb705096c12460","sha1":"a275d7511303d94ec02643b95261e4766273aeaa","sha256":"465c1b531d86d57ef21bd167ee3f435408c78dd358084f6997434ea5102c801a","sha512":"241f522c657313b4b4ed000c59eeddf1e8509900a308763e2f20ce80b09a0b6f784f825ca09566ec4a295938fb958a0adb4bff0f50628db3c6b9cdd2afbd513a","ssdeep":"3072:UvFylrqSyOfA0oUFEA/bllHfDM+D5BlRP7k:U4NvFbLTDk","tlshash":"97c312f5b45c0ee478d1fe9c6b99f4c84262a6306e026d51392e94f6696cdb0ec0cfc8","first_seen":"2026-08-25T20:55:44.671638Z","last_seen":"2026-08-25T21:17:14.960424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/icon-tracker.svg","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:47.781Z","timestamp":1787692607781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/icon-tracker.svg HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 235\r\nlast-modified: Sun, 16 Aug 2026 17:01:20 GMT\r\netag: \"1c6-6592d00b9129d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454,"size_decoded":647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5235307161be8ce8817f55dfa25a1a3d","sha1":"03339e257f9063e496157b0fbf4a8083041ed1c0","sha256":"e12ab908daa1384b5c07640b9012772bf3a940b4d08d4caa56cd0d215d34330a","sha512":"ed101cc3cde14d8a63b3c0df7ea79b82ae79a39bcd55eac52d5b3e6de095a445923dde4716b5eb59e48aa84fa04143368ebccabedd411d45b919128696dfdd73","ssdeep":"","tlshash":"adf0e50563180c3cf663028ceb28323d427ba283634861595d291939157562efd3b7e8","first_seen":"2026-08-25T20:55:44.632507Z","last_seen":"2026-08-25T21:17:14.961021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/apple-touch-icon.png","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:48.057Z","timestamp":1787692608057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 3398\r\nlast-modified: Sun, 16 Aug 2026 17:01:09 GMT\r\netag: \"d46-6592d000f3ea9\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3398,"size_decoded":3807,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a1006022acbac7c63625bf558a052f62","sha1":"a73d2c06eab067c9ffcd7f95d7a1608dfefd8ec7","sha256":"b50b98fc15477390b419df5b7263d61c480605d6cadac01dcc03ea8bbc6d282b","sha512":"b7a118e2c546cd5c984e669537e56c468374f335e395fa4626394ccb88b0fdfd506dc465c3352fd2c8315496ec4339bb0b813aecbb60014d6560bf21522d832f","ssdeep":"","tlshash":"1f615bdb953f0c80de7ab67cd171281af478a66c491868ac9d336013489fa0d89fc8cf","first_seen":"2026-08-25T20:55:44.63517Z","last_seen":"2026-08-25T21:17:14.961649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uninstalltooll.ru/assets/img/article-clean.webp","fqdn":"uninstalltooll.ru","domain":"uninstalltooll.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://uninstalltooll.ru/","date":"2026-08-25T21:16:48.059Z","timestamp":1787692608059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.uninstalltooll.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:26 GMT","end":"Mon, 16 Nov 2026 20:08:25 GMT"},"fingerprint":{"sha1":"D7:0D:82:5C:E8:79:2F:D8:00:A8:A1:1D:D8:0D:9B:2F:EE:85:6C:2D","sha256":"68:93:E9:E1:8A:5B:B6:9A:57:0D:AA:8C:14:90:8A:40:A6:F6:8C:7B:1A:93:B8:9E:14:28:7E:4F:1B:45:CC:09"}}},"request":{"raw":"GET /assets/img/article-clean.webp HTTP/1.1\r\nHost: uninstalltooll.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://uninstalltooll.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:16:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93500\r\nlast-modified: Sun, 16 Aug 2026 17:01:11 GMT\r\netag: \"16d3c-6592d00313a8a\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93500,"size_decoded":93913,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"736b6d01a14b501d54f93f5d132825b2","sha1":"159337939ac255560557adb7a3f0d750d7e44103","sha256":"a485335ed41fb0f0fb0a6e1b59a708d40d9a597f0e6f71a813ff33223893b2f5","sha512":"1e53e3e6daea94d6cc14c97c1dda975497d22fbb41f99872fecff34f1926beb9ebf378658abf8bafe348b6a21d56509cdfa795bf12de3306b51a331c5ef566db","ssdeep":"1536:1HZWB/p3eeBxn7uGAQjQDrl2JCr8BfvHqRtR/ldE7tL/XkDyt3tAopfRk:15Kp3txSGAGgrl2EgBfvHqV4JLliapk","tlshash":"f59302ad0317df2c6127360dc2aa9b09e502e4d4cdf54aa5a4c4b7766b48bd203acb67","first_seen":"2026-08-25T20:55:44.655769Z","last_seen":"2026-08-25T21:17:14.962216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"uninstalltooll.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}