{"report_id":"53087751-6433-4084-8f8c-f0b212f8b70d","version":0,"status":"done","tags":[],"date":"2026-08-25T21:02:30Z","url":{"schema":"http","addr":"getvuescan.ru/","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"getvuescan.ru/","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"title":"VueScan — скачать бесплатно на русском для Windows, macOS и Linux","dom":{"size":23328,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (416)","md5":"ac2653b116dc449565f16a425355b0ba","sha1":"8824979dddbc18496c1b4788b1571d61ab74fade","sha256":"61c4bf191a29c6ea24192a51259a0f74e2c553b2187b46ea8de67586cec75999","sha512":"04bef9ae5d5875dbc432fc8e8d81b780467dcca0364e7c2a5ac2b776d8502caba8f9b1f5a25d1c9682cc2ac27507345ba4b0c352dba541285b64681fc69dce11","ssdeep":"384:zr8/SPKyvvfNHAw42IIDUO6jNi4uixONbRluz1wg6loFbTx:IyVAw42IIDUhE4uixibbuavwx","tlshash":"caa2436151f9146f5202b04bed14ba092daa81ffaf1f4711317c2abe6fe3915c93b60e","dom_hash":"domhashbaba63d63439318346e507c4e59c79c6","first_seen":"2026-08-25T20:54:57.708355Z","last_seen":"2026-08-25T21:02:34.216415Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getvuescan.ru/","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:02:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"getvuescan.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-25T20:54:54.843805Z","last_seen":"2026-08-25T20:54:54.843805Z","alert_count":14,"request_count":7,"received_data":189644,"sent_data":3429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getvuescan.ru/","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9eb2a98980468716aa12361b2f61e55d","sha1":"63a00bc14c05d45a090a31edc420457638ff2f15","sha256":"2b726d7f64c4f83b28c4b8f13b90cde75dd864bf7e898313b28bb4fe310521f5","sha512":"13016f4240b43ab8a0042b073b911ad343fa5fbd31f820fab0037d8be519875de974566cda689fc397464a4d5f2ceff0e33911ab932f0ad0d0225dd34d523cb7","ssdeep":"","tlshash":"82f0e1b7b88492b5c3f66131532ba31d712719ba20896c34c54d8881397bc69106f9ad","size":576,"data":"","first_seen":"2026-08-25T20:54:57.73126Z","last_seen":"2026-08-25T21:02:34.238044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/assets/js/main.js","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"13d7cce261045721b172e7914307e06a","sha1":"19816030083ac78b561f0eef5c0b5208249dd63f","sha256":"b0a14a73176a301a7a834ad084ad1242cda0d0fcce6110cfddabadbd92f5ac9f","sha512":"2c0a7aa50d4ed779d1a985e0fcc71dea718d1fe4eb484ca01fb9d14bae4ea632e23383acd9bf8f388e09a108a277f07b833e9d610b94367dc1581890f5428574","ssdeep":"96:PsHmt2OuTXIF9sBupoYA5tXr4buUlvTSvRY6sjBiaBSCMX8:PsHmtfuTrYpnIFrUlv2v+SM","tlshash":"5ab1ef58bd5532b284fbe37e6f5a914cfbb005679005c2053dac8d482f74ba142beee8","size":5427,"data":"","first_seen":"2026-08-25T20:54:57.721963Z","last_seen":"2026-08-25T21:02:34.230469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getvuescan.ru/assets/js/main.js","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvuescan.ru/","date":"2026-08-25T21:02:03.574Z","timestamp":1787691723574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvuescan.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:45 GMT\r\netag: W/\"1533-659a32df0ccba\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5427,"size_decoded":2292,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"13d7cce261045721b172e7914307e06a","sha1":"19816030083ac78b561f0eef5c0b5208249dd63f","sha256":"b0a14a73176a301a7a834ad084ad1242cda0d0fcce6110cfddabadbd92f5ac9f","sha512":"2c0a7aa50d4ed779d1a985e0fcc71dea718d1fe4eb484ca01fb9d14bae4ea632e23383acd9bf8f388e09a108a277f07b833e9d610b94367dc1581890f5428574","ssdeep":"96:PsHmt2OuTXIF9sBupoYA5tXr4buUlvTSvRY6sjBiaBSCMX8:PsHmtfuTrYpnIFrUlv2v+SM","tlshash":"5ab1ef58bd5532b284fbe37e6f5a914cfbb005679005c2053dac8d482f74ba142beee8","first_seen":"2026-08-25T20:54:57.721963Z","last_seen":"2026-08-25T21:02:34.230469Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/assets/img/hero-scan.webp","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvuescan.ru/","date":"2026-08-25T21:02:03.576Z","timestamp":1787691723576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET /assets/img/hero-scan.webp HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvuescan.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 84324\r\nlast-modified: Sun, 16 Aug 2026 17:00:24 GMT\r\netag: \"14964-6592cfd62fd23\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84324,"size_decoded":84737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1066, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04b50260105ed3c77534770929d1a44c","sha1":"5b288288fd9545cde3d5467d80baa79010a27b6a","sha256":"1fb0f0e520da77ce5fcdd717ce6aceef9f546765d6c7d2dd76f9e1ef062cef8b","sha512":"633b4b43bc9d9c5825d646f8ffa88443764c631eb4d037a0d706da047f7e7a151366635f0cd3f1ccbe2f895aefd6ab8da4f6aa83f0b29b635bb724793296d35e","ssdeep":"1536:ySB/4HzOF8GirrtCL7XdC8P5mFkYt2i7OAoergdgUNicEVhrJkkb77iOoyg:yOgrZCL7XE8boKAozpEfrWW/iOoL","tlshash":"558312dd38d418e44719af77cc982b8ca56c3ad43b18ef50472acc94e499dc61674f61","first_seen":"2026-08-25T20:54:57.724573Z","last_seen":"2026-08-25T21:02:34.231483Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/assets/img/apple-touch-icon.png","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvuescan.ru/","date":"2026-08-25T21:02:03.912Z","timestamp":1787691723912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET /assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvuescan.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 40580\r\nlast-modified: Sun, 16 Aug 2026 17:00:23 GMT\r\netag: \"9e84-6592cfd505b3e\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40580,"size_decoded":40991,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"83bcbd6ca144b9f03fdc36339ce45d35","sha1":"6f8a7a8d02d91727d1d3cb129b26e32935f3c258","sha256":"e39c185cae21770782f62423f2a96548574c39567faa1ef0c1a9f0115f344aad","sha512":"1e099e7ba4aa87d8c858d42b382f453bdcf36b8b3b05e55f9b48a84b4a3f2658c6348cd6475c07e81ce5e0e772c6e880474a259fc29356aac8870d7c2ccf9f78","ssdeep":"768:0EuKk40gBk41Fo6VRq4OUpZ/GD58q6zw/UHVAPStH7y3YLxv:0cFhBno6VRq4O0/GD58qfQVAP6Akv","tlshash":"8303f1f74cb0898cdd63086c999e171133e39a40ab7b67511fea57cd1628ac3ba3409d","first_seen":"2026-08-25T20:54:57.729224Z","last_seen":"2026-08-25T21:02:34.234863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/favicon.ico","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvuescan.ru/","date":"2026-08-25T21:02:03.914Z","timestamp":1787691723914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvuescan.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 8018\r\nlast-modified: Sun, 16 Aug 2026 17:00:21 GMT\r\netag: \"1f52-6592cfd3208f0\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8018,"size_decoded":8431,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"e95e2e6e411583909bbc0da0da4b404f","sha1":"5157ae9848c30f71ecf15d9b252717255ff1ea41","sha256":"1f888e797d60381551e9004a9e1a84ad235e9aad2f30e4151d6b71c2147d74fc","sha512":"d81af69841dfb81cc92f80e6978ce8b60663cee51da8654fe86bca9121f966c1e33251510fab2bec622ddecb97f5b72bedd1ee1b4cf130a28fb01bd4af7e1645","ssdeep":"192:r7MOoR8mRTnD/fL5o8jjK9uNlABnDREvy/YmMxVS2O:rtovDtoQj44eFSvy/YmMxVpO","tlshash":"f9f1ae6a82b04dc0dc898f6b785e3812193d157840f982855347a7983bb33b0353d8f7","first_seen":"2026-08-25T20:54:57.712457Z","last_seen":"2026-08-25T21:02:34.235567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:02:03.175Z","timestamp":1787691723175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: text/html\r\ncontent-length: 6609\r\nlast-modified: Sat, 22 Aug 2026 13:52:42 GMT\r\netag: \"5cdc-659a31129a2b9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23772,"size_decoded":7070,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (388), with CRLF line terminators","md5":"023dfdd516c7b53be6378a779d1b5907","sha1":"e7b9eb945709830c00d9e24d213c13f10965dfa5","sha256":"945192eec00ddc87e786dce13be2f1e1f6d14972f7b83f44da5feeb0dbb32b61","sha512":"794679685550afe6f44bc810bd86159c29ee5fc9812027f95bc94324a44a5b687098e46cec07615a66c040eef81deae5a5506533396f606dc1295a02443bf739","ssdeep":"384:XyANuMjkIIBzfx+wiVu8SQ+Lun1Y534npzlU:XyANuWkIIBzU9VuJQSume/U","tlshash":"3ab2016152c9246f5232a04add14ab49fdaa81ff6f5f471131bc2abf2ff3814c92b509","first_seen":"2026-08-25T20:54:57.715508Z","last_seen":"2026-08-25T21:02:34.236257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":111,"connect":33,"send":0,"wait":50,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/assets/css/style.css","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvuescan.ru/","date":"2026-08-25T21:02:03.572Z","timestamp":1787691723572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvuescan.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 4076\r\nlast-modified: Sun, 16 Aug 2026 17:00:23 GMT\r\netag: \"37f2-6592cfd4ac95b-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14322,"size_decoded":4537,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"521f36b23c643d42617610b4e963f7c5","sha1":"2daa98e9d43957f650a5a8decc7080a83a1bc032","sha256":"73209b9918125e76c80daeebd58335e34ae234f4f64cfdfcb75626265c2d362d","sha512":"e9d165891b1bd9e988f62ad09ef6681c8244febbc95c20a631d9399d9f92811a5a0c693e049d8a6397bcd0b1a53e55d54ec5775b9799a990e7ffd34d1aef6a87","ssdeep":"192:jffBJ3c2A+z+gF6eHVRemfH6OgSrbSZRHecGH9K4cyUFGZ2QKDPR3Zv:DYW+QfrbS2M9FfP9J","tlshash":"cb5273622f246134b537f7a5fb9bd799e65ca1225a0502bdbde10008c2ce3be417ef49","first_seen":"2026-08-25T20:54:57.718946Z","last_seen":"2026-08-25T21:02:34.236854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvuescan.ru/assets/img/vuescan-logo.png","fqdn":"getvuescan.ru","domain":"getvuescan.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvuescan.ru/","date":"2026-08-25T21:02:03.579Z","timestamp":1787691723579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getvuescan.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:07:44 GMT","end":"Mon, 16 Nov 2026 20:07:43 GMT"},"fingerprint":{"sha1":"81:AA:28:D8:A0:46:70:FE:B6:A4:C0:FD:13:FE:6A:79:26:91:1C:92","sha256":"58:E8:38:F3:B1:38:82:33:09:AE:EA:08:51:FE:06:5F:23:E3:E5:86:1E:8B:27:0F:7A:EC:FE:BA:B9:A1:66:97"}}},"request":{"raw":"GET /assets/img/vuescan-logo.png HTTP/1.1\r\nHost: getvuescan.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvuescan.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:02:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 10210\r\nlast-modified: Sun, 16 Aug 2026 17:00:26 GMT\r\netag: \"27e2-6592cfd7b5be4\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10210,"size_decoded":10621,"mime_type":"image/png","magic":"PNG image data, 210 x 64, 8-bit/color RGBA, non-interlaced","md5":"4295834240ae8207c97201c86ffbe353","sha1":"35ad08444cdaa8a757a00ef7f4ccf878e5693fe8","sha256":"1b0be31665a382ee5456cbb3e1ffb96cd912741528bf9f142c83be961e83c93b","sha512":"de6a995a44820c3334bc6349bdc517d4c6f6de0f81ba8dc8764eb0ff84438a38afc8fe137b87184fd8a85ba2c4118d16945561630b8118ec78b2daef98bd653a","ssdeep":"192:YSmCnm4qZUV6FfKGsdqvz4b8pZb3oxx6iYYNPKXp86MbPb7:fmCWUOtXvkb8pI6V3eT7","tlshash":"0b22cedab86831d885bbc9005af88302bd4dab164d719308b78fcc67083f996d8c9c92","first_seen":"2026-08-25T20:54:57.727209Z","last_seen":"2026-08-25T21:02:34.237516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getvuescan.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}