{"report_id":"7ffa4d83-5ee8-4dc9-932c-1b8ac0f8b7b3","version":0,"status":"done","tags":[],"date":"2026-08-25T21:33:51Z","url":{"schema":"http","addr":"yandereplay.ru/","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"yandereplay.ru/","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"title":"Yandere Simulator — скачать последнюю версию для Windows","dom":{"size":10857,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8169)","md5":"db421a3cb6dc4f489a7b56f1f8e8f888","sha1":"c83304a5b0efdff5105cb3137a9cb824e9fef14d","sha256":"6fde998a55d4bbc9dd8d11c13dc636b7b4af3078b89fd41088ff445ec113889c","sha512":"28cec8720c42db9149aec8d55b6fe5b29d3d071f08874d913f7cd550bec582f3475fc8d7ae1148666cd345431894dc5bf4692a9281cd2e6ef0cccfd5fe1f01a9","ssdeep":"192:w4PhPmP7uePU0/mmLXeCAy9rI5hnlLAexDyXcYh9g9If6:y16CAy9rI5hxFhyxh92","tlshash":"7922337154a9607f120b75cef8126f0c74a781feda664a1221fc2dbf7af2c50cd2a609","dom_hash":"domhash67ddfa026108e9c52e732c4d385a6cb9","first_seen":"2026-08-25T20:55:33.060178Z","last_seen":"2026-08-25T21:33:51.895603Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yandereplay.ru/","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:33:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"yandereplay.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-25T20:55:29.809348Z","last_seen":"2026-08-25T20:55:29.809348Z","alert_count":16,"request_count":8,"received_data":61949,"sent_data":3966,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yandereplay.ru/","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7affe5dc97d97e8e93210c27594cf5cd","sha1":"c7d825b36f60e5aa13defed69f4c4399c497a975","sha256":"93b22c337e1ee369d3656f5f55d6a57754b67baaa3593118ded6911ac417f201","sha512":"89c2fc931add54c3bd08b7af16cbc4fa664cb3021eb8b475288425e4468478e961e66300afd8d295a6a495e7a97e8817e27fa1e4891809c3d82650820449d95e","ssdeep":"","tlshash":"90f041e73c894238c3a302a13b73924c3179243f340eac52b80c18623fa0f6514a750c","size":615,"data":"","first_seen":"2026-08-25T20:55:33.076319Z","last_seen":"2026-08-25T21:33:51.916202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/assets/js/main.js","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c9f059c6155da6be012e9f26f1dfcea","sha1":"d0a72da5760dc76afd9976082c7913668f976764","sha256":"5f86105a9a1607dd39baa182f37f854f33db357f04d93650bef0b0350222012a","sha512":"6c156e576b9b1449122495b80ad8a5a9de25e31a200bb5d5436356a04330502a60460278ec11c0f51a3c49c641d6d2cec032fbf3ae09316fc55162c945934d27","ssdeep":"96:YMPNnCbF4iFpZP+iXMsHI+1QP8cgek6ws/Ln3/yMiN3t:vFnCbBpZPvR5QP8crkNs/Ln3/yfN3t","tlshash":"21c1e8b0686531ba04ef2bdf76d65a90fe7505b6f41394509c3c4cc839f2d978236ab2","size":5817,"data":"","first_seen":"2026-08-25T20:55:33.06896Z","last_seen":"2026-08-25T21:33:51.900137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yandereplay.ru/assets/js/main.js","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.361Z","timestamp":1787693604361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:02:36 GMT\r\netag: W/\"16b9-659a334884e8c\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5817,"size_decoded":2706,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (830), with CRLF line terminators","md5":"9c9f059c6155da6be012e9f26f1dfcea","sha1":"d0a72da5760dc76afd9976082c7913668f976764","sha256":"5f86105a9a1607dd39baa182f37f854f33db357f04d93650bef0b0350222012a","sha512":"6c156e576b9b1449122495b80ad8a5a9de25e31a200bb5d5436356a04330502a60460278ec11c0f51a3c49c641d6d2cec032fbf3ae09316fc55162c945934d27","ssdeep":"96:YMPNnCbF4iFpZP+iXMsHI+1QP8cgek6ws/Ln3/yMiN3t:vFnCbBpZPvR5QP8crkNs/Ln3/yfN3t","tlshash":"21c1e8b0686531ba04ef2bdf76d65a90fe7505b6f41394509c3c4cc839f2d978236ab2","first_seen":"2026-08-25T20:55:33.06896Z","last_seen":"2026-08-25T21:33:51.900137Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/assets/images/yandere-hero.webp","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.369Z","timestamp":1787693604369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /assets/images/yandere-hero.webp HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30134\r\nlast-modified: Tue, 11 Aug 2026 19:11:37 GMT\r\netag: \"75b6-658ca3d710531\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30134,"size_decoded":30546,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"210bfb8ff5859939e3d4530a280409e0","sha1":"6a2a92540e77e7aa8a8a2eda944b768d6cd5f3c8","sha256":"f7199570852d57c51cb546c3b592bcf3eb6ef5a225f7a2e92f400d39ecaef384","sha512":"0dc2bb42a1727d109bbeb13825ec3b58ab741beecb06b74db67933b4697d3901157b0c1405bbe9ea8e54c7a2f9269acb060b0bdd7b5a76a5c45d4a3a6b93332e","ssdeep":"768:AYXFRKQ807VUjUqNoTsgeIsz/Xb2u2Ixz+Sh1jE:AeRKQ80xyUqA+Oq51Q","tlshash":"47d2e1d2805e4d26baa1d2b9900f6b6723f099dad5d7a84d018b70ed53ab2419d3cd33","first_seen":"2026-08-25T20:55:33.070193Z","last_seen":"2026-08-25T21:33:51.903561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/assets/icons/arrow.svg","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.374Z","timestamp":1787693604374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /assets/icons/arrow.svg HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 158\r\nlast-modified: Tue, 11 Aug 2026 19:11:37 GMT\r\netag: \"bf-658ca3d688d0f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":569,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c664ad69273b59d96d75e8250ffac700","sha1":"ce4efd1ebf2359f693e7dec5742834a4ae6ca3e2","sha256":"869254026d19919f4af4ef7fbd4cb51ef9af9f994faa98c1b0ce59091775d605","sha512":"afa59939962a136264924a4950d7836f92e8537ba8124fa11a6d197e1c46988ffb6a4063f68c5b73d4b0edaa60ac942760d3522333b1312f7aa1cc16368d1035","ssdeep":"","tlshash":"b9c0801a93190d3cf4368524f774373640bb61c2344d112dd8b21535a245d8db03f9d4","first_seen":"2026-08-25T20:55:33.067321Z","last_seen":"2026-08-25T21:33:51.904825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/favicon.svg","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.674Z","timestamp":1787693604674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\nlast-modified: Tue, 11 Aug 2026 19:11:34 GMT\r\netag: \"ec-658ca3d44bc64-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236,"size_decoded":608,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c643727c97e2165900e00357d2bd320","sha1":"60ca867eff95c292cd5a649c61656fa6b989cd9d","sha256":"34e3c8545bc1394c7c1086fc33e58d2ea05990bf3897f0788b9c5f6c3e01ed27","sha512":"56e54a33b891d1992f895478527999c3772207fb8803374d53876957b9dbce96c269b828a705edb1242353ab0fa9cb8ac5d3a4f41f51b17c34d61d63d0c44132","ssdeep":"","tlshash":"18d097d2706cd8098758c22e04ea3409209a30ea2f40015bb0c41920360bbf77c0233c","first_seen":"2026-08-25T20:55:33.072791Z","last_seen":"2026-08-25T21:33:51.905881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:33:24.071Z","timestamp":1787693604071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: text/html\r\ncontent-length: 3633\r\nlast-modified: Tue, 11 Aug 2026 19:39:25 GMT\r\netag: \"2a12-658caa0d502c1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10770,"size_decoded":4094,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8082)","md5":"414ae8b28a3fcc97e58258ad2909fe29","sha1":"40fadb429a8a8ec1a10743f6e35736d9108f8fd5","sha256":"b0320bcfe315ad491713195f495073eb889ffcd9a955aa5fd4247cedb57eacf7","sha512":"5a5d0fffc4a7e5c71a9c1107d213a4a513773998bffd2d19aa78579eb1da6a3a81bdbec0a13e4868f5e7bb645f1cbac23a147e7a232b13c6238696f15fea21e2","ssdeep":"192:M4PhPmP7NeP60/mmLXeCAy9rI5hnlLAexiSXc7h9g9If6:GU6CAy9rI5hxF8Sch92","tlshash":"1622347154a9607f120b75cef8126f0c74a781feda664a1221fc2dbf7af2c50cd2a649","first_seen":"2026-08-25T20:55:33.061525Z","last_seen":"2026-08-25T21:33:51.906733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":4,"connect":20,"send":0,"wait":41,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/assets/css/styles.css","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.359Z","timestamp":1787693604359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 3428\r\nlast-modified: Tue, 11 Aug 2026 19:11:36 GMT\r\netag: \"2acd-658ca3d64955b-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10957,"size_decoded":3889,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8942)","md5":"1b8c7ddd9cdad1314c678c160b355b92","sha1":"3b20b07f333b151434c98b35b6399f8bf1992108","sha256":"5f71991549e6c16b7c6743291b35915e039644307d82d967b0e343bac42d0512","sha512":"f638bef5f14ec6884e8ee9f7350cf6da56fdde2e87b1d8b6fa7bb1b4acc85ef8a82dbf64913f2e1016e3fd1c97cb5ac9b94d821ee15c01b10759fafe1ead07b7","ssdeep":"192:e030OTqTBrqnXcmnovByzzhvBF41WGrS3EzNz4cKhTt56MbxDSaCoN:5kOT0UXpQByzzhTBO2El4cKhTt56exDr","tlshash":"ea329522a664302cf13ff5a5e4d0bb8d71249127e5238bbdfe95b22880c60a71776b49","first_seen":"2026-08-25T20:55:33.063006Z","last_seen":"2026-08-25T21:33:51.908296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/assets/icons/download.svg","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.371Z","timestamp":1787693604371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /assets/icons/download.svg HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 175\r\nlast-modified: Tue, 11 Aug 2026 19:11:37 GMT\r\netag: \"df-658ca3d6bec68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":586,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"861e1daf7b45de7b426e88ad0d03749b","sha1":"eb201dc43dfa4b9421a7115c8cd142a7a930df53","sha256":"41c2dcf3bbc4394f81d8139c8cc2daa6e2ebf2c4117e7f82747e77893f03d66e","sha512":"df37f5ee096c9a1da4aab12061ced1fbcfd73f052649427a1f2456020979ce32329daba575c8733b7edfdda2e76c6cb2b233494fce64b60abc548cae4aab1ed2","ssdeep":"","tlshash":"2ed02355534d0c2cb8324761db747739013712c2140d106cd8710530530165eb83f9dc","first_seen":"2026-08-25T20:55:33.07164Z","last_seen":"2026-08-25T21:33:51.909402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandereplay.ru/assets/icons/archive.svg","fqdn":"yandereplay.ru","domain":"yandereplay.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandereplay.ru/","date":"2026-08-25T21:33:24.373Z","timestamp":1787693604373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yandereplay.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 19:20:55 GMT","end":"Sun, 08 Nov 2026 19:20:54 GMT"},"fingerprint":{"sha1":"AE:10:CC:0A:E9:2D:A1:35:77:34:13:23:4F:92:83:BF:58:62:FB:39","sha256":"1A:EE:B5:2E:8F:38:27:B1:0B:2A:84:FC:4A:84:83:66:77:34:E2:BE:66:D1:86:B7:84:27:77:15:A6:B7:7B:C5"}}},"request":{"raw":"GET /assets/icons/archive.svg HTTP/1.1\r\nHost: yandereplay.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yandereplay.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:33:24 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 178\r\nlast-modified: Tue, 11 Aug 2026 19:11:36 GMT\r\netag: \"de-658ca3d6404d0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222,"size_decoded":589,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b0414017b150ae8346da6bfa3465bcd","sha1":"a38219ef927e9d4d9edfb1c0dba67171dfe41311","sha256":"961ffcf690419288202622f2cc50161d7f7a9fa83af043aa6c35c44ac43edd87","sha512":"6119702651ae69d49071acf3c7839c84030f53284b6597a11c9a6dd50ef74bc5af27a09be6fe934ce6d2a73a939f208f96220abfd6c80c8ea74b76cfab20286d","ssdeep":"","tlshash":"55d0a95983284c2cf4228b64eb68733980b62183204e2068d86a113162086aeb8bbed8","first_seen":"2026-08-25T20:55:33.064158Z","last_seen":"2026-08-25T21:33:51.910898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"yandereplay.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}