{"report_id":"8bca6b88-0b30-4797-a299-e546f5ac42d7","version":0,"status":"done","tags":[],"date":"2026-08-25T21:14:11Z","url":{"schema":"http","addr":"rust-play.ru/","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"rust-play.ru/","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"title":"Rust — скачать игру для Windows на русском | Rust Play","dom":{"size":11078,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1712)","md5":"8378198aaa12f8ebe544a61fe1d89e67","sha1":"b9dd9a0ca8c9a5c7a50958c4bec67073c1376a02","sha256":"dbf71f3d7cb08595591077039c1828a7253a68decb09f00cdf3ab61e1e00fa73","sha512":"82c90d9309e8f17c3d63082444689235404542b072c1366990353728eaa92bdceb6ab704c4ebeaa0826a629fba6514a2a3ba493cd2eeaf6f9e786a62e0d4182e","ssdeep":"192:TrJh/7ncCTnqBt1TNmYClHV94RN0dR103udwIPtl0312pmJ2Qle1o:TrD/7ncynqBttNmPlq0dIedH30l2pmQY","tlshash":"e332b722a5c8683f5227628be625771d60b781ffe6061a1075bc1db93ff3c48c52f658","dom_hash":"domhash0bcebab1f3e82203992358e2ab327f52","first_seen":"2026-08-25T20:57:06.333401Z","last_seen":"2026-08-25T21:14:12.914702Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rust-play.ru/","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:14:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rust-play.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-25T20:57:03.133233Z","last_seen":"2026-08-25T20:57:03.133233Z","alert_count":14,"request_count":7,"received_data":394687,"sent_data":3401,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rust-play.ru/","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"025e2aa115bfc1629d99c555490f1587","sha1":"1a27f2d8bd5bfb6859e6bcc15f18522750844d5d","sha256":"a47acb224049b78536d9956e264191cf525c5ba8300b2f79f262e459aef9c2d0","sha512":"7bd43d1304df41e72b28160cf66f5d22e7cf5be35c5cb85846270f7af587ed9728bd75a537986263063959fbb2a6f563a4d541a85c86445835c239595f67f1ee","ssdeep":"","tlshash":"e7f0e177b88492b5c2f63132532ba30c711718ba20896c34858dcc813a7ec5d102f96c","size":576,"data":"","first_seen":"2026-08-25T20:57:06.35962Z","last_seen":"2026-08-25T21:14:12.930473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/assets/app.js","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e140046439292ac704ee972887412","sha1":"35cc5a786f213c4a636ee41a206b349546233c24","sha256":"86c30dc275f796ab39eef97b7d1765f516718dc2bc2ca1968978261ece0e7319","sha512":"bd6b4de7b56c89bdc3b78b8677459e2cbea7e2bd495c649a626494636c98fc8c683362cd2767693e6df6487900e3d97820edc7a4367848f1e7c67415ae922943","ssdeep":"96:JMPVMwEJTWKws7upUeJou7E8xYnvkxg7P5pXMYUUiXMd235J96N187d2Pw5La1G:qtMwEVXBGUeXN0vkxkjMYU59YmdvBas","tlshash":"0c02b76464553139807b23bedb475a48fb720567f006814079ac4f893fb1967c2fbed9","size":8637,"data":"","first_seen":"2026-08-25T20:57:06.343859Z","last_seen":"2026-08-25T21:14:12.927768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rust-play.ru/assets/styles.css","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rust-play.ru/","date":"2026-08-25T21:13:44.698Z","timestamp":1787692424698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rust-play.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 4246\r\nlast-modified: Thu, 13 Aug 2026 21:52:19 GMT\r\netag: \"3ed9-658f4b7d5e776-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16089,"size_decoded":4707,"mime_type":"text/css","magic":"ASCII text, with very long lines (15811), with CRLF line terminators","md5":"2dc3fe9bf89b38983ebd9c724239bea1","sha1":"d66c8ef85946dd6b9211c9c7d354ae9186f703db","sha256":"b46afc16dd09a77224318d81d4464387b07c754a8f41b93ddafec71582de2b07","sha512":"71b22e83f74a9550d57791fdd44902391176284e78d86ed718be79ab70a54c9e83b225d513e8958f42ab1604c90b4bf5516188f5a07cc0c40911fe55d0fad9dd","ssdeep":"192:WM0jrQlzMDa8/KP7gZijtgSDSgRatK3uvKVaGhGdmpRF29PJ/iUtH1cL9OrhyY9/:W10MDaaKUaRa83GGHeBiUtVcEd6QI//e","tlshash":"a272d7216124323cf92be56de6c0a64eb224e163d52347fefea1d20885c72f7177175a","first_seen":"2026-08-25T20:57:06.357676Z","last_seen":"2026-08-25T21:14:12.917994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/assets/rust-base.webp","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rust-play.ru/","date":"2026-08-25T21:13:45.091Z","timestamp":1787692425091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET /assets/rust-base.webp HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rust-play.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 124106\r\nlast-modified: Thu, 13 Aug 2026 21:52:18 GMT\r\netag: \"1e4ca-658f4b7c6c043\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124106,"size_decoded":124520,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f68a81f2f291345e5098203c342a30cf","sha1":"2b48895be19887ed8ff067596aef24fee69dcbe6","sha256":"68ed1cc22fe5e8e1d4bb18d4a821231c6bbf0162e4d73e3db56aa250859b122d","sha512":"12186eb013c2ec217978728d8bb2994823a728c5af8e49cf2f1e9fe8ac41d8487cee65adce7fb1cc6755cc479bbc152484e5194a8631f0806ad8f0c55c26ebed","ssdeep":"3072:K47CEZLrN9wdLLJX9ttPtoEaxLlSnNEQzMblUDFBKn0Gu:K8CESdLLPPtExLlSN6lyIpu","tlshash":"e4c312b395fcb4c1f70b3693efa4c7689420c81419a62e736531aa30da7277b58ee5c4","first_seen":"2026-08-25T20:57:06.352185Z","last_seen":"2026-08-25T21:14:12.92011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/assets/rust-arctic.webp","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rust-play.ru/","date":"2026-08-25T21:13:45.093Z","timestamp":1787692425093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET /assets/rust-arctic.webp HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rust-play.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 122840\r\nlast-modified: Thu, 13 Aug 2026 21:52:18 GMT\r\netag: \"1dfd8-658f4b7c16128\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122840,"size_decoded":123254,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"517e1bd032e08fd3842a348d343b182c","sha1":"1633709aa233d9ecc8df9e0417c5d9a9936c7307","sha256":"c45d5168ff4e8ab4cde05f23f40997edfd079ffbb0deb48ca9503c333b0f6950","sha512":"2947367054946595f96df3945e225557862f04dc0abe3cfc1dadae22a3263b3cbd29e26462e2640076f3bec1c41522e4cbfd113601703944502eacd518760fc7","ssdeep":"3072:jcSlu5wYOPsyHKaG+afpiJ3AKZGx41QnTn0Rme1:YV6YOUYdvafpiJLZGi1QnT08i","tlshash":"99c31244e756d78c0233773734b0947f8391963c333a9344deab49c863aab66f865b88","first_seen":"2026-08-25T20:57:06.3544Z","last_seen":"2026-08-25T21:14:12.922075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/assets/favicon.svg","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rust-play.ru/","date":"2026-08-25T21:13:45.253Z","timestamp":1787692425253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rust-play.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 225\r\nlast-modified: Thu, 13 Aug 2026 21:52:18 GMT\r\netag: \"117-658f4b7bbea9d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279,"size_decoded":637,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f118210fa6aa93c449ac2d7869ad8af1","sha1":"7a123125d9619332386bc68c5025ce71d214a4c1","sha256":"f2dae07ae181e08a4ed3e6f0be9bae973409a9f85732c370fccced896cbeab1a","sha512":"0846db000dec958cafb9f3d37136238f532bc82ecedc3a131d4ba85cf4d6840d5ada934fa960eecb276b5176f09d498a7988ea4714b746699ac92fb6c8b33dd2","ssdeep":"","tlshash":"63d0ebb8762c2808829382904ef4348f40c8309c8b4100ffb2dc0820b30cfabfc45a1f","first_seen":"2026-08-25T20:57:06.350183Z","last_seen":"2026-08-25T21:14:12.923788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:13:44.302Z","timestamp":1787692424302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 3635\r\nlast-modified: Sat, 22 Aug 2026 13:54:11 GMT\r\netag: \"2b1f-659a3166f221a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11039,"size_decoded":4096,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1676), with CRLF line terminators","md5":"812f18fac3493ca29dbd230e369c99ed","sha1":"11c45c65d13be6e1b35bb360461203c2fcfa7d0c","sha256":"c010b1cbc33370df73c2ef675de3bc06da2d595c49830605829daf1a52502657","sha512":"0060047bd6161775c382e3fef7dac06e58cdf0a7cca28c564f1d2e09a8f46ce567c4e85de658dbe1b14b2b4ef1b4d45b209ead0e9b63f31426daec26dccca3d7","ssdeep":"192:bhLDV/0DTZ794G2dKs0mDdg3P8l33+2svVjQ3e1D:/sDT4dSUdue3O2svdX","tlshash":"b132a522a5c8683e5233a186f625775d70b781ffa6065a1075bc2ebb3ff3808c52f654","first_seen":"2026-08-25T20:57:06.356102Z","last_seen":"2026-08-25T21:14:12.926051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":69,"connect":46,"send":0,"wait":65,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/assets/app.js","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rust-play.ru/","date":"2026-08-25T21:13:44.699Z","timestamp":1787692424699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rust-play.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:02:06 GMT\r\netag: W/\"21bd-659a332bde9d0\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8637,"size_decoded":3430,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (489), with CRLF line terminators","md5":"7d0e140046439292ac704ee972887412","sha1":"35cc5a786f213c4a636ee41a206b349546233c24","sha256":"86c30dc275f796ab39eef97b7d1765f516718dc2bc2ca1968978261ece0e7319","sha512":"bd6b4de7b56c89bdc3b78b8677459e2cbea7e2bd495c649a626494636c98fc8c683362cd2767693e6df6487900e3d97820edc7a4367848f1e7c67415ae922943","ssdeep":"96:JMPVMwEJTWKws7upUeJou7E8xYnvkxg7P5pXMYUUiXMd235J96N187d2Pw5La1G:qtMwEVXBGUeXN0vkxkjMYU59YmdvBas","tlshash":"0c02b76464553139807b23bedb475a48fb720567f006814079ac4f893fb1967c2fbed9","first_seen":"2026-08-25T20:57:06.343859Z","last_seen":"2026-08-25T21:14:12.927768Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rust-play.ru/assets/rust-hero.webp","fqdn":"rust-play.ru","domain":"rust-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rust-play.ru/","date":"2026-08-25T21:13:44.700Z","timestamp":1787692424700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rust-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:32:13 GMT","end":"Wed, 11 Nov 2026 20:32:12 GMT"},"fingerprint":{"sha1":"6E:8D:2E:4C:A4:78:60:2B:94:E5:54:F1:42:D2:C8:F1:D8:12:46:E8","sha256":"90:DE:3F:7A:C8:55:5A:61:1F:BE:D2:CF:33:6F:EE:D9:E6:3B:C9:4C:37:2A:56:FC:C4:1C:22:03:76:24:B2:93"}}},"request":{"raw":"GET /assets/rust-hero.webp HTTP/1.1\r\nHost: rust-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rust-play.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:13:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 108700\r\nlast-modified: Thu, 13 Aug 2026 21:52:19 GMT\r\netag: \"1a89c-658f4b7cc0405\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108700,"size_decoded":109114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4ff30017fb4b60672a8c55ee1712b9e8","sha1":"5712309aed75880cb65449aa73e09d615f2ee352","sha256":"8f0dfaf367704a2738215b31374cf46da740f66a43970ce96fb03371e9da58f0","sha512":"91d8cc8538a2dd2921ca4c2f11dcee22907d32dd120bcb6636aeaf58f28ce1d06252c4f42ddc9bcb8ba108e72711c320e0a614887e9bb1434dfbff4fc4305bd3","ssdeep":"3072:gdgZHY5SxO4nFuRysoJ6HqTiMrLdyRjlxhxyleelcb:94KOqF2JHqemglxLelC","tlshash":"91b3139cf29a6755fe61cfa0f26fcfa80e4d8538a8902b1731589e1207358a37e11de5","first_seen":"2026-08-25T20:57:06.347391Z","last_seen":"2026-08-25T21:14:12.9292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"rust-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}