{"report_id":"ae114363-783a-4ee9-bf7c-a13c5c59107a","version":0,"status":"done","tags":[],"date":"2026-08-25T21:00:51Z","url":{"schema":"http","addr":"getbluestacks.ru/","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"getbluestacks.ru/","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"title":"Скачать BlueStacks бесплатно на русском — эмулятор Android для ПК","dom":{"size":16825,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"533435dfa29c41695938fe86837e277e","sha1":"a2b53dd644111c3f50670ffe3fbfc9c64ffba64c","sha256":"bee1ead3c0ea5494c98651fde1d408ce2a4e90697b5f3ef52a9c3d63e0b5451e","sha512":"43a26169be878906120da63e2419eb18b3d312d2c33dba3333152bf7cf5ee0ff111b9acace0a0fdac8fe783332798926b116064b09f8bd0d39e6780be527e9f5","ssdeep":"384:zr8P/YfIfaB8e/xjII5antVr81z4xebU7yk2LsP:8z/e/9IIGVr8x40ouLsP","tlshash":"0372526195f818af0141b007e9146b0e7daa81bfab5b161135bc1dbe3ff2c55c92b70e","dom_hash":"domhash871f405dd1791afbc6ff21d45ca38ed4","first_seen":"2026-08-25T20:58:05.061492Z","last_seen":"2026-08-25T21:00:53.47121Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getbluestacks.ru/","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:00:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"getbluestacks.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-25T20:58:01.435485Z","last_seen":"2026-08-25T20:58:01.435485Z","alert_count":24,"request_count":12,"received_data":294673,"sent_data":6076,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getbluestacks.ru/assets/js/main.js","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1816f8fb66438c61e04bab20037e19f","sha1":"6e9376c28eee1f15b8c4a59bdd4914501ad3cb4a","sha256":"2a5dc8c123327fe1154d718a21d652c81dae70b9bbaa1cd9b9cef1d074586d49","sha512":"65b662dfc34da2dbf2bc8e543ca855b18686a66424a8074e4b1903ddf9b4ead9a433652c220de0103083852110e29a61bacd7209495f8428a738cd9078db09eb","ssdeep":"96:9rHRa4pZEuXYw/CfFL/pn3KQ5YXpFUxjKkyUyD1yDAX+ydu7i1u/:RHRFp+uoFJpn64oH3nn/dv1u/","tlshash":"e0b12228f8a721b758e761bd2faf918877b00583a009c8013d5cce453f94f7556beae9","size":5111,"data":"","first_seen":"2026-08-25T20:58:05.076871Z","last_seen":"2026-08-25T21:00:53.485834Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d5de2072d3e209a92116c7c452552e5","sha1":"ec644df1cb017149b454aa6f4b6271e8a6cae1dd","sha256":"7755c1b8da185b98ab831cabeb1b60d4961eac0a0f2448c51cba5fb3a98388dd","sha512":"0397a1dd3b7e1c6afa74ed9b67642bcbec5082a3a1a3205e35a44d4e24b99b48d49e11076a8d6cf503249a25f16e08dd1072f3af33c05c56f19b6e1af453a7b0","ssdeep":"","tlshash":"49f0e177bcc492b5c2f72132532bb34c711718ba30896c38894d8c913a7ac5d102f96c","size":576,"data":"","first_seen":"2026-08-25T20:58:05.078066Z","last_seen":"2026-08-25T21:00:53.497395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/feat-eco.webp","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.457Z","timestamp":1787691625457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/feat-eco.webp HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12926\r\nlast-modified: Thu, 13 Aug 2026 21:51:18 GMT\r\netag: \"327e-658f4b42bb903\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12926,"size_decoded":13338,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6c0c2ff2d84a4b1bf8873aa2a3d758b4","sha1":"5ba44aa67bdf44841f0e719df134ab9baa8cf40d","sha256":"c53ed27c5c01b04dd05d083bac00b04d2f90a9ffbc058b478e71e23d0a60a4f5","sha512":"929b4bdcf98efff6f45166474be3dbfeb3549f9da609c758b4714a9114d6bff97a8c6e65deea0b4f3d7ab571e96fb7e5cea4118ef58392d542d9132d3d3fd6f3","ssdeep":"192:hLLwQnaK0GOfJClETR5Rg0sRj1qz7WErxjrDoHOXvhEXBtLB1CbW9KxJ7DD:mQcGCJClEtfFsZ4G+RIO6xtLibW+J7P","tlshash":"ee42c0694d548182d35db1c8fc5b1d453a8baf456dad624aa4fbd748c18321cf7233f1","first_seen":"2026-08-25T20:58:05.07553Z","last_seen":"2026-08-25T21:00:53.47472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/hero-768.webp","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.458Z","timestamp":1787691625458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/hero-768.webp HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34814\r\nlast-modified: Thu, 13 Aug 2026 21:51:19 GMT\r\netag: \"87fe-658f4b43b6509\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34814,"size_decoded":35226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7314777298e3b65006283ac130d8a82","sha1":"7ac6b28e6f73e450ac9d45b5669c823ff28e960c","sha256":"0ae3392a5977dff257fc160e3ed662231fd7d1ef500d39bbebdcb0b19643182d","sha512":"7cc60e0f973efd72ba5e2aaa4ba54248a607f375111d3bc8e237883c6c5fb6bfbc5a340d335b5e26a4fec6fc5a89f92a3a4a021851ecfb0fdf89bee365a759ce","ssdeep":"768:FKrYM8sBhngf0cLd+FV+Hcx++EUul61s3y:FKrYM8g9XeIi2+nlh3y","tlshash":"a5f2e177cde40ba0df5c4a089f7722ee720b4291155fba1066e9d105a3bca0f78a9f46","first_seen":"2026-08-25T20:58:05.064016Z","last_seen":"2026-08-25T21:00:53.47756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/css/style.css","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.135Z","timestamp":1787691625135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 3395\r\nlast-modified: Thu, 13 Aug 2026 21:51:17 GMT\r\netag: \"323e-658f4b421aa99-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12862,"size_decoded":3856,"mime_type":"text/css","magic":"ASCII text","md5":"d3f6ae1acbbde046bf18a27b290469a8","sha1":"e9cee99f81a5e50339dc2e24596b86881a01db28","sha256":"e04171106818504ebd22dafb948161317b2a6a398cf4cf52ab904d5bd51260af","sha512":"560e5523ec3920235608e185a361d17877b36f4d36dd5e9aa535ea3b7ec889dac1e074cb3a69adb6d53e8a3e693ccb3b96a1c1736562ffcc9312339700e92b31","ssdeep":"192:H1JIKYOf6KYUp4iKnrH0zC1w43RWikvSFCCc0Ro3VcpClCKX8mvNN:Q3/Mf48ZT0RBAvNN","tlshash":"1c4264a337306228f427e2a9b6c7578a7318b1039419d97caee5100ccdce2fd9572b4d","first_seen":"2026-08-25T20:58:05.069155Z","last_seen":"2026-08-25T21:00:53.480669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/hero.webp","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.137Z","timestamp":1787691625137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/hero.webp HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 103962\r\nlast-modified: Thu, 13 Aug 2026 21:51:19 GMT\r\netag: \"1961a-658f4b44154ae\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103962,"size_decoded":104376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2402cbb4c1dbaa996abbea93c3e1b409","sha1":"94e1e9ca018e1b6abe7271ce3ea37b3329f04b0a","sha256":"8b4596a9bdbf0b8654e55f8f71a1d7b3bc982996066892b6f6a5cab1ca647ad4","sha512":"b87d401ac6f9659f1fcdcf20d96d74fbcedf5749d866a318120145c19eedd1e2f4a3673f640130cbedc0d79f8a6cd5ed8d31a9a978a2b63c75b9f90913504755","ssdeep":"1536:5aEWqliXaNUIMwR9p7/Py7qM/gKs+ZfmyYLbibjXwiGUgC/6Mjsp529zyFZEiqmU:5apqYUp/yqM/DVHXwiGUgCBOQ9uiJA2","tlshash":"ada31282e243924d0d87ab26816d4c60ae0b2e25b82bf35b35c71dcf1d974399f5ce5e","first_seen":"2026-08-25T20:58:05.070389Z","last_seen":"2026-08-25T21:00:53.48334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/js/main.js","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.138Z","timestamp":1787691625138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:33 GMT\r\netag: W/\"13f7-659a32d36fe8c\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5111,"size_decoded":2040,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b1816f8fb66438c61e04bab20037e19f","sha1":"6e9376c28eee1f15b8c4a59bdd4914501ad3cb4a","sha256":"2a5dc8c123327fe1154d718a21d652c81dae70b9bbaa1cd9b9cef1d074586d49","sha512":"65b662dfc34da2dbf2bc8e543ca855b18686a66424a8074e4b1903ddf9b4ead9a433652c220de0103083852110e29a61bacd7209495f8428a738cd9078db09eb","ssdeep":"96:9rHRa4pZEuXYw/CfFL/pn3KQ5YXpFUxjKkyUyD1yDAX+ydu7i1u/:RHRFp+uoFJpn64oH3nn/dv1u/","tlshash":"e0b12228f8a721b758e761bd2faf918877b00583a009c8013d5cce453f94f7556beae9","first_seen":"2026-08-25T20:58:05.076871Z","last_seen":"2026-08-25T21:00:53.485834Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/logo.svg","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.148Z","timestamp":1787691625148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7625\r\nlast-modified: Thu, 13 Aug 2026 21:51:22 GMT\r\netag: \"4f70-658f4b46690a7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20336,"size_decoded":8039,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f3da0373666f69d6e84e69fb6d3d5a4","sha1":"ceb554abca5f4dd8f6811dd0574053e1f548c86e","sha256":"bbaaac829821a84f9131e58c482be1931ce994d7eb8ec955f83d77f620db04ed","sha512":"0376474bd765ca63728cb65e7474da0c85926ffb4c8ad7cd1e311afea87ce8eb4a36295125f59cbf59bdfeab67c50d55d717fcd56610a97746d08470c246d6ec","ssdeep":"384:zw2rSoFBHHHUMcHPmfXvO601o2WQl2hn/fiVZckS2y2PhnvBOI2QnuBOJ5LbZMr4:r2JNXMhnniVSkV15nvBGQnuBahpR","tlshash":"5f92ea82e37696f47981069d4aa87e813bf854bfa43182dcdb6b5602b803ff1716cd35","first_seen":"2026-08-25T20:58:05.071812Z","last_seen":"2026-08-25T21:00:53.489446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/feat-controls.webp","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.456Z","timestamp":1787691625456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/feat-controls.webp HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17292\r\nlast-modified: Thu, 13 Aug 2026 21:51:17 GMT\r\netag: \"438c-658f4b426f243\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17292,"size_decoded":17704,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"10f701998de4d5851cde1fbf527f5771","sha1":"e4e0d4f8dcf94e406a17b2ba65b5095a7f9f7791","sha256":"1bd2e0cfc8ed1f7b807dffc1e9dfa8ec4286029ef5bb70d0a505b363187129a6","sha512":"741dabf7bc2ac591167d9405fb27cf24f09fd4ad92fb1b5b49be8a6f50e3b9af4dbd5d9b55fef31cd8911960c0d20645cf86eba129680345add105cae5e5ceeb","ssdeep":"384:BDRszX2hlMX3Z/SIVWVYrE7AU65l4cqPjEVY5sx5tPVxSa7B:BDazGYZ/SXOU65ScqPjEVnx/PT99","tlshash":"7372d195c59b93c0ad69b914e737c8e49e187f1fc214888ee5c96c44b54ce20ab923fe","first_seen":"2026-08-25T20:58:05.074301Z","last_seen":"2026-08-25T21:00:53.491125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/icon-192.png","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.533Z","timestamp":1787691625533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/icon-192.png HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 23796\r\nlast-modified: Thu, 13 Aug 2026 21:51:20 GMT\r\netag: \"5cf4-658f4b4468100\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23796,"size_decoded":24207,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3439a96637fd42f0623e02eb2d65fa67","sha1":"77874e46dba3962d5497aa0c1008b25647ebe82f","sha256":"a6f1e05cb14e353406c717becf3539c07febeeee8d68184fe6eb6d7655543010","sha512":"8e268424969ee4880c89cdcb90862b44e8f5b2529893a5a85bb25a320268b285ebc1ce14fc184733c6e4f0980226e1e19b79b9b24a139a100237eb8ac4e5e3c8","ssdeep":"384:hVSsjgk3/YqA6p1MUk72qy5THC5hZuT+nO8fOXsiR5M9MkfEFkxq93Z:hLHwqLp1Cy5mPZJOeMz5M91fEqq93Z","tlshash":"74b2f1e71d18a35c5e407ffbe3afe490ddd420622a8a9db13239dd82e0ca680587cd1d","first_seen":"2026-08-25T20:58:05.065314Z","last_seen":"2026-08-25T21:00:53.492487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/favicon.ico","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.535Z","timestamp":1787691625535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 10386\r\nlast-modified: Thu, 13 Aug 2026 21:51:16 GMT\r\netag: \"2892-658f4b40ace98\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10386,"size_decoded":10800,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"647e57555488b957bc097216c9c83299","sha1":"1fb31bc54391fd5b80f4b3550d286bca1855e38c","sha256":"da114d09c3c2d0f0bbb3e16d2dcdf822075f7748aaa281dbf444dcd7f93b717d","sha512":"8cdeadc23c6af22c3c0e8dec03301d085ea050ab13a644e3b468adaa2972e55e1bd818eef0b9a7a8122f2ddd12bbf5436d8a56c5c4017a1e5e3c89c7b3ebc6c6","ssdeep":"192:w+9iXCx7+IB9ADI7bd3cxuC4RbSnyQgiO6Mq9K9tTzS5YMc9JrQUDt3n43:V59+mR7R51QgH6MdTSEDrbDt343","tlshash":"1922cfcb67b0b4326a38c161e43919035c59038d5cd89689dd7e61ba497fd569c321c1","first_seen":"2026-08-25T20:58:05.066564Z","last_seen":"2026-08-25T21:00:53.493681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:00:24.709Z","timestamp":1787691624709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:24 GMT\r\ncontent-type: text/html\r\ncontent-length: 5103\r\nlast-modified: Sat, 22 Aug 2026 13:52:31 GMT\r\netag: \"43f8-659a3107e443a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17400,"size_decoded":5564,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"cf282df3e2003df696be351c62ad3fb6","sha1":"500e643695509eef67c0680b36957ea196ebf69e","sha256":"51c01345d085034a4a89524b792abba41e2968163ddccd9a0435625684ad92cf","sha512":"d939432478347384d945ac210480e61c4e7305843cb5358a8f103f166721466515bcec424b35067faba34e0bbdce1ccfb5e97e0a532b0463238a8fb22e85de8b","ssdeep":"192:kJsPmaJsPcWHuF5NZ79OYZIIR4ECFibRjQr3aEhzBeaiaoyywqsUd4oklFgukoUy:OhMPn5NlZIIRpaQBephzUaiTGqf2la6","tlshash":"8372542195c458af0132a107ed14ab4dfda681bf6b5b1b1135bc2abf3ff2c14c96b609","first_seen":"2026-08-25T20:58:05.067796Z","last_seen":"2026-08-25T21:00:53.494728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":63,"connect":55,"send":0,"wait":70,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/feat-speed.webp","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.453Z","timestamp":1787691625453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/feat-speed.webp HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14396\r\nlast-modified: Thu, 13 Aug 2026 21:51:18 GMT\r\netag: \"383c-658f4b43630e7\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14396,"size_decoded":14808,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"201bfb1d520a7628178a50a87fa58f57","sha1":"cd4cc5a4deb7079ff01b90d8e3bd5a86b2502f18","sha256":"26bf686309787ae2dfe181287583b8ed38989242d09a9fccd4828a42cec6eb17","sha512":"9adb15e313a6dba0f56b8cb99dd03ae0976b921e29f0f8605168724102e415bbecd64abd80f49997441732eabce209a21e7a5e14df1c781d11dc96ba26cf2284","ssdeep":"384:CV82RrdIsc8cLBFIXHpLL7dBmHAVd5Yg+koVGelGTTJllo8x:sdrfcPIXJLL3mSB+ko0elGW8x","tlshash":"ec52d12ff1bb497ac7e23d1e24a5ea6d1c88430451c549173a823e9e06da261b4f5c8b","first_seen":"2026-08-25T20:58:05.073036Z","last_seen":"2026-08-25T21:00:53.495706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getbluestacks.ru/assets/img/feat-multi.webp","fqdn":"getbluestacks.ru","domain":"getbluestacks.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://getbluestacks.ru/","date":"2026-08-25T21:00:25.454Z","timestamp":1787691625454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbluestacks.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:43:25 GMT","end":"Wed, 11 Nov 2026 19:43:24 GMT"},"fingerprint":{"sha1":"D2:30:4D:D0:D6:3B:2A:B3:BC:F2:E6:E8:44:F5:92:AC:83:17:54:56","sha256":"32:ED:8F:39:EA:F8:6D:73:AB:A9:3D:73:37:38:EB:24:83:14:FC:0F:D9:A5:42:3F:39:6C:22:EF:93:56:79:87"}}},"request":{"raw":"GET /assets/img/feat-multi.webp HTTP/1.1\r\nHost: getbluestacks.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getbluestacks.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:00:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16336\r\nlast-modified: Thu, 13 Aug 2026 21:51:18 GMT\r\netag: \"3fd0-658f4b4313376\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16336,"size_decoded":16748,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c5c9ce33fba2f7ad94a1952a9c7125b","sha1":"acc3113aaf989df76d7aa26cbc433f391a2f1c3a","sha256":"4dfff48f520451c61873417ee718747d76e0b1063e319defa9e060f39ad938b0","sha512":"75d4e1ef1ee197bdfad4fbc28f2dffc3263009ed51ec78ff916be36baad62f14f67d4af04db02038fe22b490d2373d6c55050dc77a4e876489b22c5614b019a6","ssdeep":"384:kDLKhbc1egrFv1JP89qiLQ+KbuSU8R0z2l3SoB:mLYgAgpv1a9q2Q+FSUXz2NSu","tlshash":"bc72d0c0424eaa0faa55c163fc85c48b6fe73e4906aa3fefe2dd848ec0564204a10857","first_seen":"2026-08-25T20:58:05.062778Z","last_seen":"2026-08-25T21:00:53.496577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getbluestacks.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}