{"report_id":"e327673b-b922-490b-a9bc-f67ccea636cd","version":0,"status":"done","tags":[],"date":"2026-08-25T20:59:53Z","url":{"schema":"http","addr":"get7zip.ru/","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"get7zip.ru/","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"title":"Скачать 7-Zip бесплатно на русском для Windows, Linux и macOS — 7-Zip Hub","dom":{"size":25737,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1249)","md5":"7f4baa7095cd7a45b1b2b6a3895ea1c0","sha1":"fb3305b772c72efb8ed4f5a8b287bba3d1fa0948","sha256":"fd2ec421ddd6c74cf0b8c4bfd9b3b96efae9deeef6f7d343d1c9304f8bc3aff2","sha512":"b01f950cc9750f7b50eb997b86496ced7c67fe18635a9113f760e3ce5884ca989c1b82582545968a88457c7d9c37f17219ed90d4cd294008950ddf9cf1b5de54","ssdeep":"384:zrS/oniVMBUlYcLLwPF/tdDWQmyvmfquSDp:vWlYcotWETf","tlshash":"22c2626151f8587f111291caca257b1e2da680bfee4e160075bc1abdafe3c55cd3b20e","dom_hash":"domhashc0873006e9dae50dbc81d23052abe4a5","first_seen":"2026-08-25T20:59:20.590724Z","last_seen":"2026-08-25T20:59:55.389603Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"get7zip.ru/","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T20:59:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"get7zip.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-25T20:59:17.260856Z","last_seen":"2026-08-25T20:59:17.260856Z","alert_count":14,"request_count":7,"received_data":523281,"sent_data":3381,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"get7zip.ru/","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc1dedb318338379b7f3094924e6b675","sha1":"53508817c6a8a469334d2e6a5f18a835c3e540e6","sha256":"303a61958ebfa3d800b0187940c2f958db0397ea7ae3a9e0645cbef7e6e211c8","sha512":"b08cfd177e7caa1a1d150b916e69927445a179b631e48c8eae66f760e6c8bbc95e296008ee07bafa7b79892df31c53003499f6670bb8c72af112db14abb33ad9","ssdeep":"","tlshash":"65f0e177b8c492f5c2fa2136532bb30c751728bd24896c34878d88c13a7ac59102f96c","size":576,"data":"","first_seen":"2026-08-25T20:59:20.60201Z","last_seen":"2026-08-25T20:59:55.401942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/js/main.js","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"844e6f64f477e4641ecfc60a3db5b6f1","sha1":"3288cb73bdeb75f754830fccea3a6b73c08922b2","sha256":"cced1cab63ccc9a2633fa08d1fa6de4cc5236e5b4ae709a9b34c7b11cb4556e1","sha512":"a6c6694767bb725423f441cd6b014dab9901a2bade5f1de1c276e92f8a0b8227ac599fabac4aa8741af67ea5ce933470f962278c30c0efd74e7935b0171deacb","ssdeep":"192:3kGQaOs2TcMuQMumalVgfc4BQTSEffi6+DW/9eSTTBpQ3PCkW0Ty5ZyHzmO/+:3kQqUJ6SEffi6Yd3PF5+","tlshash":"2822d7547cd320365023a1feaa9f2658f6b0405ba44ecd013cacd7962fe497647bdaf8","size":10050,"data":"","first_seen":"2026-08-25T20:59:20.596201Z","last_seen":"2026-08-25T20:59:55.393904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"get7zip.ru/assets/img/hero-main.jpg","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get7zip.ru/","date":"2026-08-25T20:59:27.039Z","timestamp":1787691567039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET /assets/img/hero-main.jpg HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://get7zip.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 182673\r\nlast-modified: Thu, 13 Aug 2026 21:51:00 GMT\r\netag: \"2c991-658f4b320911c\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182673,"size_decoded":183087,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1536x1024, components 3","md5":"4af4be3edc12f26dd164fcdebbfae252","sha1":"093f7b848eaa63765201ff55d75a9caa1ea16778","sha256":"268aabc082d0dd285ec2fc4dfb6a78ee85a8cfb546afe70dafd3ce7e5c0f9d0d","sha512":"831abc9d322025e1b7d9c382b6668494725bd7c8492cc1744195bf1d9340ec0727c5a6195efd780ea4195017097ff4245c490521cf14d717447db3c76a1f45dc","ssdeep":"3072:lq2ZxrX/HEVyydIppBivIhIfz3RYUTnW/kURW26NoqIUZJWmVqZNsT6LQgU9:lqE/HITICxzGqnWRJ6WqIUamY/sTn","tlshash":"130402435a059b47592993fc7f032c252b063b8e2ebe36cf14635dab3a746361c8e85d","first_seen":"2026-08-25T20:59:20.594503Z","last_seen":"2026-08-25T20:59:55.392031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/js/main.js","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get7zip.ru/","date":"2026-08-25T20:59:27.043Z","timestamp":1787691567043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://get7zip.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:27 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:21 GMT\r\netag: W/\"2742-659a32c80af0e\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10050,"size_decoded":3925,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"844e6f64f477e4641ecfc60a3db5b6f1","sha1":"3288cb73bdeb75f754830fccea3a6b73c08922b2","sha256":"cced1cab63ccc9a2633fa08d1fa6de4cc5236e5b4ae709a9b34c7b11cb4556e1","sha512":"a6c6694767bb725423f441cd6b014dab9901a2bade5f1de1c276e92f8a0b8227ac599fabac4aa8741af67ea5ce933470f962278c30c0efd74e7935b0171deacb","ssdeep":"192:3kGQaOs2TcMuQMumalVgfc4BQTSEffi6+DW/9eSTTBpQ3PCkW0Ty5ZyHzmO/+:3kQqUJ6SEffi6Yd3PF5+","tlshash":"2822d7547cd320365023a1feaa9f2658f6b0405ba44ecd013cacd7962fe497647bdaf8","first_seen":"2026-08-25T20:59:20.596201Z","last_seen":"2026-08-25T20:59:55.393904Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/assets/img/logo-mark.png","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get7zip.ru/","date":"2026-08-25T20:59:27.047Z","timestamp":1787691567047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET /assets/img/logo-mark.png HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://get7zip.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 248823\r\nlast-modified: Thu, 13 Aug 2026 21:51:01 GMT\r\netag: \"3cbf7-658f4b33292d6\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248823,"size_decoded":249236,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f0badef1c60572a55816b5f6629e748c","sha1":"8ece65d7214538e9c44a9656375eaf90a9c95d68","sha256":"f6c3b75f66871719dad2a334bd04d3222bf4711467c70de4dd7663aa57e137ce","sha512":"7bf5204aedfc04d1069bc5a449d44e2ac81e83a8cb000049d4378d91c91f7052d7bb333b6259c1d6260468799ef1ee080ecdac6055c09fa9de5638e868425843","ssdeep":"6144:izMV5b09xGggHdbc2vM2b+yb611GnWEDfmDdyb57:JjQxCHOGg5cmDMp","tlshash":"f9342311de74d6dd8a095078b074267806fab80e419eba2568fd9cfcc90e7f23b657c2","first_seen":"2026-08-25T20:59:20.597859Z","last_seen":"2026-08-25T20:59:55.395117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/assets/img/favicon-180.png","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get7zip.ru/","date":"2026-08-25T20:59:27.322Z","timestamp":1787691567322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET /assets/img/favicon-180.png HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://get7zip.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 32263\r\nlast-modified: Thu, 13 Aug 2026 21:50:59 GMT\r\netag: \"7e07-658f4b30607a0\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32263,"size_decoded":32674,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"db5f795d7cfbfac6bd9dfa2a3f8994b2","sha1":"b71c87d38c53fb9e07571d2475ae71493b1f080c","sha256":"f8986fcfd764d05a1d5d23d1a94b3cf9346724f89292226ba6a51a64f7a7ff90","sha512":"807f92503c91f3e7ecc2aebb8a01dded9729f0f709eee5de5c307aa21ef02edde60353d1f1324401f812c8d9394121bb865c419521393bac378e62c4c66a5265","ssdeep":"384:7E79k2JjyXTdm8Ta8MywZJaQAH/wuDMBSMhbVDvqGXHmFndDNzufYaFNH74g0w2V:7EucAdmukX7EDMRVD9GPaF5t6vv2FJo","tlshash":"bee2f18f2fb64c4edc35ef8603e952368a5faaf864df53c41e7a20d191248035a57e86","first_seen":"2026-08-25T20:59:20.598925Z","last_seen":"2026-08-25T20:59:55.396315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/assets/img/favicon-32.png","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get7zip.ru/","date":"2026-08-25T20:59:27.325Z","timestamp":1787691567325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET /assets/img/favicon-32.png HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://get7zip.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1871\r\nlast-modified: Thu, 13 Aug 2026 21:50:59 GMT\r\netag: \"74f-658f4b30a9f7f\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1871,"size_decoded":2280,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"80c081be16b468bad8cb19908412be00","sha1":"d7aeb9e5a432b3c1a047426f790847f7afa146e2","sha256":"f1153a56de8060c0930a612946d30ceaba579c9cfcc903f91816658409dda9f6","sha512":"8ad682dc46a27f10200360007a961fe332722f7cc8356ab7d2f377c2bc59cf984ca9511a5e96ae21c0362f9df5d7c4d19d52a7cb3e5e51d50baf641df0cd1d7c","ssdeep":"","tlshash":"fb3139560183a28139079a2757b2b4783bceabd0f2285278d8f93ed8210e60cc1867cd","first_seen":"2026-08-25T20:59:20.59994Z","last_seen":"2026-08-25T20:59:55.398975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T20:59:26.628Z","timestamp":1787691566628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 6705\r\nlast-modified: Thu, 13 Aug 2026 21:50:55 GMT\r\netag: \"6110-658f4b2cdbc61-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24848,"size_decoded":7166,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (574), with CRLF line terminators","md5":"98fa47f34c0658536448535e9dc8db51","sha1":"1eff5de8f8ba8457a03b6671e43a212f21a578f1","sha256":"41496a4cd140c2995e75e7c4c90d58c4d202483dc6aa9a25add17d13a8c3befb","sha512":"b4c9bf4cf99b5f1745296c112d9bd039e074f393a4873555138d25698522c06dff9a129d45aadcd34b0b0a242d5f8d728463bc075757ab5692ff7fc9700a4183","ssdeep":"192:7YkKnTZ79sDEYNYsI6rWkq6LT2Y9j3PUj919Ql7Nl4ewNDfIbLos58:7qnTjcd1LTNj/uGdRwlWZ+","tlshash":"d2b2517155c8686f0133918aca247b5efda680bbab4e561075bc2b7f6ff3c14c92710a","first_seen":"2026-08-25T20:59:20.600866Z","last_seen":"2026-08-25T20:59:55.400092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":64,"connect":53,"send":0,"wait":70,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get7zip.ru/css/style.css","fqdn":"get7zip.ru","domain":"get7zip.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get7zip.ru/","date":"2026-08-25T20:59:27.037Z","timestamp":1787691567037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get7zip.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 19:48:39 GMT","end":"Wed, 11 Nov 2026 19:48:38 GMT"},"fingerprint":{"sha1":"3D:D3:70:AF:06:FB:A1:6C:1E:13:83:88:8D:4C:09:5A:73:7C:25:6E","sha256":"A8:97:48:2F:1B:A8:45:67:A5:91:A8:8D:BD:73:34:E9:95:FE:87:B2:C4:B5:81:66:E8:8A:94:D4:7C:D3:FE:10"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: get7zip.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://get7zip.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:59:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 4756\r\nlast-modified: Thu, 13 Aug 2026 21:51:03 GMT\r\netag: \"4d33-658f4b343fc34-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19763,"size_decoded":5217,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c4202fc7dc45e782ae2ce667131a372d","sha1":"eb118d5e0a07c8da1330d3fcb69bfec460c088b8","sha256":"22974476d4d06dc7b21f351b0682218845305e2295436491ab9b22afb82ab5a2","sha512":"e6e051ed0fd3b13f92ba62c2f2a4dc64115daf8e92d032b32f8785a3bd033d5aef9f285198a8cada5c8f0c5f259ca5afa721d8013d1c414c68c7859a3f94afb9","ssdeep":"192:nnWh0mc1DLSym7JnCX5nzsIuA4YrN3VWRdwVYrtk+0wWOUjjiRT/zz7R0/6:Bm23XxQIuTepVq6VYaaTLf","tlshash":"469263a627146230f637f7a8fb97e78de768a112940502bd7dd54008c2ce3be817eb59","first_seen":"2026-08-25T20:59:20.592684Z","last_seen":"2026-08-25T20:59:55.401054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"get7zip.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}