{"report_id":"ef135c5f-f04a-46f6-88d8-92c8d4ce0190","version":0,"status":"done","tags":[],"date":"2026-08-25T21:06:08Z","url":{"schema":"http","addr":"roblox-play.ru/","fqdn":"roblox-play.ru","domain":"roblox-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"getdownloadstudio.net/?i=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%3D%3D","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"title":"Download DS","dom":{"size":5797,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0cc2efab1f37b989d24eb95164fc1bc8","sha1":"f4df2ed9eeaec614a8fa1b82bab1ebe459ffa52d","sha256":"1397305940801b2b6e14fe071d76e01b0d0296a764184935ee8e5a592935e12a","sha512":"26440111a675207704f9baf5d0cbd979899dd52760d271893726dc4efa904c693a882b6e51b7317c8aec7ebc97d1e5b33ce85f478b3fa28a21840ced727850ee","ssdeep":"48:jzsApOq65BsC+rJVOgZU+1VI/CLQfv6C+sOUWz1YqiYW9bW3gNKGSy3:jCJuC0JVOQfkCjC6Vfif9bW3gNKO3","tlshash":"12c1e12240f56127518380d3bf652b4aafd1ea07c66bc746b2fc1a99afd7c82cc5315e","dom_hash":"domhash5858e365efd0b0274896542ba8204826","first_seen":"2026-08-25T21:06:10.504657Z","last_seen":"2026-08-25T21:06:10.504657Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roblox-play.ru/","fqdn":"roblox-play.ru","domain":"roblox-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:06:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"roblox-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"roblox-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"r.byteengineering.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"r.byteengineering.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"getdownloadstudio.net","ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-08-14","domain_rank":0,"first_seen":"2023-08-14T16:00:50Z","last_seen":"2026-08-25T20:52:53.471444Z","alert_count":22,"request_count":11,"received_data":377250,"sent_data":9986,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"roblox-play.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-08-25T20:52:52.672013Z","last_seen":"2026-08-25T20:52:52.672014Z","alert_count":2,"request_count":1,"received_data":1136,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.masst.net","ip":{"addr":"193.36.133.34","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-02-23","domain_rank":0,"first_seen":"2023-07-03T21:45:38Z","last_seen":"2026-08-25T20:52:53.605811Z","alert_count":0,"request_count":1,"received_data":114590,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"r.byteengineering.net","ip":{"addr":"46.19.143.61","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"domain_registered":"2018-11-08","domain_rank":0,"first_seen":"2026-01-20T16:02:32.477754Z","last_seen":"2026-08-25T20:50:59.805301Z","alert_count":2,"request_count":1,"received_data":1135,"sent_data":1228,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getdownloadstudio.net/?i=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%3D%3D","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4f266d28af15caac98d281e382a195c","sha1":"b06328853c6c2cc7f5c76f1e767de21f3c97f407","sha256":"0bee45fdccc9e6a0ff002a02e82b1f6b875a278566437143a86d6ebe2fa58fbf","sha512":"9f6c09d1fcd25e538d51b6d3a36d0e098d48991c9ed9794550741a215270df4e0f5eb93993f88f562bf54ad2aa423fc2bb71d14a75b3afc7eebaf7e93fbd92a0","ssdeep":"","tlshash":"d8b0925bca15841440cc9111943c1445210302070985f8b4b1b9460c7f2eca698ab4b3","size":120,"data":"","first_seen":"2026-06-30T16:40:32.280341Z","last_seen":"2026-08-25T21:06:10.513617Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/js/download-manager.js","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d06e93fa65d9b40e9b5ef9a07f03462","sha1":"e1ec672381fd9cdb878fa1a8c35feef5ddc0be09","sha256":"759c75b8baa47400d33a347a15beea9cf0cd08426b3992072c78789776e904a1","sha512":"cd16c88ed3c75c0751a324bdda3ea861acbf2504e2190121dccf9f026477505f743151970d5c48b86e5d4aa7674fef364f9eb72457f0c714633e58b79cd0a616","ssdeep":"384:cGr7tVyuSDU3/MMNCBIfjIxnQVDm8BXkjxJbAJ/+FKps0obY:DSU34I1Zm8BXkjfbE/+afobY","tlshash":"13b2635a65a2067d258b2fe6dbf61e8d379db203c036c72abe6c1387d7429e0c45235c","size":24640,"data":"","first_seen":"2026-05-16T10:32:11.710836Z","last_seen":"2026-08-25T21:06:10.510793Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/img/general/icon-size.png","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D","date":"2026-08-25T21:05:41.934Z","timestamp":1787691941934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/img/general/icon-size.png HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/?i=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%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 492\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-1ec\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":492,"size_decoded":794,"mime_type":"image/png","magic":"PNG image data, 46 x 45, 8-bit/color RGBA, non-interlaced","md5":"7489758d04b1029b0cbc4ecb42ced1fc","sha1":"273b934ec10a84bf6b6ca5343ae6663d4e7c4323","sha256":"80bc792daf81030c72702fb871f52a4152fc3a242eae73bd8741a11d14509238","sha512":"0ed2e63c3073b28af6f83861481f8fb33d965abb3eb72ba9fa829f6cae1913ed383d4839bc7c8eaf3964dd597ee0b19294653d4b85ef7aa4278744cdbb90ef06","ssdeep":"","tlshash":"c5f00ee3c748d7eafa9c832944334860c876d61e79e15f88004b68e447d0794248d939","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.50581Z","times_seen":16,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/img/general/stars-gray.png","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D","date":"2026-08-25T21:05:41.964Z","timestamp":1787691941964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/img/general/stars-gray.png HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/theme/2/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2233\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-8b9\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2233,"size_decoded":2536,"mime_type":"image/png","magic":"PNG image data, 26 x 25, 8-bit/color RGBA, non-interlaced","md5":"6beee08707ddbc5e27be9f91d1051dcc","sha1":"4545a3f74c7d35cbf667ec82cda174e612aa6238","sha256":"6d3b4152232dc9909384372f9a794e5130f24c703cbf20eda8c004b7baa74eea","sha512":"84e93fc89e61948f87ced5b828445f62e07d72fd48be22d4c642b5c1b55bd0f51428923473aef5e2906434512a3a030ebe0f44a452f7f69d81f578b493868526","ssdeep":"","tlshash":"4941d689fa125c80176cee457eda92675fb705c48a93e089ecc9880319620fae42d9d7","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.506426Z","times_seen":16,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/fonts/MyriadPro-Regular.woff2","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getdownloadstudio.net/?i=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%3D%3D","date":"2026-08-25T21:05:41.973Z","timestamp":1787691941973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/fonts/MyriadPro-Regular.woff2 HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/theme/2/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36384\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-8e20\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36384,"size_decoded":36690,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36384, version 1.0","md5":"8a5664f57c574df295a869657958c811","sha1":"e3c0729c63f8a354053b645b3a2ffa54bb83c403","sha256":"d06354e9e37355ef3d36ebf28d036e9df8af1302b0125caed0a9bd261476d00a","sha512":"6f79e996139e052b2631e279fe523cddff642e085e3c842651ce8d15f890157c65fb2571b3b21ee248bb40025d32672607a097bb63c14ec0be544c516f9b8e23","ssdeep":"768:nNQo1vJSh0ydEOULTggm+9IYpYPDYDVwQ+uLh2yRgLjRkHkKv1c1ZAWKFR:NQo1kh0qvYp2EVwQ++KjREkKv1c1ZAv","tlshash":"06f2f130622040cefe7989feb9b33fc1f5a76e3e4a96aa05c8d26453b5f2e375111640","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.506949Z","times_seen":24,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/fonts/MyriadPro-Semibold.woff2","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D","date":"2026-08-25T21:05:41.974Z","timestamp":1787691941974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/fonts/MyriadPro-Semibold.woff2 HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/theme/2/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36420\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-8e44\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36420,"size_decoded":36726,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36420, version 1.0","md5":"922e9441934c4530f3fe31fcbe6d7718","sha1":"5dafd8d61acd22d181b4493725a15bcde3ac9353","sha256":"2db5a40f14c9d0d08da17fe8d4c546398a9ad0e377dc3b1ef3dc4586a0a11a5f","sha512":"69ce6f2ceaef0d50e50edae443ab55f327bcb651b2b44150018f1cfded2bc57eac9fd642443d2583a6ac6058b358c06602ca3e5f242b49cfbab418f991e885aa","ssdeep":"768:TD3/BtzxSS6rVXFAwxkrXBla8wMksdQmc9dJzkeBK9ZXxF:TDPBtz8NxVAwxyXB1wMkQRmuXxF","tlshash":"79f2f12ead0f7032e21cdda265666f8bcc288eed5adf1b37603db8524dd46d24452570","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.507732Z","times_seen":20,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/favicon.ico","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=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%3D%3D","date":"2026-08-25T21:05:42.094Z","timestamp":1787691942094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/?i=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%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:42 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6448dff1-3aee\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":8090,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"757db4de13a26a547433bfa48d69d31f","sha1":"d5b8a5e18d6b9f8727f93f9f7249815b81e6b752","sha256":"6da14f8a185f27867be8f406256cd1c7e80d3708a36cd702c34dc482e0214826","sha512":"ae45f9c359db90a3402af498d0dc14d421dc23d5a8588552c5fad353e4b5cf611bd80a5a012711520f6d397ddf17067944ac34d28c2cc8fee75026d5729dc268","ssdeep":"384:j/rtR+Y4E+ZBkqwDzAAAmHIVn018paVrO:brGAqwDo+18pahO","tlshash":"be621bd675001862f06d08bb601bdd6a01de2efe985171e25d9cbfbfe633146c52173a","first_seen":"2023-05-24T18:51:31Z","last_seen":"2026-08-25T21:06:10.508279Z","times_seen":690,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-play.ru/","fqdn":"roblox-play.ru","domain":"roblox-play.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:05:40.931Z","timestamp":1787691940931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.roblox-play.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 07:40:38 GMT","end":"Sat, 07 Nov 2026 07:40:37 GMT"},"fingerprint":{"sha1":"E6:B4:E7:CE:04:8A:C7:99:3E:D6:6C:12:DE:FD:BB:56:F5:74:FB:B1","sha256":"08:59:C8:61:DC:0D:78:39:78:D1:0F:26:D6:BC:67:3A:BC:9E:EA:06:9F:5D:5D:FA:30:6B:C4:AF:BF:8C:9B:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roblox-play.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://r.byteengineering.net/go/36e57a5c509254e77f2634fc59d6f2d6?subid=roblox-play_index\u0026dpl=https%3A%2F%2Fsetup.rbxcdn.com%2FRobloxPlayerLauncher.exe\u0026extra2=Roblox\u0026extra=poster%3Dhttps%3A%2F%2Froblox-play.ru%2Fassets%2Fposter-roblox.jpg%26description%3DRoblox%20%E2%80%94%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%B0%D1%8F%20%D0%B8%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%BF%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0.%20%D0%A3%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%20%D1%87%D0%B5%D1%80%D0%B5%D0%B7%20%D0%BC%D0%B5%D0%BD%D0%B5%D0%B4%D0%B6%D0%B5%D1%80%20%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B7%D0%BA%D0%B8%2C%20%D0%B0%D0%BA%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20Windows.\r\nx-powered-by: PHP/8.1.34\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T02:40:40.169432Z","times_seen":18105283,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":57,"connect":30,"send":0,"wait":54,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"roblox-play.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"roblox-play.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/?i=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%3D%3D","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:05:41.476Z","timestamp":1787691941476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6024,"size_decoded":1648,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"27233cb6d91770a89562098d0d47572e","sha1":"3b7d9af4ff741615ed7ca77ffa3baf3e7d8391af","sha256":"a4e16a1f5c3939192f6488595b871e20c06b8a062e1c4be2c0f69cd10e7f3e76","sha512":"dd6d8d06fa5f3ed0f5c2dd1ed607634440e2622eeb7938b47bb9c4c29e09601d7d1c88067d615202bbd38656ccf37b6cafb70072bd73a2b3783efd722ad83e80","ssdeep":"48:/pSApOq65BsC+rJVOgZUv1VI/CLQfv6C+sOUWzxYqs6W9bW2gNYGSyl:/pkJuC0JVOQqkCjC6VDsp9bW2gNYOl","tlshash":"8ac1f22240f56127415380d3bf652b46afd2ea07c66b8746b2fc1a99afd7c82cc5315e","first_seen":"2026-08-25T21:06:10.509364Z","last_seen":"2026-08-25T21:06:10.509364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":3,"connect":20,"send":0,"wait":24,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/css/main.css","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D","date":"2026-08-25T21:05:41.749Z","timestamp":1787691941749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/css/main.css HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/?i=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%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6448dff1-3af53\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241491,"size_decoded":24874,"mime_type":"text/css","magic":"ASCII text, with very long lines (571)","md5":"a8ebe0dd9306792b48e06e9136592178","sha1":"05e4a671418c885db814d89b59d946c1d183ed43","sha256":"c5ba09c684156a98ee8b423a7bdf720b2e16563719e1045165a40074bd8312fc","sha512":"9c9ca28121560c974c6ac80c2afcf557ca4d809e253f13ccdc87bcc85529e5c60d39a679230890393b2d7b1653056cfc9f516924a3566e669be12de4aee50f00","ssdeep":"1536:Cgbb/W+LS2AXTQcGQsNJf0pTUg6xF+19NsneKSzje+KTzNlYrFcr8y4b/zDL4iD3:o/tpTUFacrQb/zDL4iDF4ZE","tlshash":"2b34652abdf11504301b895c26cabbf57b7d8053c609defa79df2524cf4abc148e2989","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.510257Z","times_seen":15,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/js/download-manager.js","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getdownloadstudio.net/?i=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%3D%3D","date":"2026-08-25T21:05:41.750Z","timestamp":1787691941750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /js/download-manager.js HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 23 Apr 2026 22:12:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ea993d-6040\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24640,"size_decoded":5759,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11274)","md5":"2d06e93fa65d9b40e9b5ef9a07f03462","sha1":"e1ec672381fd9cdb878fa1a8c35feef5ddc0be09","sha256":"759c75b8baa47400d33a347a15beea9cf0cd08426b3992072c78789776e904a1","sha512":"cd16c88ed3c75c0751a324bdda3ea861acbf2504e2190121dccf9f026477505f743151970d5c48b86e5d4aa7674fef364f9eb72457f0c714633e58b79cd0a616","ssdeep":"384:cGr7tVyuSDU3/MMNCBIfjIxnQVDm8BXkjxJbAJ/+FKps0obY:DSU34I1Zm8BXkjfbE/+afobY","tlshash":"13b2635a65a2067d258b2fe6dbf61e8d379db203c036c72abe6c1387d7429e0c45235c","first_seen":"2026-05-16T10:32:11.710836Z","last_seen":"2026-08-25T21:06:10.510793Z","times_seen":13,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/img/general/logo.png","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=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%3D%3D","date":"2026-08-25T21:05:41.927Z","timestamp":1787691941927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/img/general/logo.png HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/?i=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%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 9477\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-2505\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9477,"size_decoded":9781,"mime_type":"image/png","magic":"PNG image data, 90 x 98, 8-bit/color RGBA, non-interlaced","md5":"3a0cb6d20c53ac176b52c65dfecc23e2","sha1":"fcd52601eed8acaa495da1bde2e25c8a7dddfb59","sha256":"d9a28c2b26becb6ef7c8acbd506d43cd0142ba65097fc07fee4f6ed43714931d","sha512":"9cb385b7b3a10d77a45c7de0de7392c0a46c23f2134021fad976d1243130b54b4c97f02d230c68c9aa4441de3ec37f2f0655d6049e88900f6fc3868a3b447605","ssdeep":"192:o/vYO/HmaXVhyVP1r2NolYajCpz1MeKP5lsmjGJkfIvStnoXl2MqYpeqQ4dFRfx:o/vjPdAP1CGl5IMeil21vonoV2MKqVfZ","tlshash":"0912ae6ab98d4436b8d4c49ba0c49909f00acf6ceec4ab0a9198d461fed435bf7463e0","first_seen":"2023-05-06T14:24:05Z","last_seen":"2026-08-25T21:06:10.511346Z","times_seen":139,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.masst.net/proxy_image/https://roblox-play.ru/assets/poster-roblox.jpg","fqdn":"cdn.masst.net","domain":"masst.net","tld":"net"},"ip":{"addr":"193.36.133.34","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=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%3D%3D","date":"2026-08-25T21:05:41.933Z","timestamp":1787691941933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.masst.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 06:51:19 GMT","end":"Tue, 29 Sep 2026 06:51:18 GMT"},"fingerprint":{"sha1":"60:26:08:27:90:AE:0C:48:41:6C:F8:96:57:A8:91:70:43:FE:46:AD","sha256":"92:80:CD:C9:36:98:1C:C0:D8:37:B8:96:70:5A:7A:1F:DC:D1:B6:EA:2F:6A:6B:E7:8E:9C:46:C4:3F:AB:B7:34"}}},"request":{"raw":"GET /proxy_image/https://roblox-play.ru/assets/poster-roblox.jpg HTTP/1.1\r\nHost: cdn.masst.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114338\r\nlast-modified: Sun, 09 Aug 2026 19:29:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6a78d52d-1bea2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114338,"size_decoded":114590,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"fd27b203529e4ababeefecbba60d7c3e","sha1":"bd9317aa2db211b28af4dfe522263947f88d4d31","sha256":"3aa59250c0a9b0d6380ad395d671fa30f5ef1b178961b75b98cae771e533534b","sha512":"0980f32ab32c36f14f61ce2196e2237f7c86505bfb62cc21ab385a2f838c48dc7535a20fc578159d054892508a5c1f301221122e40c991ea629825690040ca89","ssdeep":"3072:YFQWaVF0wXqbCpPEYuq6a93TaDP8YRn5lvgc7mQR:nWaV1XiCMr8In5BBLR","tlshash":"85b31218cf57f150d697bb447c5b620a2ff5071d8bf3980b84bbab3be028568e5c6121","first_seen":"2026-08-25T20:52:56.206925Z","last_seen":"2026-08-25T21:06:10.511884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":9,"connect":20,"send":0,"wait":39,"receive":39,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/img/general/icon-rating.png","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D","date":"2026-08-25T21:05:41.935Z","timestamp":1787691941935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/img/general/icon-rating.png HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/?i=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%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1265\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-4f1\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1265,"size_decoded":1568,"mime_type":"image/png","magic":"PNG image data, 79 x 45, 8-bit/color RGBA, non-interlaced","md5":"169292df6a6abba4b6a42f5a99341429","sha1":"0e76e3b4ed16fc302998dd8bafc7e7a8106effd9","sha256":"9d508c425b1f90b6fbaf15abbef38f5427e41d22ce94307f4a21d10e859c6084","sha512":"1162e2963aeab15a13f9601abe653b10734ce2c61ae12837f725a536b873dea9f897bd573dfd6b11e3f78e1d1831cc16e531ba719c44b69034a3e17ffe5c53eb","ssdeep":"","tlshash":"a421e7039a086bb88d266ae61b7436c02c4368685c32d53467aea83d644c750ff2b546","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.512431Z","times_seen":16,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getdownloadstudio.net/theme/2/img/general/stars.png","fqdn":"getdownloadstudio.net","domain":"getdownloadstudio.net","tld":"net"},"ip":{"addr":"193.36.133.37","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getdownloadstudio.net/?i=eyJuYW1lIjoiUm9ibG94IiwibGluayI6Imh0dHBzOlwvXC9zZXR1cC5yYnhjZG4uY29tXC9Sb2Jsb3hQbGF5ZXJMYXVuY2hlci5leGUiLCJzdHJlYW1faWQiOiIyODM5IiwidmlkIjoiMjQ0IiwiaCI6InBvc3Rlcj1odHRwczpcL1wvcm9ibG94LXBsYXkucnVcL2Fzc2V0c1wvcG9zdGVyLXJvYmxveC5qcGcmZGVzY3JpcHRpb249Um9ibG94IOKAlCDQsdC10YHQv9C70LDRgtC90LDRjyDQuNCz0YDQvtCy0LDRjyDQv9C70LDRgtGE0L7RgNC80LAuINCj0YHRgtCw0L3QvtCy0LrQsCDRh9C10YDQtdC3INC80LXQvdC10LTQttC10YAg0LfQsNCz0YDRg9C30LrQuCwg0LDQutGC0YPQsNC70YzQvdCw0Y8g0LLQtdGA0YHQuNGPINC00LvRjyBXaW5kb3dzLiIsInN1YmlkIjoicm9ibG94LXBsYXlfaW5kZXgiLCJjbGlja19pZCI6IjE0NzcwODkyMzE3ODc2OTE5NDEiLCJzb3VyY2VfaWQiOiI0NjAifQ%3D%3D","date":"2026-08-25T21:05:41.963Z","timestamp":1787691941963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getdownloadstudio.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:21:47 GMT","end":"Sun, 11 Oct 2026 03:21:46 GMT"},"fingerprint":{"sha1":"70:90:3B:C5:93:D4:1B:50:D5:B9:22:CB:4C:B1:50:E1:58:BD:9C:9B","sha256":"B2:97:96:D8:E8:06:0B:60:25:EA:7B:11:E5:03:47:F7:CA:A2:9C:11:8C:7A:E7:FF:90:84:20:AF:DD:5A:8E:86"}}},"request":{"raw":"GET /theme/2/img/general/stars.png HTTP/1.1\r\nHost: getdownloadstudio.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getdownloadstudio.net/theme/2/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\nlast-modified: Wed, 26 Apr 2023 08:25:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6448dff1-1f5\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":501,"size_decoded":803,"mime_type":"image/png","magic":"PNG image data, 26 x 25, 8-bit colormap, non-interlaced","md5":"abaa77240052a57a839b64b6e42f8774","sha1":"b7dcd3a1b22f5e458200a12c2d8e27a61912503c","sha256":"6146d5329f3177d88f5f2cac080ece40038d9d4b793cfdb38f608cdb1a318902","sha512":"588690a76f431fce27367a07d2286d6e57554c0754bb1b2fa65a0feef85ca5fb9f6df9cb3b777c7d0eb5b8318f5ec746c05b149cb9825f7fc69ad9f0a6c12571","ssdeep":"","tlshash":"bcf0dce54a20de69c463151d7d7c1310f8fa452a53135a8bd99ac92c0808bd8d455fc2","first_seen":"2023-10-13T20:15:19Z","last_seen":"2026-08-25T21:06:10.513072Z","times_seen":16,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getdownloadstudio.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r.byteengineering.net/go/36e57a5c509254e77f2634fc59d6f2d6?subid=roblox-play_index\u0026dpl=https%3A%2F%2Fsetup.rbxcdn.com%2FRobloxPlayerLauncher.exe\u0026extra2=Roblox\u0026extra=poster%3Dhttps%3A%2F%2Froblox-play.ru%2Fassets%2Fposter-roblox.jpg%26description%3DRoblox%20%E2%80%94%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%B0%D1%8F%20%D0%B8%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%BF%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0.%20%D0%A3%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%20%D1%87%D0%B5%D1%80%D0%B5%D0%B7%20%D0%BC%D0%B5%D0%BD%D0%B5%D0%B4%D0%B6%D0%B5%D1%80%20%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B7%D0%BA%D0%B8%2C%20%D0%B0%D0%BA%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20Windows.","fqdn":"r.byteengineering.net","domain":"byteengineering.net","tld":"net"},"ip":{"addr":"46.19.143.61","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:05:41.114Z","timestamp":1787691941114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.byteengineering.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 11:49:50 GMT","end":"Sat, 10 Oct 2026 11:49:49 GMT"},"fingerprint":{"sha1":"5E:2A:B1:E1:ED:1D:BF:6B:21:D8:72:F1:A5:E7:91:F2:BA:1F:24:BB","sha256":"75:B6:84:13:FB:53:29:0A:E3:B0:47:66:F6:BF:C0:AD:ED:6D:AE:17:53:31:9D:A6:13:E6:CC:BC:60:A1:29:19"}}},"request":{"raw":"GET /go/36e57a5c509254e77f2634fc59d6f2d6?subid=roblox-play_index\u0026dpl=https%3A%2F%2Fsetup.rbxcdn.com%2FRobloxPlayerLauncher.exe\u0026extra2=Roblox\u0026extra=poster%3Dhttps%3A%2F%2Froblox-play.ru%2Fassets%2Fposter-roblox.jpg%26description%3DRoblox%20%E2%80%94%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%B0%D1%8F%20%D0%B8%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%BF%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0.%20%D0%A3%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%20%D1%87%D0%B5%D1%80%D0%B5%D0%B7%20%D0%BC%D0%B5%D0%BD%D0%B5%D0%B4%D0%B6%D0%B5%D1%80%20%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B7%D0%BA%D0%B8%2C%20%D0%B0%D0%BA%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20Windows. HTTP/1.1\r\nHost: r.byteengineering.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:05:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nx-server: lua-ad-server/1.2.0\r\nset-cookie: uid=22760551531787691941; Expires=Wed, 25-Aug-27 21:05:41 GMT; Max-Age=31536000; Path=/; Domain=.r.byteengineering.net; SameSite=None; Secure\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\nlocation: https://getdownloadstudio.net/?i=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%3D%3D\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"22760551531787691941","quoted":false,"path":"/","domain":".r.byteengineering.net","raw_expires":"Wed, 25-Aug-27 21:05:41 GMT","max_age":31536000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=22760551531787691941; Expires=Wed, 25-Aug-27 21:05:41 GMT; Max-Age=31536000; Path=/; Domain=.r.byteengineering.net; SameSite=None; Secure"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T02:40:40.169432Z","times_seen":18105283,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":63,"connect":30,"send":0,"wait":196,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"r.byteengineering.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"r.byteengineering.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}