{"report_id":"2a6885f2-b233-439f-958a-464e78cb33e4","version":0,"status":"done","tags":[],"date":"2026-08-18T12:48:41Z","url":{"schema":"http","addr":"pdfacro.com/","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":0,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"title":"Скачать программу Adobe Reader бесплатно. Безопасная загрузка","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pdfacro.com/","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":0,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T12:48:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-16T22:53:44.913224Z","alert_count":0,"request_count":4,"received_data":76282,"sent_data":2675,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":2,"received_data":54731,"sent_data":1168,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-16T23:03:23.649094Z","alert_count":0,"request_count":1,"received_data":9709,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"abt.s3.yandex.net","ip":{"addr":"93.158.134.158","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":340619,"first_seen":"2022-11-18T13:36:46Z","last_seen":"2026-08-17T06:55:39.49298Z","alert_count":0,"request_count":1,"received_data":15181,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":1,"received_data":40961,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"oslo.pdfacro.com","ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":111,"request_count":37,"received_data":2947017,"sent_data":19582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"pdfacro.com","ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-08-18T12:48:49.132947Z","last_seen":"2026-08-18T12:48:49.132947Z","alert_count":36,"request_count":12,"received_data":325263,"sent_data":6276,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-16T23:15:38.642647Z","alert_count":0,"request_count":7,"received_data":3468528,"sent_data":3705,"comment":"","tags":null,"fingerprints":null},{"fqdn":"uaas.yandex.ru","ip":{"addr":"213.180.204.98","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":157746,"first_seen":"2022-06-30T10:21:33Z","last_seen":"2026-08-18T05:28:47.051726Z","alert_count":0,"request_count":2,"received_data":2040,"sent_data":1094,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@17.8.8/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4437a0deae2d14e7078a5e366f6ccaae","sha1":"f624bf32d7ed16d9d22ab0a7aef5f8125d06a089","sha256":"e40abf3f23b23cb01de7feab31773f2dbf94074cb0fb0feec8de182b1c69efb3","sha512":"4efaf5658d82ff2c46d93df7d9ea119bdeccbfc8bbb501bc925a68f0a09abeeed2da4f94adf4cc4dd14837dae58252cc3de2a8d00dd42ff3e11219f2c2701b22","ssdeep":"192:pDvu5/2Pbu1ZWhbat1oee/9X8UnZEHuuwJgbClI+YkFG/uW1eqa93Vw:pTw/4Dt0+IHHu5C","tlshash":"f00232487946b46b3973f0f6218f02ca353a24526ced6854a6e1f8f82d7858d1863fbd","size":8915,"data":"","first_seen":"2023-12-25T14:08:10Z","last_seen":"2026-08-18T13:29:57.662559Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T19:44:54.915572Z","times_seen":509360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e9c0517b4f78e6d66c3b24ca81b80cc","sha1":"55cafaed8e268137f03c7fc3da288bc28dff79f7","sha256":"3f1bca3175646b97edfca40685c0f27c820c44153b00ce18d8373ee08ffe7ff8","sha512":"5b03688f3cbd82dd386759c578507030d3848a8c09e90ebf223cdeb3637371d53e06f2723b81aca5c8172f6a7417b0f6d21f5fa77827aab4fab1a121aa73bbe5","ssdeep":"768:M32eMg2xe6SNyX+HiRXwQyR+w/VNgX1yW5NFOt8o4DGjQ4UB4YwN:MGeMhvXjLyR+UVWvOtkDiECN","tlshash":"86f28d0eac5a38bbdebecbe25bf5178451bc829a054e106d74fa11c31b122d7365b0ec","size":36108,"data":"","first_seen":"2026-08-18T12:48:55.914992Z","last_seen":"2026-08-18T12:48:55.914992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3642abf7f518378c51ea802f53b8a857","sha1":"e4fdaff9056b4daa74d9468693fdf5d8b8f098eb","sha256":"761bc958ae8cee93362bf575f61daa037f570fffc5fbb724f3758fb9a5d6566a","sha512":"9ee1501826b497675dcdb4648d0bd7e9d61e40947c89acced84a21b1aa4404627934c2935d356917465a76aee168f18507bf5671d146db9213ea91fa5643bd1f","ssdeep":"12288:ox7R/MgaiWxK7YHptUiqdVPhQx45jUGqwkU7AC/:U7RM7fxK7YHpsdVPhQ4dUGqwkU79/","tlshash":"75051ad8b10234b19322b2f554ab154d933e966ed84c0c9eb298c8f1bff4c496479eb7","size":823576,"data":"","first_seen":"2026-08-07T07:57:38.118162Z","last_seen":"2026-08-19T19:59:38.034144Z","times_seen":6904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026bft=0dAFcWeA47DCr1R_vSFHxMilNCbDUibKB3Sw_IDuMoic8iJKClVAyX-RJdwmrOwEFkFwpHCP-AHu0uH3tKz7WSHHo5wfokSw4Png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T19:44:54.915572Z","times_seen":509360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026bft=0dAFcWeA47DCr1R_vSFHxMilNCbDUibKB3Sw_IDuMoic8iJKClVAyX-RJdwmrOwEFkFwpHCP-AHu0uH3tKz7WSHHo5wfokSw4Png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"97eb8eb26988f65ce5965495a389073b","sha1":"467ed95311681666b87579f097e2d839556d2fa4","sha256":"d6c88dc23b7865bde1a38f79ff319ba0c0ffd6e3274cf317537b4c6f9676ce91","sha512":"029e214fff26f0a971c2e1a47c3f152d9e1f23cced5096635416591e79435398430575316a34438dccf43a1163d5fe471955dad198e2231aaa03f219da35a45a","ssdeep":"","tlshash":"6dc0126312451ef70d556c690856009b5d8a4c2bd02393f4afc57c89aea1d1a7510ab8","size":191,"data":"","first_seen":"2026-08-18T12:48:55.916335Z","last_seen":"2026-08-18T13:29:57.677523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/5594/js/app.4a47ca8b949305d0.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"01db60d7e2a5ffa2744ebddb430a30e2","sha1":"a5177041cea95f52dac84dbbcb80af12226c9ddf","sha256":"5439163e9eb696e3fd849f7dc4b30f3ae205655b904aada3cf3663b76d441b6a","sha512":"325600bb5609ec2803a7252c2c5c3f2d4327be11781db0a8c4717e4f4168fb3d77fc9530fe211978578311837a2b84382d5d5d0c0648a121d246b298ca99fcca","ssdeep":"192:91Um9ffJ0jI7gYkoUesW0PMnNRmqpGC7xxjyiUzAvZsl+DUZ8:91UwffJ0jCgMUesWVnrFxxyiU0aAUZ8","tlshash":"6f02f7d461ccb07815ee4dd7a2bf67c177342492e4424056203ecc9e17eace2926afde","size":8551,"data":"","first_seen":"2026-08-18T12:48:55.913252Z","last_seen":"2026-08-18T13:29:57.657032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/9693/js/app.104cfc55c9e7bc4e.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d112134e504ff17c896b3e85424eb0c1","sha1":"b733412cafa166ac279ab6fbd2ee8b0ad24318be","sha256":"4d07b0bf102b087e11a54ae8d819d12e890eae2532fa0d616ce4aed38652ed0a","sha512":"f88aecefa17805030e1f8190eb72437db16ca0856f477a8c8539740cfd93a743941dc0691871831c053ea464bb6da5abf6c88eada6cae34e443f6ec1e5de3cfe","ssdeep":"384:xIckGJkiyM4h6yPPVZcjC403qp7TmGPH3:xIckMkihM6yHVKjC403OpH3","tlshash":"de42a7603355acb756ebcba9d4fa66c4b1b178daa1594058733dbc3a1128ccd3230bf6","size":12516,"data":"","first_seen":"2026-08-18T12:48:55.873723Z","last_seen":"2026-08-18T13:29:57.667967Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"0b94386076c7db6aca0cc8073eaf394f","sha1":"955580b57e6a347ca49cc0311f202bf711ec034a","sha256":"05522f5214dd4778f0b725df707fdc607c259bdf942d4884ce4c50ba6616ba5a","sha512":"575ac354ac1da5457b78bd343a9b0ff9b4c6799f1eb4e5cd07649c38eee11a822b0c5b0fd2368d18c05b1f1371764a922568c6542145dca683d5605dfd58d422","ssdeep":"","tlshash":"bcb012733510c41c0c0041a2dd6fa7b8e022a12cfb5080f152a98ff405215738011404","size":102,"data":"","first_seen":"2026-08-07T07:57:38.214983Z","last_seen":"2026-08-19T20:17:42.84711Z","times_seen":5065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee4dd527e17c258581e5d966bdd413d3","sha1":"9f55ec4c43dad6e322e36ca008f3e11ff8f27c9f","sha256":"642bb90e365e81d08cd060368949664d751615c8f2fa97de0afc1f63acd89238","sha512":"3a3218d1efb392380308c2fac510cce71e7ea28111b91335d00d9915cc67196696f7aa91cdadd85a80821a2b045671b684d88b008d23ffd4cfd99ca7783dd3ed","ssdeep":"","tlshash":"bd0124d684e3ca0a413d01a0a75fe238b15285b00d04de52a1d04a9ebcf4aa3e8703d7","size":768,"data":"","first_seen":"2026-08-18T12:48:55.917267Z","last_seen":"2026-08-18T13:29:57.670667Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"824d1c58afa2c4583273d82605032ab6","sha1":"5488fe03ae21db76f578a337d508f28149444f5f","sha256":"18e89c81793b0b3073d3b4497e50274da75417b9df49e76852e4e0f2b0cc42ea","sha512":"5c67c46f5575563771ed667034acce40abe0954373567b5861c1dc0f180b1bb28455516eb5d6a24a40b28aca41b86f74b9810a4bc3195b1aab4a3b8bc9f8dde5","ssdeep":"","tlshash":"b5b0922982274000242ad04c3a1321b118490423673c081e02d1b02164c2cb3c814b58","size":102,"data":"","first_seen":"2026-06-18T09:59:56.82859Z","last_seen":"2026-08-18T13:29:57.671341Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0553ff384c07a743bc4de04c09ae1d08","sha1":"2af2083a44ca29e5e566c704bca4cb182e173897","sha256":"486489c648b0a173d999b02f3259d14caad961f0dc8c6f66175547ee21d2c861","sha512":"bb85e92780dbeb0df24f93573a7c453a423c8b96096d6204644db007e861b5eae2bf0cae36573bd0761f042c3959d45a51502786ccdf8155bc4527a9a4b68268","ssdeep":"","tlshash":"62119c9b1df50030403ba26c9eafa104392644035d0a7d39bccd81455f8c77f1a767d8","size":1109,"data":"","first_seen":"2026-06-18T09:59:56.829669Z","last_seen":"2026-08-18T13:29:57.672333Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"397a8e77b1e6597a1790f6397a524529","sha1":"3749a5df8643f268aa9aaa8363095c19305f4e4b","sha256":"ba9d0147264ce04a1ac289f371cede216251142472c0bd0b791f0d77baee828a","sha512":"4f24585c553f2e561029879fead7bfbf32223c5d29ca949036243376aa6365d16b334e7314b608019f4cf0726ba3c34a32ff891676132ba76985cf21ddd5f226","ssdeep":"","tlshash":"e9f0d319f85269b606f3b235c25fc70e17652406992fbd22600e58e50e7899659d6d0c","size":633,"data":"","first_seen":"2026-06-18T09:59:56.83058Z","last_seen":"2026-08-18T13:29:57.673044Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"088e448b51b54dc3a0ba47a54089ad79","sha1":"107b58bab00925afde388df920d26a89b51f75d7","sha256":"b8c65064569805cf3d94361bb4cf1cbf1dfee48db22161862ea7ea263f8db40e","sha512":"c8a8bf1e138f03ff0781d37442f8665b9eb3f502dfa8b397f0e338cb0064c176ebcf6ca795a9df9393610c17aab4aae3fc16b1fb298630eddd86cf7a77b4773f","ssdeep":"","tlshash":"08d0c24c22a00539916a202c677f7242317324d38c0498007f0c8a841f6425b60e17de","size":287,"data":"","first_seen":"2025-01-19T16:57:29.876205Z","last_seen":"2026-08-18T13:29:57.673799Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0b59d1d045e2771063885f94a6063c8","sha1":"45ca071d0569eb711212bfd45fed9c2f45b69506","sha256":"5823aca2d8d16cb156f5a59f89b6d4ba4e574518a38ee65cfa6574e18c68a048","sha512":"7df2b6cb1cb2610963c3bc53faf2af812f52e408eb9429c0147cbbe9ae1d2d4d1933677ab57aaeed9f47cc8e243df959a141ed9dae9e58dd947330d4f91b4f76","ssdeep":"","tlshash":"5e1154b32a08e0350f7209e1e1fedbb5e052701cf11845e8a516da882e2acc7cd05549","size":976,"data":"","first_seen":"2026-08-12T01:12:10.120998Z","last_seen":"2026-08-19T20:43:18.435303Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/vendors/js/app.3919c7dd82419f30.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"23e7259ac95021ece03951fc1ef3bf4f","sha1":"cd51dfb29681f0464b92029a99cd662b3e0954bd","sha256":"0fd1347bda373a50659c4d19716c4bf0b4a0fcf7dc6afa7203dcea82a6ba7b58","sha512":"fabc7ea01038f3ac4f237afbdd783a124cee844bad9259caf3974d74a11e7dc43cedcd75ca87a73afafd31329d6f242aa11e0aa977d75981d9d0491312b491a7","ssdeep":"49152:tXl2PK2NmXnUdexkhZjFxzWnOcwj28FhLeagaT08xf/iZKmWwtwIM9RUK5HYBaic:YmXnAxf/iZgHYWnEcFj","tlshash":"db956dc53261b0374bd355e6907a0503a33b6895340d846cb62ce8df7ebd998a27bf78","size":1930652,"data":"","first_seen":"2026-08-18T12:48:55.923047Z","last_seen":"2026-08-18T13:29:57.676591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/js/app.88283c26bd3988f3.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cef34ba75f039a3f87b446bf9bd145f0","sha1":"c770c20cdfa3ed8ffb4fa06b2181345e3226708d","sha256":"3030cd49283b5c39d9fb8a6e706e478bc4634f15d7488c4a8c8544475c9b265c","sha512":"99e4a193927e6ae51a90abf885377d2f3947e97f72729bc902888fe65010129321cfa900bfd918ff07c7372b5d9d6a9c0f9797b0b826ff98dcf3f22df33743d1","ssdeep":"192:RZXj27XoyMIQOpxy7ysMIcGsqEZakjQTUp3TQlkPlhe+gTC8:Rx2DoyMPOpxy7ysMIczzHjQQp3slkPlS","tlshash":"723292913264acb1419184cf1aed9342772096a5e005551d7c3fcdfe69ebde120b67f8","size":11587,"data":"","first_seen":"2026-08-18T12:48:55.906465Z","last_seen":"2026-08-18T13:29:57.657586Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abt.s3.yandex.net/expjs/latest/exp.js","fqdn":"abt.s3.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"93.158.134.158","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57153a8b90bf41a3293492eb9b9908d4","sha1":"ea9e83f87b6c3573d5fc78dcbcdd450898ce059c","sha256":"4776acad9d8c3dd1b75354e545027100b932fd8dd104e86cbdd42c16f8794b0e","sha512":"d4394e93115cce1527ba9d0285b44fbc04d4235e764440892f5723a0267d05a7211270a85e3499b7296ad223c1522093cf2a14b1e3918188b5fccdd225027368","ssdeep":"384:w9ABgsEWPrMA4bGp0qbzoi74/SMJJplaevN65:xih2IA4ap0qPr4KhM65","tlshash":"f06229a4336ab07307999065407b1109f27d5db4188e4aa4f226ec9f3d6dd0a87f3fb8","size":14573,"data":"","first_seen":"2025-04-03T19:26:21.626861Z","last_seen":"2026-08-19T18:01:47.800125Z","times_seen":5676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/6978/js/app.bca3d5e22c59fc50.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"892d1414fc009cae809bfbe639c08254","sha1":"33b3c778c137133ca78a411dffb1aa2a6ed4ba66","sha256":"d8940dc9a3adeaffd023e39b6fa15c761c25fab528e34f59c8431b20b07bc41d","sha512":"892f64a5737271392edc68d59e4ec6339baeace5beb771fd9deb3c4f584d0c9ba012b77bed8a3e7f861b7c99e01ca9aa6bc70c58cd66709be0809b8cf4c4ae99","ssdeep":"768:FVsLuL+16cjtTL9CS2lXNgv2YoIbBjLFlpcHJVFqFpoCtAru18bmGVVhw+:Qo+wcjtTLH2lElZTWFqFporzDh","tlshash":"3ae209a9307b927504fd469b627d2351f13224597416482cb83c9cce68bce8a73666ff","size":32361,"data":"","first_seen":"2026-08-18T12:48:55.854183Z","last_seen":"2026-08-18T13:29:57.65351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/logo-small.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.674Z","timestamp":1787057293674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/logo-small.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"724-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b9f63b93ec84117d\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1828,"size_decoded":1336,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdc66f2b64bc5750e4d6d20dc67a7595","sha1":"4dcf3ac2bbb522c8c6ad00364940e0c0e1b0faba","sha256":"35eb1f65006d06d36162247c043b36e5b673a0b75def3f85239d9767dd3a702d","sha512":"c435d7bc77bfd758daa8d10245545dc2fa0b9bd794bf3980e524d17dd77ee3d3ec5cc4127293321110669c289f3b60ea917a24ff1f135fbac07f8294a3481277","ssdeep":"","tlshash":"d03135f7a3ccf2e0a506d3f1da264c2a745735f52b62cd458940ad98eb0502e59acca4","first_seen":"2025-12-25T15:41:24.333411Z","last_seen":"2026-08-18T13:29:57.640874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/yandex-browser-background-mini.jpg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.682Z","timestamp":1787057293682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/yandex-browser-background-mini.jpg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15689\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"3d49-1a014680ed8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2f8bb76cfdd0f013\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15689,"size_decoded":16132,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1424x97, components 3","md5":"07cd0600ed0ae33c6701e16706c194bf","sha1":"528aa04a00a1f2f694238bbe4e617ef3b2132520","sha256":"f3ec273363007860b44e7903d16e9402be25d2767caf146b3d4d98ccb642275b","sha512":"9f8ba498c4ee2c80f89acf18514ea96f057b3c345841d2da2d2a762c36332e81c14306084210d3ee6597ce3d46aee0d960f0dee74bf77c1648c2d4c2652e0d32","ssdeep":"384:YNyqUgC0ZOr+UUxiai1FCr2h1fIbttyj7KFfBf9a8U312Vuf:YNyqUgC95eKh1fIbt0fKFN8eVuf","tlshash":"a862bf1ea6067d30f5d6edfc0ea7c95381115f4a06870ac2b568c9dd38623a3ae2d04a","first_seen":"2026-08-18T12:48:55.813406Z","last_seen":"2026-08-18T13:29:57.637042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/opera-browser-background-mini.jpg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.685Z","timestamp":1787057293685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/opera-browser-background-mini.jpg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23555\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"5c03-1a014680ed8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9fdc421cd32e60f5\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23555,"size_decoded":23998,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1424x96, components 3","md5":"d280d1bb4a7b1dc5dfbe4db483eb8a96","sha1":"c345dfe4a6331f1a139f89cd344ae789b37ec2f9","sha256":"b5cc60c19d6305614904f7150d358f5616378578f2415d5407839e2e26e80e89","sha512":"3b4c75c08fbc93f36ccd2dcf2e7956637da20bcd487ae25f3c1dc460702d70be36d3303da242aad61f8ef4506a688b7e16893748c7619f167c335297405d30db","ssdeep":"384:YuI5+OX70Ag3jDOKut6dsOMsBCTAZYaV9YJCXatSxaElGgmh2cOuCknQItoSSmxH:GZIbvutGskbAnIGB4cOuCknZtoSSmxN5","tlshash":"e2b2df683c877d05eebccc7079efda633fa139139803a841dca490c27b952757292ad8","first_seen":"2026-08-18T12:48:55.817126Z","last_seen":"2026-08-18T13:29:57.663897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/fonts/Inter/Inter-SemiBold.woff2","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.199Z","timestamp":1787057294199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/fonts/Inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 121420\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Mon, 17 Aug 2026 14:26:21 GMT\r\netag: W/\"1da4c-1a0101dc2c8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: bd3707616b0dd891\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":121420,"size_decoded":121911,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121420, version 4.66","md5":"52705bc4b5a181b48451544e9ee11763","sha1":"897c54874d5536153698cc290f8fc13214083ac6","sha256":"d34c203998c3479a6c3649f4457e45f25dd86c4d79ca458379982fc6bdc6b5e0","sha512":"617b3e2a83997135542f7fcf4f2d53b444caec3d3e3b26dff4bf9dd11a3109da8e0cc6fab63027ae9da1e9c5d5e15ffba6135b83e95972d0ac9ac43d3486237b","ssdeep":"3072:vjMeY6WwYqmXosx/PrPpUs5eY3ZtF3Wc0lBDm:9YPDq0Pas5eY3F","tlshash":"a3c312081e6d5931f35d53220aab52ecc5bf4d7079d6a41d2cfb9402866dae18fcbd2c","first_seen":"2025-11-09T12:45:31.68897Z","last_seen":"2026-08-19T02:41:50.882722Z","times_seen":40,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/screen-min.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.215Z","timestamp":1787057294215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/screen-min.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"41164-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a80cf1666dbff547\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266596,"size_decoded":52596,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18bcfdcf0d4222c72b1c3e0448948df0","sha1":"e64d0d42482f1a70c034364403695084872b3175","sha256":"2b641176fdfe92c252afb950e5084b054042677505dec898f7f52c544caa20e2","sha512":"5f9de48062484046e8a52c58521dd82ca58260a832841e20a6c31b67c1b5cccfae789c7962d0e553a957f24f2e2a37914b1de68e4cb6803239dfebf9ac259c33","ssdeep":"3072:07XCS8Ha3TBDVvFkZxACSqGAM/bEGKWREo+Q2J9hDxMKMoz+rtrLV:CRl3","tlshash":"ae4476d6272453dc8dc7e55eaf32d8a4a31e90fab9b7d5c08e9f8b64544bc88f607840","first_seen":"2025-12-25T15:41:24.337469Z","last_seen":"2026-08-18T13:29:57.645815Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.240Z","timestamp":1787057294240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 343725\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 21:09:58 GMT\r\nexpires: Thu, 12 Aug 2027 21:09:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488296\r\nlast-modified: Wed, 05 Aug 2026 02:01:47 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":823576,"size_decoded":344632,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (592)","md5":"3642abf7f518378c51ea802f53b8a857","sha1":"e4fdaff9056b4daa74d9468693fdf5d8b8f098eb","sha256":"761bc958ae8cee93362bf575f61daa037f570fffc5fbb724f3758fb9a5d6566a","sha512":"9ee1501826b497675dcdb4648d0bd7e9d61e40947c89acced84a21b1aa4404627934c2935d356917465a76aee168f18507bf5671d146db9213ea91fa5643bd1f","ssdeep":"12288:ox7R/MgaiWxK7YHptUiqdVPhQx45jUGqwkU7AC/:U7RM7fxK7YHpsdVPhQ4dUGqwkU79/","tlshash":"75051ad8b10234b19322b2f554ab154d933e966ed84c0c9eb298c8f1bff4c496479eb7","first_seen":"2026-08-07T07:57:38.118162Z","last_seen":"2026-08-19T19:59:38.034144Z","times_seen":6904,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":60,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/top-right.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.672Z","timestamp":1787057293672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/top-right.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"2de3-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 71f66388436bed90\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11747,"size_decoded":5237,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6afe78934aa34109ee7f68c60bcb4c9e","sha1":"1681799cc4bdd79b9175cd588f5db8816f9d1304","sha256":"b34551e73c08e77164c36668e257f386e44734ca26d049ca29c5789ccd981efb","sha512":"e7bac1f638ee2ed5dcad5cd8c7f26591f09acf81136015b6c422921413b1c5b41d7ce94abe8fef4aa9c6b9c5d0efdc624590454f17fb773da1c6cee11d679dea","ssdeep":"192:nzILqRWbBqWO+wkxKFxJT6/F9JCx/5iwv1V/9a6kuft2EFyz/IqpGPmifIKaRh:nDREBqh+wzFxJm/Ex/5i+sRitLKRpQDk","tlshash":"9732a6cd33299afcf505e2ff5653202c3c40e8eb7e419465c3b65e1ae8498449daace7","first_seen":"2025-02-12T16:54:43.475259Z","last_seen":"2026-08-18T13:29:57.632101Z","times_seen":130,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/button_close.svg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.681Z","timestamp":1787057293681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/button_close.svg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 399\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"18f-1a014680ed8\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b15d0f2cdb516192\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":399,"size_decoded":865,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6865185f2f958a28a06a1f37e5fd8329","sha1":"e84d60442f02ee500f6ecb4adde7a12cea7b938d","sha256":"1098c54bb39e99b422d1a8c429523aebe511054b4a18bbb2c81a244f49bc511e","sha512":"7b11fc7e82790cb91fdb8544fe3031a9aa6e4bb5267d1a6589d89f8421bf3ca77206994d45180efebab6691570ac831678cd3ae728aee3d169835b1099961039","ssdeep":"","tlshash":"57e02b3fe318972e6c64f754faa44da11674e08000b91150d6e18f404c37371c761d79","first_seen":"2026-08-18T12:48:55.823979Z","last_seen":"2026-08-18T13:29:57.663226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/elements/custom-videoplayer/img/loop.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.272Z","timestamp":1787057294272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/elements/custom-videoplayer/img/loop.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"df-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: c4e3920ead3f4fc2\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":711,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"300697d732e2817ef4378787aae1c9cf","sha1":"bfb293608ef51598ffa8e307dc4c5b6ede27ecb4","sha256":"a296953d16529409c6942003722c40ff6c98f263a7ba0859f20e7acb5a8c92c5","sha512":"002d8b23453bb1bcbb76524e52827b029fd9befd15b5730d9767690042b062d9f08d166e6360e8a36ea77c9599e4496b54ff8fccac4edcfba59a02ec4486be67","ssdeep":"","tlshash":"ced02330c82cf639c60c8b002e90e0be00f611d0c08000eccfb8523d2e1647d9451bec","first_seen":"2025-12-21T12:59:41.877612Z","last_seen":"2026-08-18T13:29:57.664729Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","date":"2026-08-18T12:48:15.166Z","timestamp":1787057295166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Tue, 18 Aug 2026 12:48:15 GMT\r\ndate: Tue, 18 Aug 2026 12:48:15 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0b94386076c7db6aca0cc8073eaf394f","sha1":"955580b57e6a347ca49cc0311f202bf711ec034a","sha256":"05522f5214dd4778f0b725df707fdc607c259bdf942d4884ce4c50ba6616ba5a","sha512":"575ac354ac1da5457b78bd343a9b0ff9b4c6799f1eb4e5cd07649c38eee11a822b0c5b0fd2368d18c05b1f1371764a922568c6542145dca683d5605dfd58d422","ssdeep":"","tlshash":"bcb012733510c41c0c0041a2dd6fa7b8e022a12cfb5080f152a98ff405215738011404","first_seen":"2026-08-07T07:57:38.214983Z","last_seen":"2026-08-19T20:17:42.84711Z","times_seen":5065,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026bft=0dAFcWeA47DCr1R_vSFHxMilNCbDUibKB3Sw_IDuMoic8iJKClVAyX-RJdwmrOwEFkFwpHCP-AHu0uH3tKz7WSHHo5wfokSw4Png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:15.783Z","timestamp":1787057295783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026bft=0dAFcWeA47DCr1R_vSFHxMilNCbDUibKB3Sw_IDuMoic8iJKClVAyX-RJdwmrOwEFkFwpHCP-AHu0uH3tKz7WSHHo5wfokSw4Png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 18 Aug 2026 12:48:15 GMT\r\ncontent-security-policy: script-src 'nonce-4dqH477d8mL2XiIy0DSgtQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":3281,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"c5d2387ddf2a2b3be2ed9e98b1fb94f3","sha1":"dab10e461f0acb2c2b21cd4736a90549f8d7ab47","sha256":"46d1dd2859a2db07b758787785edb12e75e52981a41f5e198399d7b815813a8b","sha512":"4dbabc1089d53c27f7ea9d88de679fd8218fb0fc9c5a24e5f701a2a06f93de947370bfde9a63daa898cc136801fd950d397b4ec9ed3dedd8b3a6b32999d3ef20","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/U:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+N","tlshash":"20720f50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-08-18T12:48:55.82775Z","last_seen":"2026-08-18T12:48:55.82775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/tool/icons/icon-2.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:21.376Z","timestamp":1787057301376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/tool/icons/icon-2.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:21 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"9c5-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b84436610920e765\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2501,"size_decoded":1548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81e20ce8c649bcc6044aa71f7b8de0f5","sha1":"d37070cd91f4c934d3c5800797a53da477554b25","sha256":"cd7feab979ea6833c98c6cfffdc75276c5b37d2b7d93f7000acc6f68fc7c72b2","sha512":"c09ba8ba0fc96ae39c5bd9222a030707e4fc241c1c3319c5c8288460a024913d22a20b4b56e21ecafd88bc37c0c46d75b07f523a2518df7f01e4b3b74d628049","ssdeep":"","tlshash":"39515f5466f8a7f8f200f3f453ebb8742ea69ed63212d42cc7d52c72806214e9d658db","first_seen":"2025-12-25T15:41:24.37433Z","last_seen":"2026-08-18T13:29:57.667307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.665Z","timestamp":1787057293665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 18 Aug 2026 12:48:13 GMT\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":1286,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"a0b59d1d045e2771063885f94a6063c8","sha1":"45ca071d0569eb711212bfd45fed9c2f45b69506","sha256":"5823aca2d8d16cb156f5a59f89b6d4ba4e574518a38ee65cfa6574e18c68a048","sha512":"7df2b6cb1cb2610963c3bc53faf2af812f52e408eb9429c0147cbbe9ae1d2d4d1933677ab57aaeed9f47cc8e243df959a141ed9dae9e58dd947330d4f91b4f76","ssdeep":"","tlshash":"5e1154b32a08e0350f7209e1e1fedbb5e052701cf11845e8a516da882e2acc7cd05549","first_seen":"2026-08-12T01:12:10.120998Z","last_seen":"2026-08-19T20:43:18.435303Z","times_seen":1528,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/yandex-browser-logo.svg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.676Z","timestamp":1787057293676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/yandex-browser-logo.svg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"1679-1a014680ed8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: d2f0b93074118e6d\r\ncache-host: yccdn-mar-14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5753,"size_decoded":2863,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cc1d76620edfdd984be0bdf582bbe6f","sha1":"e19025eaaacfafca726b334e1634d11241a24e03","sha256":"db7819eb7ae8a415ef7b0b4a0f102b1fbad2966f0a66405c3b70e4ece843f200","sha512":"e9f897936075c7b48fbf625ad2faffdb4db9c527ddcc1588ce053fb86de26c659710b5e6c9fd98166a8a8d02d756214e9d4ce1b6de6a9ade33d9e8502142b88d","ssdeep":"96:nnxo9kLVmQuWYRBM8qVEZRQgvbgTZOpHxHI3jHSMz05bRrtYHzLa6hKWyjTqN:nxo9pNHQEZ+tO9xozHv6xtYfaL3TqN","tlshash":"29c11d079300d7aa9ac3d06cde35a0e5361954c6e2fab0dcdaf39b06a44b4f5e634d38","first_seen":"2025-11-20T13:41:34.346501Z","last_seen":"2026-08-18T13:29:57.646938Z","times_seen":91,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/video-btn.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.178Z","timestamp":1787057294178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/video-btn.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 370\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"172-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: c33bbe529d861d73\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":370,"size_decoded":859,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ed0384c64108308e2c40b28cbc0283e","sha1":"938c5765d6377bea62d7f3faf181fd4b0268370b","sha256":"60e079384340a15626a296ccafce998f09bc408fdc89d0987191010b6ea4919e","sha512":"41c9cfedc3aa652e7b96452ac56622838eb37e292c9382c9f2e1dacc50e6dab2fc9c87dbc703e879431ecae5d8f09b2665439a468e5e05153f54ee38e26fff19","ssdeep":"","tlshash":"32e0687f7388d6888214c0d6872d801b7d8d90efcb4d4968c6002905b887ee67c205fd","first_seen":"2025-12-25T15:41:24.363075Z","last_seen":"2026-08-18T13:29:57.643021Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/pic-1.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.208Z","timestamp":1787057294208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/pic-1.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"2eb1-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 7a39a7001509e4b0\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11953,"size_decoded":5021,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4dc5d3724c59f26b6b0cf6ab890aa772","sha1":"55d998959cfd37b87e005bdde6452d37a76b8b6c","sha256":"207f62644df6ae11a9a76ce782722533c7cdabb25db2e906247e3624b92d6b15","sha512":"2e2b5b5acd52dadbcbc1ce68a384d2b2d803488e142a603fa92c1960f703df41bc3a962898e3e754f2663e81565499d45ed366d7bd043b0ae8fed71c41fa3573","ssdeep":"192:H0swcvdKQucgaILAU6mK5EB8tjJEssKExU15VsicZcArGd+ousPNLMb5LF90/oI:RLIaIEwKUYlBsKExU15VZcZN1o9qLS","tlshash":"4a323658b37ea278b144bdec93b09c7c3e161ce31922d47d4ffa1965cb9180e49b58a3","first_seen":"2025-12-25T15:41:24.336592Z","last_seen":"2026-08-18T13:29:57.648622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/elements/custom-videoplayer/img/play3.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.270Z","timestamp":1787057294270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/elements/custom-videoplayer/img/play3.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 174\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"ae-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 614ece406c1485c0\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174,"size_decoded":662,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"4d3c274d8381580a919845038099eeb4","sha1":"743c6844de584bbb1f7ca679ad4f09dcb7b104eb","sha256":"2a91ca5dd3c783e27fa491fdeb1884add469bdbe0c9827a55f82f00cd9da0d08","sha512":"40aefbf801ee08656366ec4f9d71b888afa5c64f3a32a8765ead0d1282213370095bbee1835a3e33772b3268d6d882f2cead043f78ff50db55a69c12d45d1470","ssdeep":"","tlshash":"d8c0c034436ce02d420c87000a50b0180072208281c0005cdbb0247aa5174895b10fdc","first_seen":"2025-12-21T12:59:41.865586Z","last_seen":"2026-08-18T13:29:57.660503Z","times_seen":13,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/tool/icons/icon-1.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.330Z","timestamp":1787057294330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/tool/icons/icon-1.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"6e5-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: d7d8738bced3afca\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1765,"size_decoded":1314,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1a0a05f12fe39dbb1cfbf42ae662087","sha1":"35737084ec75240012049c0169eb6b82a870ed86","sha256":"3432b8e801422fd63f3ce4d5c0b1567ce21761f9bfca4afcf8e5e0b959ff12fa","sha512":"7c30d3ace92c2361710b5abd602c614ec24f44fb90d98dbc0aa52461f9f6580029dd573774bdecb23f6dfcd583e3075f22d50f14bc6637c1491787b0a9827495","ssdeep":"","tlshash":"a3315296a758e280f404effd6447dd343b609dda2e10e86483a04c26b48a15dcdf78eb","first_seen":"2025-12-25T15:41:24.344334Z","last_seen":"2026-08-18T13:29:57.649224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","date":"2026-08-18T12:48:15.035Z","timestamp":1787057295035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 02:29:48 GMT\r\nexpires: Thu, 20 Aug 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 469107\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-19T19:44:54.665898Z","times_seen":711951,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/6978/js/app.bca3d5e22c59fc50.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.654Z","timestamp":1787057293654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /6978/js/app.bca3d5e22c59fc50.js HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:41 GMT\r\netag: W/\"7e69-1a01377ea48\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: dcdc0033c824c65a\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":32361,"size_decoded":10564,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32095), with no line terminators","md5":"892d1414fc009cae809bfbe639c08254","sha1":"33b3c778c137133ca78a411dffb1aa2a6ed4ba66","sha256":"d8940dc9a3adeaffd023e39b6fa15c761c25fab528e34f59c8431b20b07bc41d","sha512":"892f64a5737271392edc68d59e4ec6339baeace5beb771fd9deb3c4f584d0c9ba012b77bed8a3e7f861b7c99e01ca9aa6bc70c58cd66709be0809b8cf4c4ae99","ssdeep":"768:FVsLuL+16cjtTL9CS2lXNgv2YoIbBjLFlpcHJVFqFpoCtAru18bmGVVhw+:Qo+wcjtTLH2lElZTWFqFporzDh","tlshash":"3ae209a9307b927504fd469b627d2351f13224597416482cb83c9cce68bce8a73666ff","first_seen":"2026-08-18T12:48:55.854183Z","last_seen":"2026-08-18T13:29:57.65351Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":34,"connect":28,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.659Z","timestamp":1787057293659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/css/main.814664a0612a1cc0.css HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"103e2-1a014680ed8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 99aae8a4da8487ce\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66530,"size_decoded":13119,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (62673)","md5":"b5d1aa781b437c7e96d9e892386968d7","sha1":"9b880d8dff859526e5d958320b8929b82f70f95a","sha256":"ef3f49fd07305ca256017600d90101007d69f1f2917a056dffe3a87a0604995c","sha512":"4b6400d2d360fa571715a67b3544f57e1a3f9863fd0cf52cf88860aba9b5b580179f352dca7f132ff82606ec06a1e42175baea82aa3d55d74870a5b64d4e8e2d","ssdeep":"1536:1d/Xm2bsm1ctOmrh5rHxr/wEFluwrg1T/Le57DIkC71XCYlX1EjYRaAMf7ItLX/A:X/XLbsm1ctOmrh5rHxr/wpIr","tlshash":"8c53c6b1497c3639b72fd6637981b98ab110c602e5334beee46ae52cc6ce14715f238d","first_seen":"2026-08-18T12:48:55.85661Z","last_seen":"2026-08-18T13:29:57.646379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":29,"connect":27,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/opera-browser-logo.svg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.680Z","timestamp":1787057293680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/opera-browser-logo.svg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"1e48-1a014680ed8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 721933352e13f848\r\ncache-host: yccdn-mar-14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7752,"size_decoded":3729,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c46d0f4b4ab592476e8f8ce67e38e04a","sha1":"9f943cb5eed61c06af42b71f880d28ca3dafe65d","sha256":"1bfd5ad5c7098604902145a4032d53861d34dadc4eb86ddd3a8baea4a461fc75","sha512":"23e36a9213de490fa018b5b01da4dd09d54f2097ba9575feb9090081dd96883a9c00bf53e9354faffe0a3068a407f77632d937ca87175f6ce1c9379529f1b1bc","ssdeep":"192:tJrdCFFoScLtRlRC2m1ouI4MrBoLvZ6Jjoyji:tJrMPqlg770m6y","tlshash":"83f194e5b795a2f0f546f3f1da22f8b97b5734ba3f22c66dc3a54c01791109dda88880","first_seen":"2026-03-08T15:55:26.56739Z","last_seen":"2026-08-18T13:29:57.639226Z","times_seen":16,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.838Z","timestamp":1787057293838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css?family=Montserrat:400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 18 Aug 2026 12:48:13 GMT\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":1341,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba9b02c400b0c4bbe374b3c0867dcbdc","sha1":"53e074fc58e025847cab9e65083ed3d1ab6c94ec","sha256":"fea970f7997b0a11b97e45ceab613c64d5604ec0a004dc902359e6c12e4a55c4","sha512":"428b51528d83cc1ca55b7833dae267dbbc5d820b78452ecbe7ae62288dae0bb03365acdf4701b065316a236ff5aa0ee9f6261547073362e1addfb3a2d1053c87","ssdeep":"192:YRo7TbOmupRS719Ocu6RB7W+OjuTRU7XPOKu8:4Q4ajdfMh","tlshash":"72f1ac91105ba500e6472cc923cf7e26dd4e61627494c579bffe2ca8adeac224325b3d","first_seen":"2025-09-05T22:49:21.328616Z","last_seen":"2026-08-18T13:29:57.64254Z","times_seen":423,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/cursor-2.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.212Z","timestamp":1787057294212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/cursor-2.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 611\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"263-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 1e3bdea054634487\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":611,"size_decoded":1100,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e283445996540c4c85a0f55a55e07078","sha1":"1a35f6c7e414636d0d88457eb181839ad8500e6f","sha256":"16e023294ff5b321439f0968e0acb67a958f3aae1f49add97a21f197fe137509","sha512":"0e4943869a4716fa7dd8c7d14c8af3916844e0c7bdc4c5e3ea74781bb44e5af8c28ab14d8698460a0ffd8eadb69a6621e678f4420e0135c0c9f6ef52aed91044","ssdeep":"","tlshash":"a8f0e76d435465f81711ef318326bd34116a317bf544130544d1f5b0e812adfbc2e8d8","first_seen":"2026-08-18T12:48:55.861523Z","last_seen":"2026-08-18T13:29:57.63867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/fonts/Inter/Inter-Bold.woff2","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.281Z","timestamp":1787057294281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/fonts/Inter/Inter-Bold.woff2 HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 121208\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"1d978-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 726c2bdba81b0244\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121208,"size_decoded":121699,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121208, version 4.66","md5":"7d82663c63d2771ea7e51ae907511dc3","sha1":"0268c6ae2b944e006739f3ecd8affe901f8f5f88","sha256":"a7eafcccc815b85d4dff96c23ef278765cdfe2f203547d6be492323962400fbb","sha512":"c6249c38e2fa116dc29d8d6eed77405b183ed67c76af5557e1cdefb3906748834d64ff3b7c2085c44347909b4cd2bd6b1a55dd4d7c83da1c2e1d2c9bf18f89a5","ssdeep":"3072:okcNgns80bUS7Txb4pzpRf/JXTy1Bv/xL/1YPMRU:okCFhrTxb4p3f9OU","tlshash":"2ec31240384ec6a7033a69718597f829f86bf23a351c1bc5694c9c6b62ec3373d839b5","first_seen":"2025-09-26T17:08:03.673105Z","last_seen":"2026-08-18T13:29:57.665279Z","times_seen":18,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/api/download-settings?uid=adobe-reader","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.321Z","timestamp":1787057294321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /api/download-settings?uid=adobe-reader HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 197\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c5-hSJJ3WdSh5oP5P8C04nTRYvv/Qk\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 6679a31a2cfaa960\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":616,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0ebf4683645da7eac18c5c18f642b8f7","sha1":"852249dd6752879a0fe4ff02d389d3458beffd09","sha256":"a61ddcfa2a8a6612bd7ae5914e497808ccf572e881f1e0090b0bc24494378224","sha512":"c3c5840f732af0ee5ee20e7039de06b0d37eef24b105f53cdc2b1b32e14c23723f7206b8206fc4b3e42494adc8ff50cad3b50997b58e0bf2edc42957b8ec658a","ssdeep":"","tlshash":"e1d0c9001d1c3c9a1584c58682382e8b80398e32a217352ce201032a28eff781309a25","first_seen":"2026-03-02T22:03:12.926544Z","last_seen":"2026-08-18T13:29:57.634991Z","times_seen":11,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","date":"2026-08-18T12:48:14.735Z","timestamp":1787057294735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 343725\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 21:09:58 GMT\r\nexpires: Thu, 12 Aug 2027 21:09:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488296\r\nlast-modified: Wed, 05 Aug 2026 02:01:47 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":823576,"size_decoded":344612,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (592)","md5":"3642abf7f518378c51ea802f53b8a857","sha1":"e4fdaff9056b4daa74d9468693fdf5d8b8f098eb","sha256":"761bc958ae8cee93362bf575f61daa037f570fffc5fbb724f3758fb9a5d6566a","sha512":"9ee1501826b497675dcdb4648d0bd7e9d61e40947c89acced84a21b1aa4404627934c2935d356917465a76aee168f18507bf5671d146db9213ea91fa5643bd1f","ssdeep":"12288:ox7R/MgaiWxK7YHptUiqdVPhQx45jUGqwkU7AC/:U7RM7fxK7YHpsdVPhQ4dUGqwkU79/","tlshash":"75051ad8b10234b19322b2f554ab154d933e966ed84c0c9eb298c8f1bff4c496479eb7","first_seen":"2026-08-07T07:57:38.118162Z","last_seen":"2026-08-19T19:59:38.034144Z","times_seen":6904,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@17.8.8/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.667Z","timestamp":1787057293667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/vanilla-lazyload@17.8.8/dist/lazyload.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 17.8.8\r\nx-jsd-version-type: version\r\netag: W/\"22d3-9iS/MtftFtnSKrCnrvX4El0GoIk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\nage: 1232836\r\nx-served-by: cache-fra-etou8220194-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8915,"size_decoded":3855,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8914)","md5":"4437a0deae2d14e7078a5e366f6ccaae","sha1":"f624bf32d7ed16d9d22ab0a7aef5f8125d06a089","sha256":"e40abf3f23b23cb01de7feab31773f2dbf94074cb0fb0feec8de182b1c69efb3","sha512":"4efaf5658d82ff2c46d93df7d9ea119bdeccbfc8bbb501bc925a68f0a09abeeed2da4f94adf4cc4dd14837dae58252cc3de2a8d00dd42ff3e11219f2c2701b22","ssdeep":"192:pDvu5/2Pbu1ZWhbat1oee/9X8UnZEHuuwJgbClI+YkFG/uW1eqa93Vw:pTw/4Dt0+IHHu5C","tlshash":"f00232487946b46b3973f0f6218f02ca353a24526ced6854a6e1f8f82d7858d1863fbd","first_seen":"2023-12-25T14:08:10Z","last_seen":"2026-08-18T13:29:57.662559Z","times_seen":379,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/devices/windows.avif","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.220Z","timestamp":1787057294220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/devices/windows.avif HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1223\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"4c7-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b94fea21c5dae25c\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1223,"size_decoded":1687,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"798ac5d225ac4c69e2faaae35edc246d","sha1":"087e15b25547d7207d098ae396c0518b0fd00071","sha256":"dbd166078e7f75c3bc37b2997c11b4728bd3ae291178cff812d565cee61a9dfd","sha512":"a9e9d032930682b74a99f64e1bbdbbe4339d9995d14d96e917f7727b0f7a521b65361c29e0c05301a25d395960e52208c9757468e0e1e0ab1db089a38172702c","ssdeep":"","tlshash":"6f21674533643d13d01c51340cdd82413a13653de26b69faa5957534cd35777c63a93c","first_seen":"2025-12-25T15:41:24.342194Z","last_seen":"2026-08-18T13:29:57.654074Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/devices/macos.avif","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.222Z","timestamp":1787057294222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/devices/macos.avif HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1974\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"7b6-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 695c0c0cee0528b3\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1974,"size_decoded":2438,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"384b2b88e6e3cf65f31d3d8d1652968c","sha1":"88cf782bdaa170fe075f442f4eb42a8bee3fd3be","sha256":"223fab4e9cca06707b9be1dbdccbed175cecc4913e543af992b0a7646197297e","sha512":"2df2e4761f131507301e4f6bc929eee00d56e094dac220da983ef2e45381a0a09f7a23d50f108f54209c92e78ba202251770a8ddabbfdca45b9b43c7a733ac0e","ssdeep":"","tlshash":"2a41e84a56b2dd06d82c073da9d80112369a94d9e3134a2324807e6c7b3a7b38a2b932","first_seen":"2025-12-25T15:41:24.346491Z","last_seen":"2026-08-18T13:29:57.643533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","date":"2026-08-18T12:48:14.734Z","timestamp":1787057294734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42353\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 21:09:59 GMT\r\nexpires: Thu, 12 Aug 2027 21:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488295\r\nlast-modified: Wed, 05 Aug 2026 02:01:47 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43200,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9c5ca019aee4d1812ddd91383f7203dd","sha1":"a52642dc6d8f66d1949f64718259784ffec541e7","sha256":"43af01d3969e99dabdcb229f63ac58ab3f4c1ee1ad2e82a5eb47b64dca47f664","sha512":"1e0f176298385bc4da4fe1b9d1070b77b1d7970622698e7a89ef6c7e65fe0ceb897afa85204cc5bc44ad8c2a2f5551753c3e5a180e442346c1aa2c3ef5e1b80f","ssdeep":"1536:97Rpgh9C9ToL9gTNfWNfK4RxTnHZzhXwWx7W1bx7:97ArC9ULiTYNC4RX9Xi","tlshash":"a2837e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-08-07T07:57:38.086928Z","last_seen":"2026-08-19T20:03:35.541065Z","times_seen":5570,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/cursor.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:15.262Z","timestamp":1787057295262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/cursor.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 260\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"104-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 0cda4e74a661ebe3\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":260,"size_decoded":749,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eabd5e0423310e684c611e38cab30a54","sha1":"d43e1dee914b832782f613f2de1ef3927c4dc428","sha256":"7238e8fa47cd46b49b2b83ed3b18fdd05fa1922d600a3b1b28690888c3b70956","sha512":"5989b89a96e6dd4142d0ab550207d3bdb342db5de31e49b829fce20bbaa675b2fc6e3b1aa4ff0f4c164ebea3a078e3841eccb03363e7d7732201f64f1d6f4131","ssdeep":"","tlshash":"f1d0957ad30cd4524020d33075bd9015554b71e15d4d11f4d5416504a8a9ed76d006fc","first_seen":"2025-12-25T15:41:24.370209Z","last_seen":"2026-08-18T13:29:57.669131Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026bft=0dAFcWeA47DCr1R_vSFHxMilNCbDUibKB3Sw_IDuMoic8iJKClVAyX-RJdwmrOwEFkFwpHCP-AHu0uH3tKz7WSHHo5wfokSw4Png","date":"2026-08-18T12:48:15.821Z","timestamp":1787057295821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42353\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 21:09:59 GMT\r\nexpires: Thu, 12 Aug 2027 21:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488296\r\nlast-modified: Wed, 05 Aug 2026 02:01:47 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43200,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9c5ca019aee4d1812ddd91383f7203dd","sha1":"a52642dc6d8f66d1949f64718259784ffec541e7","sha256":"43af01d3969e99dabdcb229f63ac58ab3f4c1ee1ad2e82a5eb47b64dca47f664","sha512":"1e0f176298385bc4da4fe1b9d1070b77b1d7970622698e7a89ef6c7e65fe0ceb897afa85204cc5bc44ad8c2a2f5551753c3e5a180e442346c1aa2c3ef5e1b80f","ssdeep":"1536:97Rpgh9C9ToL9gTNfWNfK4RxTnHZzhXwWx7W1bx7:97ArC9ULiTYNC4RX9Xi","tlshash":"a2837e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-08-07T07:57:38.086928Z","last_seen":"2026-08-19T20:03:35.541065Z","times_seen":5570,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/comment.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:17.377Z","timestamp":1787057297377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/comment.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 449\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"1c1-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5095d1650b3b401a\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":938,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"619367d305f7d967efa3700e607cf216","sha1":"b58c1bc4625362a03b89dd69a9f0bbaea5616322","sha256":"1e71ab64d6af2f34e736323f27291b2dc2793cec12492a7e9c924e1b3408a9b4","sha512":"67ed96ab2844b0ddd56cf8d15acf6e8af52754b6f1dabd264d4c37c52003582ab715115e87243fa4fdb28d649d280d8fef3d335ec0dd4d3d7dd0b510ed10b340","ssdeep":"","tlshash":"77f05c64f509543cd90486157129f5f8149251e143c97008dd732539705d69b68379d8","first_seen":"2025-12-25T15:41:24.357881Z","last_seen":"2026-08-18T13:29:57.652933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/message.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:20.414Z","timestamp":1787057300414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/message.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:20 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"6132-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 1c33d6eb0f23d741\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24882,"size_decoded":9848,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02d266931fa665865ba54d4321021572","sha1":"316ccddd882fcc857bb16cdbefe4582438c0afb1","sha256":"02eec35e572173d16cfd194e4a050d10ffd2178e3d6f5ab6317c32156de4e901","sha512":"3bd44419bb42e00312814e5311eec273c81df41ebfb46800b4480c38b6b4348d42e9fdab3fbaecc5acd4e90b1f7dcf38f9ef2f612e08d114f852a226841a998a","ssdeep":"384:TYsKjRbedlOCudBXMVZCWgzSwyGtbPt0H11Jhqg/phqXp2uqh+0:csKYICujgZCWgUPDn","tlshash":"99b250eeab981cf0d88ad3e6f71056ad7153a17f695acf14c25d9b683e5293cc408c82","first_seen":"2025-12-25T15:41:24.338757Z","last_seen":"2026-08-18T13:29:57.655585Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:47:52.061Z","timestamp":1787057272061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 39\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform-Version\r\nlocation: /?os=win10\r\nvary: Accept, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 96f12e0ec4614c58\r\ncache-host: yccdn-mar-14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":42441,"timings":{"blocked":-1,"dns":21175,"connect":21190,"send":0,"wait":44,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/9693/js/app.104cfc55c9e7bc4e.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.657Z","timestamp":1787057293657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /9693/js/app.104cfc55c9e7bc4e.js HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:41 GMT\r\netag: W/\"30e4-1a01377ea48\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 8620e4e1bbf33d67\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12516,"size_decoded":4128,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12336), with no line terminators","md5":"d112134e504ff17c896b3e85424eb0c1","sha1":"b733412cafa166ac279ab6fbd2ee8b0ad24318be","sha256":"4d07b0bf102b087e11a54ae8d819d12e890eae2532fa0d616ce4aed38652ed0a","sha512":"f88aecefa17805030e1f8190eb72437db16ca0856f477a8c8539740cfd93a743941dc0691871831c053ea464bb6da5abf6c88eada6cae34e443f6ec1e5de3cfe","ssdeep":"384:xIckGJkiyM4h6yPPVZcjC403qp7TmGPH3:xIckMkihM6yHVKjC403OpH3","tlshash":"de42a7603355acb756ebcba9d4fa66c4b1b178daa1594058733dbc3a1128ccd3230bf6","first_seen":"2026-08-18T12:48:55.873723Z","last_seen":"2026-08-18T13:29:57.667967Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":31,"connect":36,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/fonts/Inter/Inter-Regular.woff2","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.200Z","timestamp":1787057294200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/fonts/Inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118444\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Mon, 17 Aug 2026 14:26:21 GMT\r\netag: W/\"1ceac-1a0101dc2c8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b458f7f52694dce4\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118444,"size_decoded":118935,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118444, version 4.66","md5":"9d8b2ad83c6b668cafea20eb0a72e1ee","sha1":"4e1a3763a4db093a5327b27b3cdbbcafa4ef44db","sha256":"7971a599ec17cbf7fd55f26043d2d161a72a7c8a3b53951310584cc93f7c1b0d","sha512":"94f9b46b935068ad5c7c122e9dcfb929dd3532b7045475b914d01f14b2dfa389787cc0a5b3ada0225c4773bed3713ab14b3e010e37c3d098d25385780da6bc4d","ssdeep":"3072:bIQ6ak6UBhjVYaiNx8IutjbrhD9mBSJvxhYOJFwfUL:bAa1U3VEwptdDrZqOJFwfq","tlshash":"f9c312becc4b941ff163ac752dea456361e94034a84edb15dc869e8ab98f0cabc51c70","first_seen":"2025-09-24T10:08:06.644239Z","last_seen":"2026-08-18T13:29:57.64747Z","times_seen":27,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/logo.avif","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.203Z","timestamp":1787057294203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/logo.avif HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1932\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"78c-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 87e436e317e7c607\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1932,"size_decoded":2396,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6a1e23cc4b39b0b442ea397e571a20a5","sha1":"16d1d542b799dbf7d9ee70991da9be9464f0d9c5","sha256":"5013569bdf5164e65907f027308edf9691e6570a9d6b024f942b7632e32c39da","sha512":"8fdc54b32bae425533c6dc5babc6d42afcfd5fca8cc5391863614dff6e23491cce7be58d7939863025d8d0450c3e7b28d0079e2efa65642b07f3ca29869d71f8","ssdeep":"","tlshash":"e24109e806227605c453107cce7fd74b1231e878a000a7a2d2833115eeab47dca6e9cd","first_seen":"2025-12-25T15:41:24.33431Z","last_seen":"2026-08-18T13:29:57.651252Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/event","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.320Z","timestamp":1787057294320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pdfacro.com/?os=win10\r\nContent-type: application/json\r\nContent-Length: 62\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":62,"data":"{\"eventType\":\"view\",\"uid\":\"adobe-reader\",\"route\":\"/\",\"utm\":{}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2821d8cbc79ff0a6\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":412,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-19T19:44:52.226033Z","times_seen":367063,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/tool/slide-2.avif","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:21.262Z","timestamp":1787057301262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/tool/slide-2.avif HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 19881\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"4da9-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 687d663f62910750\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19881,"size_decoded":20347,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b84be595cfea17a585911bede1f948a2","sha1":"a05c89c9d75ef9b190cd06ca8bebfefd10d33cd3","sha256":"6e83a897082f3fe5663a0659efb926858b54308c29babb9a8b1505f5234b4834","sha512":"fa9eebbf0f70c076f05f76b0e65128839b058c85d340f56355acb776bb86297096574756288d5d3b2ebc46d78002765ca567fa2d3153d2deb04a0e6cf6b18a4e","ssdeep":"384:rACJ2PGtvuyxsMNQEz/QirT54AhIgOgyuJxK1fhDtrLa+/s:0pPGYy+MNsyT54AhSMEpJ/Y","tlshash":"cf92c02d1132ebc3c506223ab17957413a4b866325ea722667f8bd3df3642b18dd391b","first_seen":"2025-12-25T15:41:24.351981Z","last_seen":"2026-08-18T13:29:57.670105Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/elements/custom-videoplayer/img/enlarge.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.273Z","timestamp":1787057294273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/elements/custom-videoplayer/img/enlarge.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 334\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"14e-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 77fe47aed8db7035\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":334,"size_decoded":823,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"172276e466150e7e6da829fe0f87c2e9","sha1":"fd4b79f7b3456786aaf2384d68d1c0fb9a9dddcf","sha256":"0d17ffbb198177b8b790db9b415d9d4887b2e692738fddb0608b332fd120864d","sha512":"b5458cb52b9ff6dd623b305bb93a70d1e3de5d199ca6a8c074e4ccb48154605eab350ff564fbe3e9735a8dc859a179e5c2210aa448bce4a5b506db00f470cadc","ssdeep":"","tlshash":"38e08631496cb25d9d5c47d82fab10b6807320c59658008debb86fa65901c9769aaadc","first_seen":"2025-12-21T12:59:41.85575Z","last_seen":"2026-08-18T13:29:57.659264Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/yandex-browser-background.jpg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.675Z","timestamp":1787057293675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/yandex-browser-background.jpg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 136130\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"213c2-1a014680ed8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2db356388b2c05b3\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":136130,"size_decoded":136575,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x615, components 3","md5":"b150868c2bc31450e535ceb95222190b","sha1":"aad200447accda9717899999a4e7557553fc523b","sha256":"b14bafea726145f905cbb7c4e3d32ebd80872d51fe5e74d59043b7b43fc23eea","sha512":"1cdd7a3b5ce6710fa113aed141f166760be7360341c28a4fb489b316f7bb868bc6811814f80697099184f25902f2fdfa067998916659ccdc0b185aa895d0e099","ssdeep":"3072:LTAXTPIhB8PMp0knC6eCatj3s8zjxIAgTwf8B6tEV1o0Lsx:LEjPkBzp5ultjc8z9uwf8ku15C","tlshash":"27d3f078fbd3cb86075f154e867e7c7b1ba552e400e90e63021b9e2ea651f31a84713c","first_seen":"2025-11-20T13:41:34.340717Z","last_seen":"2026-08-18T13:29:57.628699Z","times_seen":92,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/fonts/Inter/Inter-Medium.woff2","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.198Z","timestamp":1787057294198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/fonts/Inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 120684\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Mon, 17 Aug 2026 14:26:21 GMT\r\netag: W/\"1d76c-1a0101dc2c8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 02d7d6719e5a5390\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":120684,"size_decoded":121175,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 120684, version 4.66","md5":"ebb253162e51e31f19db1717b3e55611","sha1":"95aab4b8db6429f3d1c02da4c26e85b9a5a1504c","sha256":"667458f38b9c655d672bfdbe5c3f62d42d7f63aa286f9cdc625cd82a0cc47731","sha512":"bb5da79f3c1e90de4df9e8222a18f619afd1f42b0e997283dd7ea90ad23a6e17b1c7bde456eabc10060d2463cd71bf979927ad08060c59c1e5257e72221df260","ssdeep":"3072:u7x3bpl21evMD9FxyBjFiVhFVHVBMs+YPclGoIoM6r:u79H21eeFxdhs7IoD","tlshash":"52c312b65326e11ce37f990b0d9a01f652e9f62638d23100c75a8fa839b7de454e7b0d","first_seen":"2025-09-24T10:08:06.664756Z","last_seen":"2026-08-18T13:29:57.629984Z","times_seen":26,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abt.s3.yandex.net/expjs/latest/exp.js","fqdn":"abt.s3.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"93.158.134.158","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.232Z","timestamp":1787057294232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.even.games.s3.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 10:58:11 GMT","end":"Sun, 30 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"83:0B:9D:3F:85:68:6D:E3:C1:D4:83:12:C4:0D:EC:6C:1A:DA:7A:8E","sha256":"BA:5C:9C:0E:2B:B7:A6:C2:CE:FE:77:F3:C2:83:79:FC:11:9E:40:79:1E:EC:4B:2A:4F:56:4A:03:2C:DD:1E:3C"}}},"request":{"raw":"GET /expjs/latest/exp.js HTTP/1.1\r\nHost: abt.s3.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"57153a8b90bf41a3293492eb9b9908d4\"\r\nlast-modified: Mon, 13 Apr 2026 20:48:38 GMT\r\nx-amz-request-id: 70a0e04e22e90673\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=KLG\"}]}\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14573,"size_decoded":6744,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11724)","md5":"57153a8b90bf41a3293492eb9b9908d4","sha1":"ea9e83f87b6c3573d5fc78dcbcdd450898ce059c","sha256":"4776acad9d8c3dd1b75354e545027100b932fd8dd104e86cbdd42c16f8794b0e","sha512":"d4394e93115cce1527ba9d0285b44fbc04d4235e764440892f5723a0267d05a7211270a85e3499b7296ad223c1522093cf2a14b1e3918188b5fccdd225027368","ssdeep":"384:w9ABgsEWPrMA4bGp0qbzoi74/SMJJplaevN65:xih2IA4ap0qPr4KhM65","tlshash":"f06229a4336ab07307999065407b1109f27d5db4188e4aa4f226ec9f3d6dd0a87f3fb8","first_seen":"2025-04-03T19:26:21.626861Z","last_seen":"2026-08-19T18:01:47.800125Z","times_seen":5676,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":4,"connect":46,"send":0,"wait":55,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/common/elements/custom-videoplayer/img/volume-medium.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.271Z","timestamp":1787057294271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /common/elements/custom-videoplayer/img/volume-medium.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/adobe-reader/css/main.814664a0612a1cc0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 925\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"39d-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5a07eb8a6e5b576d\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":925,"size_decoded":1414,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (514)","md5":"6b5e37b336f919f7d926f8cf923a7230","sha1":"29c78136e787a03e98a2b4056a453e9319ee787a","sha256":"c27b2e0f7adb2d85fd2dd1eeaf9d1330edea87b1caed6c1eb17d6c9cc29f1bf9","sha512":"d5a92106b72024b744662e5459eaaff797ef033c0aaac1317bd1d57be31fe34468fdedd666f5f61c05015279c72c9391369edcc0efe1f03cd87518ea3347b62f","ssdeep":"","tlshash":"27113ade8374e0943b58da05ef360c6b3805f0e16f54e501a119fe9624e2ff5b119655","first_seen":"2025-12-21T12:59:41.872643Z","last_seen":"2026-08-18T13:29:57.651832Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/favicon.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.318Z","timestamp":1787057294318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/favicon.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"724-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 09e9f7e1a15bf446\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1828,"size_decoded":1336,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdc66f2b64bc5750e4d6d20dc67a7595","sha1":"4dcf3ac2bbb522c8c6ad00364940e0c0e1b0faba","sha256":"35eb1f65006d06d36162247c043b36e5b673a0b75def3f85239d9767dd3a702d","sha512":"c435d7bc77bfd758daa8d10245545dc2fa0b9bd794bf3980e524d17dd77ee3d3ec5cc4127293321110669c289f3b60ea917a24ff1f135fbac07f8294a3481277","ssdeep":"","tlshash":"d03135f7a3ccf2e0a506d3f1da264c2a745735f52b62cd458940ad98eb0502e59acca4","first_seen":"2025-12-25T15:41:24.333411Z","last_seen":"2026-08-18T13:29:57.640874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uaas.yandex.ru/v1/exps/?client_id=metrika.98028480\u0026url=https%3A%2F%2Fpdfacro.com%2F%3Fos%3Dwin10\u0026i=\u0026duid=\u0026client_features=%7B%7D","fqdn":"uaas.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"213.180.204.98","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.505Z","timestamp":1787057294505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uaas.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 28 Mar 2026 21:11:16 GMT","end":"Sat, 26 Sep 2026 20:59:59 GMT"},"fingerprint":{"sha1":"CD:EC:AA:25:9A:83:99:CD:FD:4B:66:D6:CB:3B:D7:E0:33:9B:5E:20","sha256":"96:AE:35:1B:5E:EE:F4:72:6F:DB:0F:60:91:6A:22:95:41:C2:0A:94:98:78:D4:2A:D3:75:30:32:F4:8D:76:BF"}}},"request":{"raw":"GET /v1/exps/?client_id=metrika.98028480\u0026url=https%3A%2F%2Fpdfacro.com%2F%3Fos%3Dwin10\u0026i=\u0026duid=\u0026client_features=%7B%7D HTTP/1.1\r\nHost: uaas.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Ok\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nSet-Cookie: _yasc=axQUTmRMuFfqeWSGVY+XrYPC3CvUvbhTuX5rYvx3OtmPHaFcYbDiO4Ayb8cBkH8FPKe7KQ==; domain=.yandex.ru; path=/; expires=Fri, 15 Aug 2036 12:48:14 GMT; SameSite=None; Secure\ni=M4aMURpl9uv5EFfY1erAQMAiSv4QpajAcK/GYCStRrq8unehqx8gM85roTo1Be3IEDCTVuAyMCyLEuiIAl43V3Bvr7c=; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7277881711787057294; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=4418228251787057294; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Aug 2027 12:48:14 GMT; SameSite=None; Secure; HttpOnly; Partitioned\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":[{"name":"_yasc","value":"axQUTmRMuFfqeWSGVY+XrYPC3CvUvbhTuX5rYvx3OtmPHaFcYbDiO4Ayb8cBkH8FPKe7KQ==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2036-08-15T12:48:14Z","raw_expires":"Fri, 15 Aug 2036 12:48:14 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"_yasc=axQUTmRMuFfqeWSGVY+XrYPC3CvUvbhTuX5rYvx3OtmPHaFcYbDiO4Ayb8cBkH8FPKe7KQ==; domain=.yandex.ru; path=/; expires=Fri, 15 Aug 2036 12:48:14 GMT; SameSite=None; Secure"},{"name":"i","value":"M4aMURpl9uv5EFfY1erAQMAiSv4QpajAcK/GYCStRrq8unehqx8gM85roTo1Be3IEDCTVuAyMCyLEuiIAl43V3Bvr7c=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-08-17T12:48:14Z","raw_expires":"Thu, 17-Aug-2028 12:48:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=M4aMURpl9uv5EFfY1erAQMAiSv4QpajAcK/GYCStRrq8unehqx8gM85roTo1Be3IEDCTVuAyMCyLEuiIAl43V3Bvr7c=; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"7277881711787057294","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-08-17T12:48:14Z","raw_expires":"Thu, 17-Aug-2028 12:48:14 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=7277881711787057294; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None"},{"name":"yashr","value":"4418228251787057294","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-08-18T12:48:14Z","raw_expires":"Wed, 18 Aug 2027 12:48:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"yashr=4418228251787057294; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Aug 2027 12:48:14 GMT; SameSite=None; Secure; HttpOnly; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":333,"size_decoded":1088,"mime_type":"application/json","magic":"JSON text data","md5":"0d30047898bc4642ede383af90dd6423","sha1":"f19d2f752ea91ee61bd8f6cfb25c6654e2b88618","sha256":"c834e2eb06b2b887f171a4fc2eeb4175e53643140aa4822043f40a89814b7fc8","sha512":"cfb651c6530f5ceb70777515ea0122b3119cd5932450e163a075e16df78d4d71640d5ce7146a40ac251827dbc8691cc9b8736205dbeb9aced184308876ad304e","ssdeep":"","tlshash":"02e07dcc8b37ced943538f5464bfec235f2610992b8075479561a49df7d0757026123b","first_seen":"2026-08-18T12:48:55.888217Z","last_seen":"2026-08-18T12:48:55.888217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":1,"connect":56,"send":0,"wait":65,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/opera-browser-background.jpg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.679Z","timestamp":1787057293679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/opera-browser-background.jpg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62638\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"f4ae-1a014680ed8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 10872f495e5a671c\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62638,"size_decoded":63081,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 260x520, components 3","md5":"46768af75de9d497f23281a5b778f6e7","sha1":"8622be56e2b92a644d981e17521a6f3b275fba6e","sha256":"08100a7ee5a5b3182378793ea5dd216f86aa0f9dc66dd517584d87b0d3b5247d","sha512":"af7234eb0fdca3f387c14603cefeecd6845eff50e673790cc3ff51fffef31b15e2f9883c133ecfe0a3be8be80e1c7b6f00a50cb8f3fa09aeb8085510dc93fc2f","ssdeep":"1536:wf3G91K/bS0vbpIaDSb0soilFXetNv1acZpk8:NK/G2pI0E0sJrX2NdhL","tlshash":"ea53f1d5c2471ae256690ebde1c83b9a5460f6aefc6440d5c990c82fce70887b563d8e","first_seen":"2026-03-08T15:55:26.510915Z","last_seen":"2026-08-18T13:29:57.647967Z","times_seen":16,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.837Z","timestamp":1787057293837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css?family=Inter:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oslo.pdfacro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 18 Aug 2026 12:48:14 GMT\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":2046,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a34f88f00b3b275162b90a5f4166b99c","sha1":"30522f09ae080dbc76f3ad81bbdf542fd8303a56","sha256":"e5e5f92d1543747b23c1658baa72b3bc102fc849e87012e0c8ef182510108940","sha512":"331de80f1de982f363d9777510073861e5337db94b413b26cf0d5038d0fbc3ffc97a9fd031e1f7dd665d5a07368175e4baa1eaf973ed48e0d4e73b3e043c5954","ssdeep":"384:v3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6f01QgTg6NA:/P1AwsHsSXokZIj","tlshash":"8723cd92002be500aa931dc233cf7e3aadce10a97486d5b95ffd0cc96cdad27526875d","first_seen":"2025-09-11T17:19:41.547996Z","last_seen":"2026-08-19T19:21:59.82771Z","times_seen":4837,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":35,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/square-close.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.686Z","timestamp":1787057293686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/square-close.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"c5-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b2a469dd897d4279\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":197,"size_decoded":685,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2ece9d54ceacea289ee4d8eebb16895","sha1":"a9b1d3f24236101aaf600f94909ae9577a478f7b","sha256":"c4fc4fd531a7d86683796c8a9164c00cdeadd3249481fd788b7f129938eb754e","sha512":"9877353a45ac4cf3f77fa05bd3c9944a8dc8b9b0b871a1cc08c5b2c285c9dcfa4ec4f69cdbe1f1c29c3f98cf7970076810ef8fdb05a4b6eaa7de4b1e354b8b91","ssdeep":"","tlshash":"49d0223e12084818f3268310d338722422ffb0634ac9208dfe4823306024fabacb32ec","first_seen":"2025-04-11T10:55:49.94321Z","last_seen":"2026-08-18T13:29:57.668486Z","times_seen":130,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/macbook.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.218Z","timestamp":1787057294218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/macbook.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"cba-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 8b1a960087f95f64\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3258,"size_decoded":1592,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2241dad7c00907f114668076bb06759","sha1":"b4274e6aea4caf51b347eb2fd9bb694d33d3ed81","sha256":"ed6ca659273d99b0ecbf3df23b35d1b2110a39b6068d1e4c7dc3b45e8292dfa8","sha512":"ca3030c26d82f2820f4d55f1682e4ae3a41695afab9061e59b0ad0c7d305a03735ea3785aac63d18f5013ff3d3290442f859937d5a884f27591f9b963beb2969","ssdeep":"","tlshash":"3361426db256f53a50c9c36cee58e022627ac1fac844c250c0f9ff1b28995da2e4e6c1","first_seen":"2025-12-25T15:41:24.368642Z","last_seen":"2026-08-18T13:29:57.630697Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/devices/android.png","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.225Z","timestamp":1787057294225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/devices/android.png HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 967\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"3c7-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: be3535c78363fecf\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":967,"size_decoded":1429,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"516b22dd9b826432f4be6939e3e54e50","sha1":"eb667b541c523ea71d879fe79ba69a1eef8969ed","sha256":"bd73ccf51cc13fedba0afc4ac42a25360afb276d75a5a3379a64d7d24e628404","sha512":"e9f276bf828e73383000d1cc6f983d62b2c4ec6473e64cc0109fd1103a66efdf2c665f11d24c663867ade71ace559246fd62bad4bd7fe71445afa5cbd42ace73","ssdeep":"","tlshash":"8611948206088c79bb0b4a478e7154cb622a2ff540d4d52a9460bab82f35be843b1191","first_seen":"2025-12-25T15:41:24.356963Z","last_seen":"2026-08-18T13:29:57.64415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uaas.yandex.ru/v1/exps/?client_id=metrika.72596836\u0026url=https%3A%2F%2Fpdfacro.com%2F%3Fos%3Dwin10\u0026i=\u0026duid=\u0026client_features=%7B%7D","fqdn":"uaas.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"213.180.204.98","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.504Z","timestamp":1787057294504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uaas.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 28 Mar 2026 21:11:16 GMT","end":"Sat, 26 Sep 2026 20:59:59 GMT"},"fingerprint":{"sha1":"CD:EC:AA:25:9A:83:99:CD:FD:4B:66:D6:CB:3B:D7:E0:33:9B:5E:20","sha256":"96:AE:35:1B:5E:EE:F4:72:6F:DB:0F:60:91:6A:22:95:41:C2:0A:94:98:78:D4:2A:D3:75:30:32:F4:8D:76:BF"}}},"request":{"raw":"GET /v1/exps/?client_id=metrika.72596836\u0026url=https%3A%2F%2Fpdfacro.com%2F%3Fos%3Dwin10\u0026i=\u0026duid=\u0026client_features=%7B%7D HTTP/1.1\r\nHost: uaas.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://pdfacro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Ok\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nSet-Cookie: _yasc=iOPjktjMs3diTx3AoZQeTiEc72gRRHII/cGplrb2j7n37HiVNh1iMkWDJ4kVURVID7MyesA=; domain=.yandex.ru; path=/; expires=Fri, 15 Aug 2036 12:48:14 GMT; SameSite=None; Secure\ni=V2BfPkJ1jBJC5y2tIREjK71u+y6j6jdNwlbs1ZHVuwlMMOwG3mpZMaadxQBbxKRArDWGdLELTz9kx5qiYdz8s10Fa/c=; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8671863591787057294; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=9567298351787057294; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Aug 2027 12:48:14 GMT; SameSite=None; Secure; HttpOnly; Partitioned\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"_yasc","value":"iOPjktjMs3diTx3AoZQeTiEc72gRRHII/cGplrb2j7n37HiVNh1iMkWDJ4kVURVID7MyesA=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2036-08-15T12:48:14Z","raw_expires":"Fri, 15 Aug 2036 12:48:14 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"_yasc=iOPjktjMs3diTx3AoZQeTiEc72gRRHII/cGplrb2j7n37HiVNh1iMkWDJ4kVURVID7MyesA=; domain=.yandex.ru; path=/; expires=Fri, 15 Aug 2036 12:48:14 GMT; SameSite=None; Secure"},{"name":"i","value":"V2BfPkJ1jBJC5y2tIREjK71u+y6j6jdNwlbs1ZHVuwlMMOwG3mpZMaadxQBbxKRArDWGdLELTz9kx5qiYdz8s10Fa/c=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-08-17T12:48:14Z","raw_expires":"Thu, 17-Aug-2028 12:48:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=V2BfPkJ1jBJC5y2tIREjK71u+y6j6jdNwlbs1ZHVuwlMMOwG3mpZMaadxQBbxKRArDWGdLELTz9kx5qiYdz8s10Fa/c=; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"8671863591787057294","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-08-17T12:48:14Z","raw_expires":"Thu, 17-Aug-2028 12:48:14 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=8671863591787057294; Expires=Thu, 17-Aug-2028 12:48:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None"},{"name":"yashr","value":"9567298351787057294","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-08-18T12:48:14Z","raw_expires":"Wed, 18 Aug 2027 12:48:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"yashr=9567298351787057294; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Aug 2027 12:48:14 GMT; SameSite=None; Secure; HttpOnly; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":173,"size_decoded":953,"mime_type":"application/json","magic":"JSON text data","md5":"b0fd9db5bec62aac3234029f0a6ba975","sha1":"a83d7190bd48599285325e0095b235337d8e4680","sha256":"2c3c39f1af96f3e6fdb71dd79725a50c51491c03a69507623bd15bf9655cfc7f","sha512":"5d0e403d9826381932db76656021884ff1c71d1fba78e77995353b80d5bf6bab364a448c31caeecb15373df5fe5feb74631d5e41cfdfc279170df6bc8139f74a","ssdeep":"","tlshash":"59c0c0c1f466044020c9430006ec3d2d4cc43c912580381838ea000c06209300b41296","first_seen":"2026-08-18T12:48:55.894687Z","last_seen":"2026-08-18T12:48:55.894687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":37,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.625Z","timestamp":1787057294625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-security-policy: script-src 'nonce-KKFT4y1qaDddDHJ8Bz_PmA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54530,"size_decoded":29378,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36114)","md5":"555ab50ff856c20ad359906433fb3998","sha1":"291b5006f3e33c75a78edcb08bf8b2de5eade5cc","sha256":"07b58b7882eea3d2aa05ba34c14a0a6c50f499948c4412bfeeeb2c5529400c41","sha512":"64d0fb0fa27f24afedd0ce0238fd2defa51e6850d1393cebf61c461ae517c955cd8431bfd61b96d5f3b649658dca79808e87d61b89f9eb42350161f8e3cbcccc","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/Ao9432eMg2xe6SNyX+HiRXwQyR+w/Vq:y+krw4GeMhvXjLyR+UVWvOtkDiEC0","tlshash":"14337d0408172441df9b8ee223dd2f30fe6e8241214690b5b7fe5797af87dd7626a29c","first_seen":"2026-08-18T12:48:55.895727Z","last_seen":"2026-08-18T12:48:55.895727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026co=aHR0cHM6Ly9wZGZhY3JvLmNvbTo0NDM.\u0026hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j3tlzxexpj6b","date":"2026-08-18T12:48:15.079Z","timestamp":1787057295079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 02:17:07 GMT\r\nexpires: Fri, 13 Aug 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469868\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-19T19:44:54.744407Z","times_seen":969931,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":3,"dns":2,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy\u0026k=6LfjwngtAAAAAMKfX56WiBMjbsklFCHK9VE6M9Dk\u0026bft=0dAFcWeA47DCr1R_vSFHxMilNCbDUibKB3Sw_IDuMoic8iJKClVAyX-RJdwmrOwEFkFwpHCP-AHu0uH3tKz7WSHHo5wfokSw4Png","date":"2026-08-18T12:48:15.822Z","timestamp":1787057295822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 343725\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 21:09:58 GMT\r\nexpires: Thu, 12 Aug 2027 21:09:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488297\r\nlast-modified: Wed, 05 Aug 2026 02:01:47 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":823576,"size_decoded":344612,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (592)","md5":"3642abf7f518378c51ea802f53b8a857","sha1":"e4fdaff9056b4daa74d9468693fdf5d8b8f098eb","sha256":"761bc958ae8cee93362bf575f61daa037f570fffc5fbb724f3758fb9a5d6566a","sha512":"9ee1501826b497675dcdb4648d0bd7e9d61e40947c89acced84a21b1aa4404627934c2935d356917465a76aee168f18507bf5671d146db9213ea91fa5643bd1f","ssdeep":"12288:ox7R/MgaiWxK7YHptUiqdVPhQx45jUGqwkU7AC/:U7RM7fxK7YHpsdVPhQ4dUGqwkU79/","tlshash":"75051ad8b10234b19322b2f554ab154d933e966ed84c0c9eb298c8f1bff4c496479eb7","first_seen":"2026-08-07T07:57:38.118162Z","last_seen":"2026-08-19T19:59:38.034144Z","times_seen":6904,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=XOqlk8PL_yVx6IdpLbpXdiLy","date":"2026-08-18T12:48:15.206Z","timestamp":1787057295206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /recaptcha/releases/XOqlk8PL_yVx6IdpLbpXdiLy/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 343725\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 21:09:58 GMT\r\nexpires: Thu, 12 Aug 2027 21:09:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488297\r\nlast-modified: Wed, 05 Aug 2026 02:01:47 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":823576,"size_decoded":344612,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (592)","md5":"3642abf7f518378c51ea802f53b8a857","sha1":"e4fdaff9056b4daa74d9468693fdf5d8b8f098eb","sha256":"761bc958ae8cee93362bf575f61daa037f570fffc5fbb724f3758fb9a5d6566a","sha512":"9ee1501826b497675dcdb4648d0bd7e9d61e40947c89acced84a21b1aa4404627934c2935d356917465a76aee168f18507bf5671d146db9213ea91fa5643bd1f","ssdeep":"12288:ox7R/MgaiWxK7YHptUiqdVPhQx45jUGqwkU7AC/:U7RM7fxK7YHpsdVPhQ4dUGqwkU79/","tlshash":"75051ad8b10234b19322b2f554ab154d933e966ed84c0c9eb298c8f1bff4c496479eb7","first_seen":"2026-08-07T07:57:38.118162Z","last_seen":"2026-08-19T19:59:38.034144Z","times_seen":6904,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/blue-icon.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:17.375Z","timestamp":1787057297375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/blue-icon.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:17 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"41b-1a01377e660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 758e7784c7b8c850\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1051,"size_decoded":1027,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d6c54359c8b926372dae1a3a09f51f6","sha1":"7bebe18bb24048d7969df18d46694ff4b308cf7e","sha256":"0421954572b2681e07580da9435ac4256776e3b3e2c54b5163bef364ec728546","sha512":"a9adb8e31456156093a497f77b0fcb57edb63d0c34d5cc2cbbc7fc15256128ecf1adec38111ad9f007c46391acf3f9956392264f9cb6ca7034e6c0658fe27e1f","ssdeep":"","tlshash":"c3111fd033acf365e3080b80c70ab424946970f1aa898f0cb7453b16bc2c89f8cae5c5","first_seen":"2025-12-25T15:41:24.376975Z","last_seen":"2026-08-18T13:29:57.638116Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/devices/ios.avif","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.223Z","timestamp":1787057294223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/devices/ios.avif HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2918\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"b66-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b770bc429ca90f44\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2918,"size_decoded":3382,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b1f66a3f831e27af804a09c0d42834b2","sha1":"64e4398433d95fce6bd8cbdfd71c8a4a440a2ccd","sha256":"c3ca9d7ef9dee5f47506f714dc847fb7504dee002c98dcc8f01d439ac1c9dc6b","sha512":"95aea126c7c74e272762916a333f2f778a84402eff60c6017930bd0e02ccb0775f55fbefb31de8cb833648b4cf6376a7d10b30bbc456e8dc9f9af751fc1f3989","ssdeep":"","tlshash":"8d514d701fb74f54fcc91a3941c9c30205b9a72215088e501d8b7a3de8fae74e4a8842","first_seen":"2025-12-25T15:41:24.359402Z","last_seen":"2026-08-18T13:29:57.63354Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/js/app.88283c26bd3988f3.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.658Z","timestamp":1787057293658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/js/app.88283c26bd3988f3.js HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:41 GMT\r\netag: W/\"2d43-1a01377ea48\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 76a3172107b8587c\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11587,"size_decoded":4001,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11572), with no line terminators","md5":"cef34ba75f039a3f87b446bf9bd145f0","sha1":"c770c20cdfa3ed8ffb4fa06b2181345e3226708d","sha256":"3030cd49283b5c39d9fb8a6e706e478bc4634f15d7488c4a8c8544475c9b265c","sha512":"99e4a193927e6ae51a90abf885377d2f3947e97f72729bc902888fe65010129321cfa900bfd918ff07c7372b5d9d6a9c0f9797b0b826ff98dcf3f22df33743d1","ssdeep":"192:RZXj27XoyMIQOpxy7ysMIcGsqEZakjQTUp3TQlkPlhe+gTC8:Rx2DoyMPOpxy7ysMIczzHjQQp3slkPlS","tlshash":"723292913264acb1419184cf1aed9342772096a5e005551d7c3fcdfe69ebde120b67f8","first_seen":"2026-08-18T12:48:55.906465Z","last_seen":"2026-08-18T13:29:57.657586Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":30,"connect":26,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/adobe-reader/img/tick-circle.svg","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.677Z","timestamp":1787057293677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/tick-circle.svg HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/?os=win10\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 485\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 18 Aug 2026 10:25:59 GMT\r\netag: W/\"1e5-1a014680ed8\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: c84e679e0c1f00c9\r\ncache-host: yccdn-mar-14\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":951,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed93153161f00317141d85d6090fdac","sha1":"488c89eb967aa935ec77d1ff6f709ed9b5498269","sha256":"0c74f1679f95f7feeee18cbcf35a73910944aa7056b63932a857293b320a241e","sha512":"4b484007317c976df5a47ffbd82a7b2a1908c0a92c98167a8862c8964d8eaa139e051dc8c3d05710c44856e09a9c8659ab16fb455f4ca32832f712d4ae255461","ssdeep":"","tlshash":"4bf027f6d292dbfdc8824a11f7a47550f0a550d31068c2e4e4f30f8a99298f5a3658b7","first_seen":"2025-11-20T13:41:34.329398Z","last_seen":"2026-08-18T13:29:57.659846Z","times_seen":85,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdfacro.com/?os=win10","fqdn":"pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:48:13.349Z","timestamp":1787057293349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /?os=win10 HTTP/1.1\r\nHost: pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"10762-YmP9sQvrxfgY6S1bIZjk3urc3rQ\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 4f3a800491e96f3a\r\ncache-host: yccdn-mar-14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67426,"size_decoded":16323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13404)","md5":"e42f9511bdf8231830e9776bcc555a80","sha1":"2114a3b82d1a015f09accd52826bb9b6472c176c","sha256":"c73d0a22b9b2e49f3a1eed545fa52461dd768cfb9baad3baed9d8c25ecc6ad8e","sha512":"6035944685f40c132aa0129a0114b83342bee17fb05a2031fdc06399b314a2bc3fc3c7f4b3631196aac1fee98ea3f1296e71daf35bbbd000fab94a7ba00bce55","ssdeep":"1536:onSjnqsQ1J6oi7I7/NmIElJIXWSdNncoRps32oxwvX2/B8W:onSjnqsQ1J6oi7I7/NmIElJ8s32oO2B7","tlshash":"ea63a431419da46f1307a4caf514bf0e38a781febf56560221782d6f7bf78a5c93821a","first_seen":"2026-08-18T12:48:55.908576Z","last_seen":"2026-08-18T13:29:57.64199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/vendors/js/app.3919c7dd82419f30.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.652Z","timestamp":1787057293652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /vendors/js/app.3919c7dd82419f30.js HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:41 GMT\r\netag: W/\"1d76db-1a01377ea48\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: cc4bccccf92aefd4\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1930971,"size_decoded":555108,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63997)","md5":"e5472f2b59bf44c49e69ba73013817e7","sha1":"39e55d4ac1070a004611eee634267e87e2293e71","sha256":"9cfe182557f7070b3dc57bc925af01ed8c32d4a4d49320699ef41a69f203b7e6","sha512":"c07e6b9257a9373aaef155e581562ce62913e09c6e580e7b2edf7036a22cd18d7b9e5e213cc64335d19c61d5c6d1d0a9f3cd5076a8d768e9ad3d525b9d10244b","ssdeep":"24576:+qXl2PK2NJAXnUd7CxkOgZjFxzWnOcwj28FhLeagaT08xf/iZKj:tXl2PK2NmXnUdexkhZjFxzWnOcwj28FT","tlshash":"77357ed53271b0374a8355e690790502933b7c96740dc56cb62cf8db78a9898f2bbfb8","first_seen":"2026-08-18T12:48:55.909929Z","last_seen":"2026-08-18T12:48:55.909929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":35,"connect":32,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/tool/slide-1.avif","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.227Z","timestamp":1787057294227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/tool/slide-1.avif HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/avif\r\ncontent-length: 24714\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"608a-1a01377e660\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2876409393873193\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24714,"size_decoded":25180,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a6215d8c95e7489008c1272c413eec38","sha1":"b1a53479514433df6eef40e10b3ac1e0cf6700b4","sha256":"1332881dd038d9e433734004188984e6369b00eaa48233e074cb9ca4b75cd50e","sha512":"8702a7ef94c1df65491803d238f46468e9dee32d40b9c709834ac7f53129ff92534a11ff80477d1c8c4b2d8a5af0978293b04a5f20e3715f54e1056f27bf1c69","ssdeep":"384:rwI2yIcrdu3HvirLpmKNq4gQDl1AHxIU/5FuuLUn4ShP1XV+J2uoCU/AtEY29ES2:MI2mdu/+Lpmsqslwf/6B4FtOOJpv","tlshash":"30b2d06b95308901dc07227c00cd1b485493d6adfa11bfa36b98e53d8d9898fe4f3e99","first_seen":"2025-12-25T15:41:24.33517Z","last_seen":"2026-08-18T13:29:57.634056Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/adobe-reader/img/hero/arrow-icon.svg","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:14.210Z","timestamp":1787057294210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /adobe-reader/img/hero/arrow-icon.svg HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 486\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:40 GMT\r\netag: W/\"1e6-1a01377e660\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 611db03d55d249bb\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":975,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c74be5b2b98d0afcf56934d8ddccab2","sha1":"47ab1491211e74b1442b5d239fff8dbd4681b7a8","sha256":"3fe987b648470c4fc6bfe31852521b0c8876632b344a8fb18d9181a5f7d25ff5","sha512":"fb0861f870fcb74f2f9e3e06c6c09d83e35a05a7b9d1c03bab0a9f28f727b9eb7260951003e38e84532aef20291fd546f47877d89d44e85d169bd7741293d1cd","ssdeep":"","tlshash":"fcf09ef1f2dce2889b00d301423c306a7853a2f2dc6bc649a74276087c0885f9c9c4da","first_seen":"2025-12-25T15:41:24.364744Z","last_seen":"2026-08-18T13:29:57.639725Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oslo.pdfacro.com/5594/js/app.4a47ca8b949305d0.js","fqdn":"oslo.pdfacro.com","domain":"pdfacro.com","tld":"com"},"ip":{"addr":"188.72.103.4","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdfacro.com/?os=win10","date":"2026-08-18T12:48:13.655Z","timestamp":1787057293655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdfacro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 09:48:42 GMT","end":"Thu, 22 Oct 2026 09:48:41 GMT"},"fingerprint":{"sha1":"09:BD:3F:60:07:32:2E:5B:09:74:C6:E5:30:05:6F:FE:96:81:71:C6","sha256":"20:04:EE:E5:5C:1B:A7:A3:3F:11:24:6D:D2:AF:1E:90:41:C9:A3:3A:70:D6:F3:6E:85:98:8B:45:91:26:2B:CA"}}},"request":{"raw":"GET /5594/js/app.4a47ca8b949305d0.js HTTP/1.1\r\nHost: oslo.pdfacro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pdfacro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:48:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 18 Aug 2026 06:03:41 GMT\r\netag: W/\"2167-1a01377ea48\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 6a70b29eb01741ef\r\ncache-host: yccdn-mar-14\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8551,"size_decoded":3395,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8514), with no line terminators","md5":"01db60d7e2a5ffa2744ebddb430a30e2","sha1":"a5177041cea95f52dac84dbbcb80af12226c9ddf","sha256":"5439163e9eb696e3fd849f7dc4b30f3ae205655b904aada3cf3663b76d441b6a","sha512":"325600bb5609ec2803a7252c2c5c3f2d4327be11781db0a8c4717e4f4168fb3d77fc9530fe211978578311837a2b84382d5d5d0c0648a121d246b298ca99fcca","ssdeep":"192:91Um9ffJ0jI7gYkoUesW0PMnNRmqpGC7xxjyiUzAvZsl+DUZ8:91UwffJ0jCgMUesWVnrFxxyiU0aAUZ8","tlshash":"6f02f7d461ccb07815ee4dd7a2bf67c177342492e4424056203ecc9e17eace2926afde","first_seen":"2026-08-18T12:48:55.913252Z","last_seen":"2026-08-18T13:29:57.657032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":32,"connect":27,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"oslo.pdfacro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}