{"report_id":"34f571f2-1959-4b93-b97b-b55b305e1f36","version":6,"status":"done","tags":[],"date":"2026-02-28T19:13:21Z","url":{"schema":"https","addr":"porora.icu","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"porora.icu/","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"title":"Cloudflare","dom":{"size":7627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e19416cd57108323a187f8acd9935e81","sha1":"a9f1c3520bdc390abe54f17c1c1274138f1f72af","sha256":"a337f54d71949c7b92034bc0d79ed513c2fc46f0c2bd1fee9974b4d4d12a6e10","sha512":"10694ee15ad38bf591c8ed6bcd3b47f35d158076309da5738558e9cb82aae45d79f50d6cf49a15e901a5651dfa13a2df9f9f9fa26379ea3652640065daad96c8","ssdeep":"192:6MRRghF4k+xqA832NRPThVWxR3iWKIvAi+ihmG:3jdxqKwdvAi+id","tlshash":"87f1962270f605332353d07a76ae73667da16403d783e448bbad82a50fc6ed6d5a36cc","dom_hash":"domhash8131e3fb3494d83d876bd757ecb914da","first_seen":"2026-02-28T19:13:26.012033Z","last_seen":"2026-02-28T19:13:26.012033Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"porora.icu","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T19:13:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-28T19:13:01Z","timestamp":1772305981,"ip_dst":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"ip_src":{"addr":"Client IP","port":34302,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-28T19:13:01.130374+0000\",\"flow_id\":2190004868373552,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.48\",\"src_port\":34302,\"dest_ip\":\"94.228.123.61\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"porora.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-02-28T19:13:00.941104+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":4,"received_data":144203,"sent_data":2144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"porora.icu","ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-02-28T19:13:22.035184Z","last_seen":"2026-02-28T19:13:22.035184Z","alert_count":7,"request_count":7,"received_data":222511,"sent_data":3050,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"porora.icu/","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3554d1dcd4cae6851c711a28de7caf7","sha1":"97af10910ea65c010a6ec867ad9525b203216544","sha256":"73e93b29370747965a2a4e61543c88092286f202b2a5b6268abd36556425bd47","sha512":"33e4f255f863d4b57504d4ae3bac7742c731088fc233dd3aaabbb1534dcceba9250fdc2b505f77fba4fb36c48fd7271f243254b7a25769e86b39b6ce2f4a8e15","ssdeep":"","tlshash":"74f082dea9a7082595b77154af9f7324297710b71000e409fe4c46452f2c74bc35a6c9","size":537,"data":"","first_seen":"2025-10-15T21:57:58.874525Z","last_seen":"2026-02-28T19:13:26.020405Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab2460d676a5e644517835746ed08068","sha1":"98dce2db270ee080873cc2309682e5a1fd928ad3","sha256":"ade04cbeaac633b0c2c2c4d593525f6e3b51c36612957c6bb18d2555410e30af","sha512":"7debde27611251a768da3eda99fbb03133e65081edf9f9a2f5aa6b758a05900ee18d33f2df796e342908a0ca507193ccc8dc3e11a0f9f2de35c5465b3a5f37c9","ssdeep":"","tlshash":"4ca002bd01119350339300115612d755247542a798017515351e46402744e1e8919985","size":70,"data":"","first_seen":"2025-10-15T21:57:58.879127Z","last_seen":"2026-02-28T19:13:26.020926Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"94a33efddf6c3d5b7ab07dede45af1d2","sha1":"a59e55b67aa5f121b53e767dfc73df83f21de271","sha256":"9bb1a38a4289ca0ea6f1e354e474c2c7f7303b6055a86aedb8d989cee866fb88","sha512":"399747be1f489f935acb0b4420a72b06b2dfe363d2c933a9989ca23b7713249e62cf6b8c3c280e1860b3feca67c91ea3aa00cd1879df9addf8f9e6bf105d1160","ssdeep":"","tlshash":"3de0a7289a534501016713166f47914524bcd1373a469e1dbeef3b548f92d9994c8c48","size":329,"data":"","first_seen":"2025-10-15T21:57:58.883533Z","last_seen":"2026-02-28T19:13:26.021856Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9209419beb0c45d1347408784d3ad30","sha1":"c1880f085206c069e18636efa58c0638f6b52131","sha256":"9cbb38efa43c2888cfbea0a2cf9b7ef8a582247c97b5ad72852d35bccb699a53","sha512":"5fee3d2d888b2536a280f748a2f442ad93b7b2e99acb1a8092c65883c29543d070fba2a4ccba41955034ac63ee6a02aa88a251a455252a12b4d681d0b44aee5d","ssdeep":"","tlshash":"f031ac3aa8e60a204a2be07e27bd57c934b1145f3412c8193c7c86d54fd4da674e5de9","size":1533,"data":"","first_seen":"2026-02-28T19:13:26.022383Z","last_seen":"2026-02-28T19:13:26.022383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"efa4a5b9f028fd2c8dc48bb2cc96e2ee","sha1":"b1b32d4869dbfafb0ab81f0d405c22f61db434b4","sha256":"89e28d1815f6f351403ea738ef97efb7c821714fc1b9aa42bc74ad20b2eaf9d7","sha512":"cd5f352da5be3c914505a31668b68fc2a78a079f20fc09cd94455bec360ca07611e0b23db133e2aaaf8e38c49c547d39a77484543ae0508496b44c878fde5dab","ssdeep":"","tlshash":"f05000000003c0000303300000000000c00000c0000000c0c03f000c000c30c0c0c003","size":10,"data":"","first_seen":"2026-02-28T19:13:26.023195Z","last_seen":"2026-02-28T19:13:26.023195Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6d4fc089ea969127544bb32065c06752","sha1":"aafe851c6d7c06f6daa8cedbff39b4b740d91a04","sha256":"9166c582dccd5b16185eafdd804ffc397b2f9657d5b0ddff80b18455fde2f991","sha512":"b719a3dc76adf26cd6ba342ed90334f4f3e81a6e885fcb7fefd0feb0943e3734fd69f76a2873cb4ef9d64efcfedbcbfd9c0ce445669c2c95c00e9c202722181a","ssdeep":"","tlshash":"0f60000f00300000cf300000330f0003c0c300c0303000000003000300000c03c3300c","size":14,"data":"","first_seen":"2026-02-28T19:13:26.024069Z","last_seen":"2026-02-28T19:13:26.024069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"porora.icu/","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T19:13:00.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:57 GMT\r\ncontent-type: text/html\r\ncontent-length: 2746\r\nlast-modified: Wed, 25 Feb 2026 18:10:27 GMT\r\netag: \"1e44-64ba9eb2a44a0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7748,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9cec5ebf941222e408e5313d4ffa25e4","sha1":"a6d6364b4a5310457c7a2b6ada8f52aad00caea8","sha256":"b58a3cc8762d816919a889ff3903681bfaab7f1347770b05a88b0ce4aa486199","sha512":"bb0ba8d2730306d08c9d81e81601d77c8ca52a03dd87c30429a5bec2a2024ce7d7e30c8093df45d093ec0a5ec4450412172806eba33aa60373e3c94388f5be13","ssdeep":"192:HgJRch44tDxqVJHXNaeLhkbJoWgug3Daiain69:ALSxqdSghDaiaine","tlshash":"abf1852270c554322273c079b66e73aafca161138383e505bbed52971ff6ed6c593ac8","first_seen":"2026-02-28T19:13:26.013229Z","last_seen":"2026-02-28T19:13:26.013229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":582,"dns":393,"connect":39,"send":0,"wait":98,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/css/nicepage.css","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET /css/nicepage.css HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Feb 2026 18:11:07 GMT\r\netag: W/\"699f3b3b-b951\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (420)","md5":"5d57eddf0dab0bb5eb330c2f92660abb","sha1":"f5dab2f8dfc185ff4ae2bdc130f0837844633fdd","sha256":"133cb02de71480b7a4878b46ea2e1a5bb0fcdb60939342114db4bab6157a2374","sha512":"0344cb6bd80f090ddfc61edfec54aa4dbc993d5e982d9463dd323ca8cc336527042cda47c28f47c63a1f513d823994102cf2fa7512107ce652584a7743c67afd","ssdeep":"192:C3NumQRec7bLClifw4NBO5sV5ac78o4/qrjx9/TruXL+GPyds/H06fpnZZeDZKtm:CspbUiR3uRKcf2zhoYl64Hth3P1","tlshash":"d023f0193ae40014a65342b953efeb68762de8931c1bdcbb77dd005e4fc9eac5b89207","first_seen":"2025-02-28T15:55:15.433959Z","last_seen":"2026-02-28T19:13:26.014119Z","times_seen":8,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/img/cloudflare.png","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET /img/cloudflare.png HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2633\r\nlast-modified: Wed, 25 Feb 2026 18:11:26 GMT\r\netag: \"699f3b4e-a49\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 924 x 599, 4-bit colormap, non-interlaced","md5":"02252ad1dfafd1b24c73e4a598607e49","sha1":"e781dc3fd711d1241073f01dad41b4b4b8749ba3","sha256":"3e6d8bc5cbf339344a2c14d7e754065bd1c3e0eb3bfadc4d0b0e6584e58e869e","sha512":"10bf575ef211140f27727418c3481bc15722b028a4fd29d495da16fc5027cbb66d1ba9eb012b3a58c8e1fe1469199de22fb906eece1f368370bbce4ca13f47f0","ssdeep":"","tlshash":"0b51707c215e8aed3900a77c4b3ef39c3d08c787e0480062195b7eea84017dfa662b35","first_seen":"2025-10-15T21:57:58.867885Z","last_seen":"2026-02-28T19:13:26.015388Z","times_seen":5,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://porora.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 21:20:29 GMT\r\nexpires: Thu, 25 Feb 2027 21:20:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 08 Jan 2025 18:23:10 GMT\r\ncontent-type: font/woff2\r\nage: 251552\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-14T14:51:20.012351Z","times_seen":964725,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":76,"dns":4,"connect":8,"send":0,"wait":10,"receive":9,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://porora.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 21:20:29 GMT\r\nexpires: Thu, 25 Feb 2027 21:20:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 08 Jan 2025 18:23:10 GMT\r\ncontent-type: font/woff2\r\nage: 251552\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-14T14:51:20.012351Z","times_seen":964725,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/img/favicon.ico","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:58 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2485\r\nlast-modified: Wed, 25 Feb 2026 18:11:26 GMT\r\netag: \"699f3b4e-9b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2485,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"112ad5f84433e5f46d607f73fb64bd60","sha1":"a8bf11f3f6099ca49d1cbf73c050eb7e6fbc68b4","sha256":"0f84307ad691800e391fccb42b4ba290a87febf001abedfbe03b34767d45e441","sha512":"a0fddec2cecc71aa2fe16eb01aa541051a5fd1b9f0feab18413007186826e81c2e582ec7f48f7242fa4142e7bb0105b29d1f11f1062f96d255f743050c97b65c","ssdeep":"","tlshash":"1a510985efe0c8c5d5b75157013a02247ed9d01c756033ed9a816cadbe6ae59b305a28","first_seen":"2023-09-19T23:27:17Z","last_seen":"2026-08-08T16:11:15.721646Z","times_seen":960,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/css/index.css","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Feb 2026 18:11:07 GMT\r\netag: W/\"699f3b3b-254f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152820,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1574)","md5":"354950d975a00453318740ee35a816c7","sha1":"524418d6b530a1c4328d39def712ea052af83c1e","sha256":"26cf7e7549ea35553fb8ab33e1de8653e93d61b6b291040f071c4cf3fea01ccd","sha512":"982c6ebd6814ba775587ec876991d93d226cd773f638c2f77c85ea0be7564820c3e09270535a4cb10a20ba72c16251a145b061081d758a95cf5fbf5610be24f0","ssdeep":"1536:mKRlMNcBUpMl0t1ZPRTxjt8BZrasjkQqe:PWOyy+vZPRTxjt8BZrasjkQqe","tlshash":"d8e321910417244062831cda23de7a31ea4fa2537144e031bbfdab9befdbd66927436d","first_seen":"2025-10-15T21:57:58.849798Z","last_seen":"2026-02-28T19:13:26.017154Z","times_seen":5,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/img/logo.png","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 6861\r\nlast-modified: Wed, 25 Feb 2026 18:11:27 GMT\r\netag: \"699f3b4f-1acd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 70, 8-bit/color RGBA, non-interlaced","md5":"d6f63048208ec8ef49175d9548de49d6","sha1":"20b27bf4fb060f0c0b8939689177a56b5f268760","sha256":"04e8467a049b23b95c3cd800f6bf1f0a03326886cce94d9825689b4589694778","sha512":"67ee4c8c13faf24cf096d9499111f2164d6757dc1a1d43c1ed721976f58f4c03df040d0f1f4f46f06e84fcf35f376d8dd6775ecb660d1066655dea02afe4d53a","ssdeep":"96:ZVE3d6hCBveaAjmgu+jMl7q8Gbgr50Fc5mfJcoxuqjJCLl4hSTmokzKZ/nbw1:ZVnIvDqmgugw50OUQUJCLl4gTT01","tlshash":"12e19f448d94d231e2ebce7a4cd48914f8fad6826c3e68967a5d84409f1a9034bdd196","first_seen":"2025-02-28T15:55:15.437281Z","last_seen":"2026-02-28T19:13:26.018251Z","times_seen":7,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"porora.icu/img/windows.svg","fqdn":"porora.icu","domain":"porora.icu","tld":"icu"},"ip":{"addr":"94.228.123.61","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porora.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 16:04:57 GMT","end":"Tue, 26 May 2026 16:04:56 GMT"},"fingerprint":{"sha1":"76:8A:26:FA:44:F4:16:A0:98:76:34:BB:FA:C3:57:AD:5B:BB:54:9C","sha256":"84:14:48:A9:DE:3B:8A:17:1C:88:0D:46:60:27:4B:64:E3:F4:5F:AA:B6:FB:77:D1:64:AC:00:7E:92:27:7A:0F"}}},"request":{"raw":"GET /img/windows.svg HTTP/1.1\r\nHost: porora.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 19:12:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 467\r\nlast-modified: Wed, 25 Feb 2026 18:11:27 GMT\r\netag: \"699f3b4f-1d3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":467,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a6a32be54676d679438be1b355b961d","sha1":"4ee5819d4120fd39f06e2890cbeabd10ee039e17","sha256":"864747575a25f9b282cef14f46ba99b1eb01bfde089cf5ce1f6f3312a98a796c","sha512":"0b24fdf4400434ed844c0391287dde18e94e9922edb314e7aa678740918784d7163017a65eaa231e885e3281391a6278b4ec66a104a8de77529e3b9c85f9ceb2","ssdeep":"","tlshash":"23f0dcccc71986869282ab82c17189ab733f30cd40450ff9cad2c350610e5ca3ea14cd","first_seen":"2025-04-22T13:10:10.391727Z","last_seen":"2026-02-28T19:13:26.01888Z","times_seen":6,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"porora.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://porora.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 01:57:50 GMT\r\nexpires: Fri, 26 Feb 2027 01:57:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Dec 2023 02:08:40 GMT\r\ncontent-type: font/woff2\r\nage: 234911\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48236, version 1.0","md5":"015c126a3520c9a8f6a27979d0266e96","sha1":"2acf956561d44434a6d84204670cf849d3215d5f","sha256":"3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa","sha512":"02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c","ssdeep":"768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos","tlshash":"eb2302d92e54990d29202a63f45d6e2641301b6acedf4bbceca4ff38006c76f9fe1548","first_seen":"2023-12-14T22:52:19Z","last_seen":"2026-08-14T11:14:58.773647Z","times_seen":114413,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":118,"dns":0,"connect":9,"send":0,"wait":9,"receive":5,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/titilliumweb/v17/NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://porora.icu/","date":"2026-02-28T19:13:01.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/titilliumweb/v17/NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://porora.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://porora.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12372\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Feb 2026 01:39:39 GMT\r\nexpires: Sun, 28 Feb 2027 01:39:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 63202\r\nlast-modified: Thu, 24 Aug 2023 20:30:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12372, version 1.0","md5":"0ef99cf07a2a261ab43d5dc1937ffb27","sha1":"bd39f9cd13ef2a6f912dcba8fa916fc67b4a19d9","sha256":"557f6d0883db85be712c3a77baa38875ddf99ecbdfd6fec98e5c0b1f7a0e1532","sha512":"551e515e7e259e993566dfd8105905afbea27b1e628a0b459a6d7d1d52f1ff927dc0a4c10eeb62f7063e1848ddb3c5139f6ed206efef0f2005e609a9a3c854ac","ssdeep":"192:OzHkibZ4khg+uAoBXJUH+uO+SIeFK48oPDZu9n6eH6CwDuz1RvpEw+T7CXjl:Orkid4QgrpJ6Rjk/pZu96eH6CuuLAup","tlshash":"e842d08320d4b935d713aeb02d38e594181e1b4b3edcd1a5f4c8b98fc9929ad5b487ec","first_seen":"2023-04-23T07:32:13Z","last_seen":"2026-08-13T23:24:41.506985Z","times_seen":4059,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":101,"dns":0,"connect":21,"send":0,"wait":14,"receive":1,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}