{"report_id":"51947d7d-60dc-413f-a809-7071cdc15fb9","version":0,"status":"done","tags":[],"date":"2026-08-25T20:52:45Z","url":{"schema":"http","addr":"acronisportal.ru/","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"acronisportal.ru/","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"title":"Acronis Disk Director и True Image — скачать 2 в 1 | Acronis Portal","dom":{"size":11009,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3ff0065f1501d779009a0cd5fa676170","sha1":"42b17a03dc0064dc6a5aa66cc6b288da411476ee","sha256":"b78913bd3b40e64658d2555104482ffee4546c4e7671da18fab950e58bc1231c","sha512":"7d7a1cee3109c296e6c3627abf8886c620e066aca9a178a97bc2e09ebd76a07767a41b83157bdb6aeb6cfb89aa2405807a0cf17afb509628d0dc73714fc1c672","ssdeep":"96:v+S/nSyToIMnPVu5roEb4e6V6YJwVDiSZSZS9m02EfqjvuPC4czv2DRPacY0cgiA:36hPVua3e6V9JEIIg0Wdgri+1iEJp","tlshash":"cc32226268f1206b4112b01afd006e0d7de685ffaf5a560035ac1eaf6ff2d64c52b60f","dom_hash":"domhash2c23e5daaf38b2c5e8382471747523ba","first_seen":"2026-08-25T20:51:41.235706Z","last_seen":"2026-08-25T20:52:47.856297Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"acronisportal.ru/","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T20:52:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"acronisportal.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-25T20:51:37.915113Z","last_seen":"2026-08-25T20:51:37.915113Z","alert_count":18,"request_count":9,"received_data":5437787,"sent_data":4477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acronisportal.ru/","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5c85acfee144f439280febf24b095f6","sha1":"7b1b05c3a2a5e12ffce98c0e24fc2b8e01ed6bba","sha256":"2805c6244dea46a3545b44d552a4238a69a77ad80ed326a5416404a898e1fca6","sha512":"09c73d71a1830b63fd724d64ab7838dfb63f1d7133b59524046003ec48f9790834d3491df6d27c7a0285c57ddc41e728217564bd0480e5179d3e44a22deed88c","ssdeep":"","tlshash":"bcf0e1b7b88492b5c3f72131532ba31d711719ba20896d34c54d8881397bc69102fdad","size":576,"data":"","first_seen":"2026-08-25T20:51:41.268749Z","last_seen":"2026-08-25T20:52:47.865444Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/js/main.js","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d8b905bc87227fa2799c8783f37946","sha1":"ff54e4bacea7992a27efc52775f7a3957c8f1afb","sha256":"a72e9d05904463e500e8c15a50338e540665b5e8836e170300930cea6f0524c9","sha512":"b0386bfd723dd3945c8e4afea3d978443ee40e9a816945bb6f2fb195eebe414ce8e765456bb995b5acdb17909b656720468138649b2d9b0905756823c2cdf0a4","ssdeep":"96:Z+UG3oLL/D1WORncXrGqsS8vTre3vkG6KoBiXrYB/l:Z+poLf1WORnUlsS8v/2vd89l","tlshash":"a9b10fa8ac5932b284b7f37eaf16914cfb7205670001c2053cad9c482fb4a5581beee9","size":5392,"data":"","first_seen":"2026-08-25T20:51:41.264008Z","last_seen":"2026-08-25T20:52:47.858447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"acronisportal.ru/img/favicon.png","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:18.336Z","timestamp":1787691138336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /img/favicon.png HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1341\r\nlast-modified: Sun, 16 Aug 2026 17:00:45 GMT\r\netag: \"53d-6592cfea32479\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1341,"size_decoded":1750,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"572e8079a30c6274f8a7e2f3f08cd764","sha1":"82ad640a2ea17882bdc61904ae06662bb24b5156","sha256":"9a94aefa7e0c777e2c89a539c7ea533fe0d380e4566d63c0b3cf2dcf1dc743b5","sha512":"8d3c39963111f385e3043df7eb8e877a8ff72f5145238eced1440194ad29ecbb7e6b7e6d134bf407b1335e48150e1fc733dc1e577534001d56b67e648fe10333","ssdeep":"","tlshash":"ba21a89a4274ce3ce49974e820ec22a5b953467dc639230ddc9be415a22f7da4ed1492","first_seen":"2026-08-25T20:51:41.257233Z","last_seen":"2026-08-25T20:52:47.857498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/js/main.js","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:17.700Z","timestamp":1787691137700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 13:57:21 GMT\r\netag: W/\"1510-659a321c2eb33\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5392,"size_decoded":2228,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"29d8b905bc87227fa2799c8783f37946","sha1":"ff54e4bacea7992a27efc52775f7a3957c8f1afb","sha256":"a72e9d05904463e500e8c15a50338e540665b5e8836e170300930cea6f0524c9","sha512":"b0386bfd723dd3945c8e4afea3d978443ee40e9a816945bb6f2fb195eebe414ce8e765456bb995b5acdb17909b656720468138649b2d9b0905756823c2cdf0a4","ssdeep":"96:Z+UG3oLL/D1WORncXrGqsS8vTre3vkG6KoBiXrYB/l:Z+poLf1WORnUlsS8v/2vd89l","tlshash":"a9b10fa8ac5932b284b7f37eaf16914cfb7205670001c2053cad9c482fb4a5581beee9","first_seen":"2026-08-25T20:51:41.264008Z","last_seen":"2026-08-25T20:52:47.858447Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/img/disk-director.png","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:18.037Z","timestamp":1787691138037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /img/disk-director.png HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1850642\r\nlast-modified: Sun, 16 Aug 2026 17:00:45 GMT\r\netag: \"1c3d12-6592cfe9f404e\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1850642,"size_decoded":1851057,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"e5d14d612e27ce13ca833116cb5b086c","sha1":"ebd19b56c56b76eb61d2123dfd8985d8634bb195","sha256":"8c6634277c863e5b0020c0866c3622ccdf779dd8732ec65e4cdfbbcf3d8def66","sha512":"d924b2851e9528001179421a83caac7a4f58c1c28115ba1420a9fb344717d8d6a22959d24a91398cd091dc539f33657d1ea8e21bd1409899076c5006ea8644fb","ssdeep":"24576:9kZuEtrycRcfaoYoHyRvDwCqot8GF0b4eyiWfnwXmpONSQbN3:suyqCqM9eOOjx3","tlshash":"412523ab7cb2f341caf665bce4444c5c4bceee41da00d155ec6344aeebb5c48063d5aa","first_seen":"2026-08-25T20:51:41.240002Z","last_seen":"2026-08-25T20:52:47.859414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":560,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/img/true-image.png","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:18.038Z","timestamp":1787691138038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /img/true-image.png HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1710446\r\nlast-modified: Sun, 16 Aug 2026 17:00:47 GMT\r\netag: \"1a196e-6592cfec39d9a\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1710446,"size_decoded":1710861,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"5b69d3be375c9821cf884b54bf923365","sha1":"c00e92b6f8398c32592401802bb80d497eb4f6a5","sha256":"577885e2a032b91966b7e6453ce84ab9cde3a12728dffbc9d971f4d2579a08e2","sha512":"b00bd8588cc89055d4d3cc8523305ac991b5c9f1075984833b43cd40e8d16a66ae2dcd354611ddafc1ba273e7153ed71c723ebe0931279acdec05fef06ff5dab","ssdeep":"24576:vqc6r2lAbAfcr6iDL3t/r0KB+untzgasswE3MCMC:Arrs2rv7g3GMu","tlshash":"4c2512bb9433cb40c7a253b8a91b0e6c0bbc5f15a3521b65682ba5dfd376838413b747","first_seen":"2026-08-25T20:51:41.247849Z","last_seen":"2026-08-25T20:52:47.860368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":556,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T20:52:17.397Z","timestamp":1787691137397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:17 GMT\r\ncontent-type: text/html\r\ncontent-length: 3579\r\nlast-modified: Sun, 16 Aug 2026 17:17:35 GMT\r\netag: \"2b78-6592d3ad926a8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11128,"size_decoded":4040,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0275f11ed6044f05b11563fa39439d02","sha1":"1d5bc5d993fcf01ad129990e372a8fc79184c0b5","sha256":"4128ee8576e31d6fba7565170b1f866e2db829ef33d8aa9dca7be3225e8bde17","sha512":"59b56f43e47cf17175e269d164ea77b7cc371b32c41dc6ac46d1c93ed0cec975bf3cc2460e91b324fe3e4fafc0a4786d0b98f150a234849f70eb3b6b43cb665c","ssdeep":"96:ZxssmzP9z0HU/9p19RrjVbfeyZ76YJlKIk6SZSZSs02Nf9je0PC4HRv2DsPaHE0t:wN0HM1RZeyZ79JQIIs0v8gt6ZPBitHb","tlshash":"ea32346168d1241b4132a02afc006f4dfde645ffaf5a5a1035bc2aaf7ff2d20c56760a","first_seen":"2026-08-25T20:51:41.24466Z","last_seen":"2026-08-25T20:52:47.861235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":54,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/css/style.css","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:17.697Z","timestamp":1787691137697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 2199\r\nlast-modified: Sun, 16 Aug 2026 17:00:44 GMT\r\netag: \"1ca2-6592cfe880a72-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7330,"size_decoded":2660,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"31a931c33fd2c4a9ffc7ec41eb7de913","sha1":"5907bfaac071df3d0f5358815a6261f150ee4789","sha256":"57d8dd60fc7ddb2a59e791758f4d3e771b99468d05eac14f935f7179b9de9728","sha512":"9ae4be7774ad32ca206417e704b50cdfb3ea6e4acd775b58fe3471ffdea11751cf6c34b2c6b09c4f71910af2d974df46760ca8a00b7811702153aeab50ed1220","ssdeep":"192:Zf05HlSihHO+33Du/09WQrNyE+C2m8cvKa55Z:o7r3is9WQrNyfC2mNvzH","tlshash":"65e16492a7293234e137fba1f793c785aaac61129506077c7de4500892cb6b98631fac","first_seen":"2026-08-25T20:51:41.259676Z","last_seen":"2026-08-25T20:52:47.86213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/img/hero-portal.png","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:17.699Z","timestamp":1787691137699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /img/hero-portal.png HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1823609\r\nlast-modified: Sun, 16 Aug 2026 17:00:46 GMT\r\netag: \"1bd379-6592cfeb368da\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1823609,"size_decoded":1824024,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"6b283967557b70f74fedb60dc5ef0a4d","sha1":"938250a404d6730067c513bbf8694f0a909d212e","sha256":"fa0be66ef83d8efc6e39c75eed437eacbc34c4e136786ccf12991ce70cfc67d5","sha512":"0a59dd40d0f5967adf6f774e225a68b791eb55f58d8267648b9f5430932aed755555750c47f2726c2abeab309ff527ab2d938813bda1778cf5ad1990a3d1af59","ssdeep":"24576:iM390hDl8lEfULQIzSIVepJ6Im20DlExky7hv0ObqOUC/Vig:SDl8H0oLESy7hvnbZVt","tlshash":"1725233b0032d754e26693bc25460ebd8774ab326e914576adbb848b4776d3c012ff8b","first_seen":"2026-08-25T20:51:41.261965Z","last_seen":"2026-08-25T20:52:47.862975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":753,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/img/acronis-logo.png","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:17.706Z","timestamp":1787691137706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /img/acronis-logo.png HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 20226\r\nlast-modified: Sun, 16 Aug 2026 17:00:44 GMT\r\netag: \"4f02-6592cfe8cd51a\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20226,"size_decoded":20637,"mime_type":"image/png","magic":"PNG image data, 960 x 256, 8-bit/color RGBA, non-interlaced","md5":"b1fa70b949332b2257e1c1b3cee607d1","sha1":"2dac505450f97643823e134a5d80d08e6150e49d","sha256":"8b25a4bb65f78eaa7a2081931c027e05052e22a7ea3e5a3e8c012def86ce5840","sha512":"eff8322669ac60d4de4acfe25cf41496415fc8dbf1a38b4113ce299d360384833837e06fda99778f7bea6452adafe08d44f2bb7c4ab1654390cc2f7544381b7d","ssdeep":"384:J8NOrtj4jyVdF14qnUT+/A/noS5zBsdzZAfAw8q17wHk2z/S5:i0tj4jypnUKoVoF+x1Gzs","tlshash":"b992d0fbc1abc13c4fce55889b0bad883947f30115d4de232576ed8e951e129caea631","first_seen":"2026-08-25T20:51:41.265672Z","last_seen":"2026-08-25T20:52:47.863815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acronisportal.ru/img/apple-touch-icon.png","fqdn":"acronisportal.ru","domain":"acronisportal.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acronisportal.ru/","date":"2026-08-25T20:52:18.335Z","timestamp":1787691138335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.acronisportal.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:08:04 GMT","end":"Mon, 16 Nov 2026 20:08:03 GMT"},"fingerprint":{"sha1":"1D:35:68:5E:11:19:D5:82:C2:30:D0:18:B1:81:DB:51:DB:FC:F8:F6","sha256":"7B:EF:A3:66:F3:FE:2D:B6:36:BA:F0:DF:87:5C:B0:B9:16:4F:1F:56:B0:C1:B6:28:BF:44:CD:9A:ED:C7:42:8D"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: acronisportal.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://acronisportal.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 3856\r\nlast-modified: Sun, 16 Aug 2026 17:00:44 GMT\r\netag: \"f10-6592cfe90308b\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3856,"size_decoded":4265,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d60fb2cab9a25066122cb61729c8d7b1","sha1":"75bb40636fa90660e32daed3457563fa65354de5","sha256":"f1ed64bc7483e09afc27d83b3f50771298510756ad8c7622617fd557673aac99","sha512":"a4ef6996fda18278350bb722412a9f67957574bc26133b45037cfa742de065e4e075b3eabd414852ad350e0e8453779e99104ee59af357f6823873896690232a","ssdeep":"","tlshash":"2c817ea9e36ca59dfc27de38d1f2d1da043b11473e0d5035d081267245afd9f55211be","first_seen":"2026-08-25T20:51:41.250682Z","last_seen":"2026-08-25T20:52:47.86462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"acronisportal.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}