{"report_id":"8993956c-c6f5-4c38-9663-7fdf72584058","version":0,"status":"done","tags":[],"date":"2026-08-25T21:10:24Z","url":{"schema":"http","addr":"foxitpdf.ru/","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"foxitpdf.ru/","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"title":"Скачать Foxit PDF Editor для Windows — быстрый редактор PDF","dom":{"size":15835,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (335)","md5":"5f1986b056315e75331ad020a055e63a","sha1":"7f542902accf0482adf76d7a5200678a5a9b07d6","sha256":"f426011c6c592acb7c22f78f67e0a5877d64f352b62388d4315cc53dd5419a01","sha512":"98a2fb0303cb70ffbf3c812bed881def5e8d22854181f88b194593d0b148759af848d794aa7ff7c33f0924090f3c862d3fc45de1a8942d29067971a02dd4b5f4","ssdeep":"192:zR1s/oSxVgW8IOUt2gjxV96IgII93GDDBWYi7Zcdl82pTVxbVBc0dslX0xV6D7Rd:zRm/oS7gWljjkII5qI17m5dADqY","tlshash":"ce62313154f964ab0101b14bee057e0a2de685bf6f5a171132bc2dbf7fe3850c92b61a","dom_hash":"domhash52801d1f55824b27dcb4d46647eb138c","first_seen":"2026-08-25T20:58:20.48441Z","last_seen":"2026-08-25T21:10:25.245549Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"foxitpdf.ru/","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:10:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"foxitpdf.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-25T20:58:17.769476Z","last_seen":"2026-08-25T20:58:17.769476Z","alert_count":32,"request_count":8,"received_data":146896,"sent_data":3923,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"foxitpdf.ru/","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c93e52dd26078e77bc2aaa82faf17105","sha1":"08e4c96a3ca94c0cccba18a303f9f7f12dc03449","sha256":"fba6487aa2986a09a8f50b48c655ca2dac434b97228964c63fe2c14aef07e7ce","sha512":"dedc76e3093db5ab0d25e163ea98191de9160734095901d5560daf4a77e0102923ccca10f80d735ee6bc00fe9a5c749e2ed3c4764e4229c8dcfdabfc0565777f","ssdeep":"","tlshash":"66f02677b88492b5c3f72131532bb70cb16718b920897c35850d8891797bd69102fd7d","size":576,"data":"","first_seen":"2026-08-25T20:58:20.503275Z","last_seen":"2026-08-25T21:10:25.251628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/assets/js/main.js","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5ab1932b70fee0a9be35539cf20a99a","sha1":"6a028aff5b1333390bc047ee85c28a6afd9927af","sha256":"567d03bf05b41cb25515f111e4fc5608b97d3c5e09efa59bc19da1fe6151a0bb","sha512":"aed38a0f0296d0917a44a20a3f19a5a439ea27de0a05324435ba4bf2cf83d811fa246b71894786f39a6eacb9fc6ee54494cd5ab5fdc845c07104abedbf849de3","ssdeep":"192:z/HCWne1prMmCOiQt1A32HQUjvp8REOj2DZO/:z/iumCKA34jSj2DZS","tlshash":"94d186657ce731b101a7e1bf6a9f4908b7b041179005c8013daceb8a2f64e7407beae9","size":6428,"data":"","first_seen":"2026-08-25T20:58:20.495244Z","last_seen":"2026-08-25T21:10:25.247789Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"foxitpdf.ru/assets/css/style.css","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.498Z","timestamp":1787692197498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 2970\r\nlast-modified: Fri, 14 Aug 2026 08:54:11 GMT\r\netag: \"29e9-658fdf6dae86e-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10729,"size_decoded":3431,"mime_type":"text/css","magic":"ASCII text","md5":"85f6367466ea9fa5371237776d18425f","sha1":"562af5e16818fe2a8199933a767ab483ef71d9fd","sha256":"5555cec3d40cd4f9b51063be41bd00ccc2961f9a72477b13486e93a6442fd8d7","sha512":"ca22d0ac2455114f65c606e8b84070fdd41df08e4a37dd55cd0dc5ccbb6be740c078b80875956197c39d51de18f2fa3a24a8596a496c34115046ce3d2c3b1d57","ssdeep":"192:MlPiNEJIKkNxfYUwrWUnrHRCzhZjjpAGDnPh75280m5c:GmXJL+rWoIZnzBc","tlshash":"802223a337345234f527a6a8bad7d75a635871139408d9bcaee9000ccdce3fd54a2b89","first_seen":"2026-08-25T20:58:20.487377Z","last_seen":"2026-08-25T21:10:25.246425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/assets/img/hero-editor.webp","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.499Z","timestamp":1787692197499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /assets/img/hero-editor.webp HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40120\r\nlast-modified: Fri, 14 Aug 2026 08:54:14 GMT\r\netag: \"9cb8-658fdf7064abd\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40120,"size_decoded":40532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6428a25422cdc0b03f7d0c6f5bbc5bee","sha1":"897aa0745a2e5915759e55c4c8e59e498dbc6554","sha256":"d5307e2d07397317be6d05adf8f560eac2f01eeb087ca5db642e2469898c5967","sha512":"088679179c92938bbe02879119061800f698f6a89e4a450316f347c70fc2fb574b7d2d1a0fdf2cf2d304f87c5c658bcef771255ac0fc571cf991dd5224323cd2","ssdeep":"768:xUEdew+mevPQFEZw+fDXfnnGdeBq0D8p0lr0EyHZ9X2hERp5fqYbKXJH6uK3srIp:xUFwGXQmtz10s8pgIEy5wERzfqkGH9KP","tlshash":"5b03f140ccb8ef17ce182db86397526ba1bc09569026493c2f521b9c946bdc2dd3766f","first_seen":"2026-08-25T20:58:20.493202Z","last_seen":"2026-08-25T21:10:25.247257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/assets/js/main.js","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.501Z","timestamp":1787692197501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:19 GMT\r\netag: W/\"191c-659a32c5c942b\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6428,"size_decoded":2788,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d5ab1932b70fee0a9be35539cf20a99a","sha1":"6a028aff5b1333390bc047ee85c28a6afd9927af","sha256":"567d03bf05b41cb25515f111e4fc5608b97d3c5e09efa59bc19da1fe6151a0bb","sha512":"aed38a0f0296d0917a44a20a3f19a5a439ea27de0a05324435ba4bf2cf83d811fa246b71894786f39a6eacb9fc6ee54494cd5ab5fdc845c07104abedbf849de3","ssdeep":"192:z/HCWne1prMmCOiQt1A32HQUjvp8REOj2DZO/:z/iumCKA34jSj2DZS","tlshash":"94d186657ce731b101a7e1bf6a9f4908b7b041179005c8013daceb8a2f64e7407beae9","first_seen":"2026-08-25T20:58:20.495244Z","last_seen":"2026-08-25T21:10:25.247789Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/assets/img/foxit-logo.svg","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.505Z","timestamp":1787692197505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /assets/img/foxit-logo.svg HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1072\r\nlast-modified: Fri, 14 Aug 2026 08:54:14 GMT\r\netag: \"7e4-658fdf701169c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2020,"size_decoded":1485,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3522ffbe6c985b16972e032007d0c31c","sha1":"7475cdb19a8904d38397b21cd8c7d54aac915733","sha256":"9cb0c262ff2138925a122461e17aa261c06b4e31bc7ffb5a0e4fff5111124930","sha512":"5f1ffc19395f3e9f9287f29ffad5d2cad7ffb5ca4c4512c1edb6b84a1fd66248c7c01013698c40af0ac0abe628d6285e1f5b989b347d4d9f4f53a390473c3af9","ssdeep":"","tlshash":"0e4187e1936e16b98c87061483fc522535ad79dee1e117f89927628378e5cf208609bc","first_seen":"2026-08-25T20:58:20.490098Z","last_seen":"2026-08-25T21:10:25.248399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/assets/img/features-sheet.webp","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.818Z","timestamp":1787692197818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /assets/img/features-sheet.webp HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55300\r\nlast-modified: Fri, 14 Aug 2026 08:54:12 GMT\r\netag: \"d804-658fdf6e9bd98\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55300,"size_decoded":55712,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"057dd7f32ffb2c0b39e3be799d10bf55","sha1":"157b549209021ce32467884ac29009a502d85a28","sha256":"1d9241f5b2e5aa5ee01fa5cab432975c22fa21238f6183bd4f8ad3ad080d57f7","sha512":"9b6648642f2faa752c957a07c0cb1dc707f77bf3e4c8d3c0579813d3fe64c282503945438953ffd271221da77e14f7ff6554b47ba7025a2bf904ff3e099946e9","ssdeep":"1536:lNsc6SU7Us4cYbE6DAaBv3RapMtcZSQcYgZTH:lOcAAs4TI6DJBv3sWtcZSQctL","tlshash":"58430222ec5b56e5ed5d340c92d5fe7b6bf08d94256921460c32dc822fec696cb3cca1","first_seen":"2026-08-25T20:58:20.497823Z","last_seen":"2026-08-25T21:10:25.249065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/assets/img/apple-touch-icon.png","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.895Z","timestamp":1787692197895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 9235\r\nlast-modified: Fri, 14 Aug 2026 08:54:12 GMT\r\netag: \"2413-658fdf6df8435\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9235,"size_decoded":9645,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"614e9028fd1a3d1faabf29f6c667b763","sha1":"bf7921163e9062a26e8e2bfd87b66494927ce7e8","sha256":"831f0529205729c276e9a3e35e09a1701fe578dbdb81e4e45945de7fe6f46212","sha512":"a5f9fc2dc5a3016ae63d387109d2a97f2e2b47b8ef20cf5a2d82f42ac441edbb376e524ea1706fd8a6056735428ab4c45cfb53968921f09d8aba658909238655","ssdeep":"192:EQiiTkziTVKx96fnkWQE/0rCz2QZxcYFMu:EQiiTkQVKxAvkfEMe625J","tlshash":"2812b04e48d76b667936dab5e6b403fe28019cf455706600e076a015d0cbcbbcfeab1b","first_seen":"2026-08-25T20:58:20.499878Z","last_seen":"2026-08-25T21:10:25.249717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/favicon.ico","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foxitpdf.ru/","date":"2026-08-25T21:09:57.896Z","timestamp":1787692197896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://foxitpdf.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3339\r\nlast-modified: Fri, 14 Aug 2026 08:54:10 GMT\r\netag: \"d0b-658fdf6c252fc\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3339,"size_decoded":3751,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"cb5082dc3d561981251497b20e1db04e","sha1":"cc784195e701b471a731c0089d4a1b15b8bfe84b","sha256":"c78c87d900df1ea0d68bac209069e5d00a42056b447af6f729aeb73600d5c310","sha512":"159dd7eafa18268c2eab24de096e83d371a65d5d8ab62525fbdd9d8bc390340a1edb1a9dad277b2c645615842d3b1795b49fe22ad91fba294265b40b861e1d76","ssdeep":"","tlshash":"f7616ce161008872da2c417c7e199090d4c5a83bc8eb139fe2f3d4375a9b0225947335","first_seen":"2026-08-25T20:58:20.501666Z","last_seen":"2026-08-25T21:10:25.250381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foxitpdf.ru/","fqdn":"foxitpdf.ru","domain":"foxitpdf.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:09:57.185Z","timestamp":1787692197185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.foxitpdf.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:00 GMT","end":"Mon, 16 Nov 2026 20:08:59 GMT"},"fingerprint":{"sha1":"B0:A0:C8:01:6B:5F:A1:37:F0:A1:72:FB:B3:05:5C:66:34:4D:DE:EA","sha256":"09:F4:0D:2B:E1:5A:47:9D:86:E6:AE:03:DC:1D:75:9A:50:4A:2B:7F:3A:C4:58:38:18:B0:8A:82:61:4C:2C:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: foxitpdf.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:09:57 GMT\r\ncontent-type: text/html\r\ncontent-length: 4996\r\nlast-modified: Fri, 14 Aug 2026 08:54:10 GMT\r\netag: \"3fc3-658fdf6c93ca7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16323,"size_decoded":5457,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (313), with CRLF line terminators","md5":"2301c63d59bd2b6edbfe08445d1eafbd","sha1":"74752383a63a88d70265e19917c6b68a854391b8","sha256":"dff152b54f36e7086081d9afa8139e377ad78d71352acf2a43f31aaccdefc486","sha512":"9e20b24b12a950988ca0bdcb0ef3f5f5c800e4c9663ba182553bb6764d324dc8121c6422aeb2f3c63dbd74a39df50113fa6da90de6887d32c0cf9cf15bac041d","ssdeep":"192:bDeRKz1U0wFBZ796IxII6kPAoBSVfG7ZPHF4USTSXibVgc+Fs7E05VGmeP41O:+9FBbII/4/Vu7MWF9mZg","tlshash":"67721f3150c5a4aa0132b14bda05be49fda681bf6f5a571132bc3eaf3ff3810c92b519","first_seen":"2026-08-25T20:58:20.491523Z","last_seen":"2026-08-25T21:10:25.251054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":21,"connect":31,"send":0,"wait":49,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"foxitpdf.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}