{"report_id":"c8347790-78f3-462c-9475-6508fad22bc8","version":6,"status":"done","tags":[],"date":"2026-03-28T01:22:52Z","url":{"schema":"https","addr":"market.dota.com.ru","fqdn":"market.dota.com.ru","domain":"dota.com.ru","tld":"com.ru"},"ip":{"addr":"185.26.122.18","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"market.dota.com.ru/","fqdn":"market.dota.com.ru","domain":"dota.com.ru","tld":"com.ru"},"title":"Access denied","dom":{"size":878,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"13189add0fdace560a6d6934c9420158","sha1":"10fb0f7d01f6e291cffe5c244cc8849543746f6f","sha256":"ba83b064b353625d2bdc8ee33d4debae34e741fb8f88e6291af5f2f2a87dbac8","sha512":"1da9a3512e093afe5a718ec6c50db8266b485e2d59342fbd8e3f61985655146bbb1f1bc262f3fce61dcd0f58ec2aa2247ae98ab26b4dfd89092eb09625c9a782","ssdeep":"","tlshash":"08117866e6e714427853e8540f72a7424f80c807814fce5a3f8d33a4cf86948cdd3268","dom_hash":"domhashe0843a79d153b74089a7cabbc65fbfc5","first_seen":"2026-03-27T21:17:18.582415Z","last_seen":"2026-03-28T01:22:53.169672Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"market.dota.com.ru","fqdn":"market.dota.com.ru","domain":"dota.com.ru","tld":"com.ru"},"ip":{"addr":"185.26.122.18","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T01:22:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"market.dota.com.ru","ip":{"addr":"185.26.122.18","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2025-09-20","domain_rank":0,"first_seen":"2026-03-27T21:17:14.59613Z","last_seen":"2026-03-27T21:17:14.59613Z","alert_count":0,"request_count":2,"received_data":37259,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"market.dota.com.ru/","fqdn":"market.dota.com.ru","domain":"dota.com.ru","tld":"com.ru"},"ip":{"addr":"185.26.122.18","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T01:22:30.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dota.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 14:18:48 GMT","end":"Fri, 05 Jun 2026 14:18:47 GMT"},"fingerprint":{"sha1":"0F:17:A3:4D:41:FF:69:52:F5:E1:87:59:64:85:01:A7:ED:D3:E3:C0","sha256":"F8:1B:8D:B5:58:19:94:A3:79:F5:68:DB:58:95:90:5A:9B:DC:80:C0:68:B2:48:F5:28:52:68:9C:9A:52:AC:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: market.dota.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:22:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.34\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":907,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"40f887173eaf25912ce07cc958e6a1b8","sha1":"853dc0ef584db15cff2c28daefcf86a6b0dde628","sha256":"9dfa254e23f2e2a158bf4327a282de641ed02a859ec7aa66f620f5b7cef20075","sha512":"c23389e8f08ce54abcb109cdf76ec52c1cbbdc8182bbb05cdf8d9f5f32bf8b133763fae5861f22dc1d2246ccbf894b9b638fffaef68aee06d8b21558ce75eeb6","ssdeep":"","tlshash":"0f114966e6f705426853e4440fb2a6424f80c457824bca5a3b8e3364cf86949cdd726c","first_seen":"2026-03-27T21:17:18.583518Z","last_seen":"2026-03-28T01:22:53.171088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":173,"dns":91,"connect":39,"send":0,"wait":56,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market.dota.com.ru/favicon.ico","fqdn":"market.dota.com.ru","domain":"dota.com.ru","tld":"com.ru"},"ip":{"addr":"185.26.122.18","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market.dota.com.ru/","date":"2026-03-28T01:22:30.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dota.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 14:18:48 GMT","end":"Fri, 05 Jun 2026 14:18:47 GMT"},"fingerprint":{"sha1":"0F:17:A3:4D:41:FF:69:52:F5:E1:87:59:64:85:01:A7:ED:D3:E3:C0","sha256":"F8:1B:8D:B5:58:19:94:A3:79:F5:68:DB:58:95:90:5A:9B:DC:80:C0:68:B2:48:F5:28:52:68:9C:9A:52:AC:C3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: market.dota.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market.dota.com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:22:30 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 28 Oct 2025 17:27:02 GMT\r\netag: W/\"8c16-6423b52ec8580\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35862,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"afbb1b7c43337219cd0e30e4f5479990","sha1":"dfcbc32b73078cf0c8ff42e8f6a97874824ece2e","sha256":"72d5d3e430cb7ba9d8b32e913cbadd17b1779f06dfa1f4dce262c64d38be2ee2","sha512":"92e12225fba891a4044cf18dbf29b5936e013738243172a928ec63b4ad21a00800a21585f8435174c213400d827ea808d4e6111ec7f5d63ba4d40ff6bd4869d8","ssdeep":"768:GF571L/0XOVmWiB+ZAKjXQvgjm5EF7wAIi9Hz/DPWkkzO:azdMTB+T0vle9HfPWkCO","tlshash":"e0f2f187f72c575564d6805abafffe8e1990d7f925713b4ca60841950c332a398c129d","first_seen":"2026-03-05T18:43:23.499055Z","last_seen":"2026-03-28T01:22:53.171785Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}