faststoneportal[.]ru
“FastStone Image Viewer и FastStone Capture — скачать бесплатно на русском | FastStone Портал”
faststoneportal.ru — 未验证. 证据摘要: VirusTotal 6/91 (alphaMountain.ai, ESTsecurity, Fortinet, Gridinsoft, SOCRadar); PhishDestroy score 93/100. 注册商: REGRU-RU.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy first observed faststoneportal.ru on Aug 25, 2026. The captured page title is “FastStone Image Viewer и FastStone Capture — скачать бесплатно на русском | FastStone Портал”. Current evidence score: 93/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 6 detections among 91 engines: alphaMountain.ai, ESTsecurity, Fortinet, Gridinsoft, SOCRadar, Viettel Threat Intelligence on Aug 25, 2026 at 23:32 UTC. Non-positive and contextual checks: On Aug 25, 2026 at 23:32 UTC, AlienVault OTX listed 10 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The separate external-blocklist snapshot contained no matches on Aug 25, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. URLScan completed without a malicious verdict (score 0) on Aug 25, 2026 at 23:08 UTC.
The collector marked the hostname reachable on Aug 25, 2026 at 21:29 UTC, but did not retain the HTTP response code. Registration records for the domain list REGRU-RU as the registrar and Aug 16, 2026 as the creation date. Registration preceded first observation by 9 days. At collection time, the hostname resolved to 185.26.122.8 on AS62082 (Hostland LTD). The recorded endpoint location is St Petersburg, RU. The stored server header is nginx. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 16, 2026; checked Aug 25, 2026 at 22:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 置信度 100%Yandex.Metrica is a free web analytics service that tracks and reports website traffic.
metrika.yandex.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of faststoneportal.ru · checked Aug 26, 2026
证据与外部报告
PD-20260825-3F3E10 Recipient: abuse-c@hostland.ru 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。