{"report_id":"00a8d40a-2634-49eb-8feb-74abfa64fdcb","version":0,"status":"done","tags":[],"date":"2026-10-09T16:06:13Z","url":{"schema":"http","addr":"wingsandsirens.com/","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":0,"asn":32002,"as":"RackGenius","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wingsandsirens.com/","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"title":"Wings \u0026 Sirens — Emergency services \u0026 aviation photography — Western Australia","dom":{"size":27170,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10216)","md5":"746fb81e6d3a068690a88ffa88ed8a37","sha1":"589fca6d5d86d61ac94bfd528cfccd63f05df6e1","sha256":"29512c873f668f3732f24a88ff26d5258831007873144db3669dec6b8443a7e4","sha512":"82406019fce3ef79aaac095da0b69c4d7f60f68c9f740961fb9f6092ce03278af0ee7a2d39c2c2a06cc3bc99fecdcae1480943382014df5ce4dfbc0d774062b7","ssdeep":"384:yqIIPdx+StbbR+VIJT0+yy4WuG3OWL1Xpx/Ur1lo2xjP6OI+Tm8fM8BMqgs7QF:yqIIP/+StbbKDO","tlshash":"c1c294a0e0f2593b51d3c0e11b959f76a6b1ff2f9645080db76c16802b9feb2db03619","dom_hash":"domhash063ba2f32948ec14c5637449e4428a95","first_seen":"2026-10-09T15:48:33.06219Z","last_seen":"2026-10-09T16:06:24.027118Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wingsandsirens.com/","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":0,"asn":32002,"as":"RackGenius","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:06:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wingsandsirens.com","ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-09-12","domain_rank":0,"first_seen":"2026-10-09T15:48:26.597414Z","last_seen":"2026-10-09T15:48:26.597414Z","alert_count":17,"request_count":17,"received_data":1344543,"sent_data":9003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wingsandsirens.com/static/app.js?v=29","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c65ae21a524761d42232d8487ad57394","sha1":"23208ef772cc90fc792c30b05e201a8831dd88f9","sha256":"055a4de44da602f2fd867625a79133e46519e6d7d0282255c153e06187c19c8f","sha512":"40293fbf60e5a0315b2db88f4e86c5e47a2843cdb75fc0a57a731959c90f2c3be3cbadc7f873b9482050ddf01ce7d34e0d1e4d6b4b6314f813bd11b913086114","ssdeep":"96:QfsAIZFho/2M8jLGWeeEJ6jKn1KqH1j0vEhoeKQUdlj8nCaNifH/RXPf0e2L:dZF7rjetDHHVUjHQiltfHO","tlshash":"ddc1502b2dd6147b50b3e17a668fe390fb7605032508ca013dadc1812fa493947beee9","size":6050,"data":"","first_seen":"2026-10-09T15:48:33.106269Z","last_seen":"2026-10-09T16:06:24.081857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wingsandsirens.com/static/disp-bold.ttf","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.196Z","timestamp":1791561869196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /static/disp-bold.ttf HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/static/style.css?v=29\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=3600\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: font/ttf\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aac9999-1ad2c-zstd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109868,"size_decoded":67936,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"e842a7fa0a5f3ac9ac8b0d2e0b7ca48d","sha1":"e967942d127fc0ce1f274c3f1aec7357d27eb471","sha256":"4cd16b98cea43a9ce4471df068634fce71ab279dfc9b303b6b188bd96b35226a","sha512":"affb6f3b8255b7efcbf32e1732337d51e50872f24a16dfb671ea237305eb32f9ff99e5797246da6e5b6d7898ee9e7c40340dfb610188be8c68401431b930b7ff","ssdeep":"3072:tCPoVkPsCx4tFb34h7vqPP5b9Q1ZRJYiUk/:tCmkkW7ihkDHUk/","tlshash":"61b33a00f2c97b9dcb63647d457282dd8ee2ed3e9a845b7badbb6e1240030385d52d9c","first_seen":"2026-10-09T15:48:33.074904Z","last_seen":"2026-10-09T16:06:24.039946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/static/disp.ttf","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.223Z","timestamp":1791561869223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /static/disp.ttf HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/static/style.css?v=29\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=3600\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: font/ttf\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aac999a-1b804-zstd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112644,"size_decoded":69357,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"d593ae5a4365ef29b313d4f99479bb5c","sha1":"266031f14cd138df2dc48f34b9ed41bf57657554","sha256":"ab74085ab53ca88945d1ef57493c955c1dca3f2e7d7b4b7ab90cd107a7262bc7","sha512":"595602096ee83a9231ddf0069d786a4a7f1c232c5804284d818620f301447c3778e13b397415036e86ba87bd4e1fd42e3aafea056fce0ae80abf9ad1a792cc3b","ssdeep":"3072:V997+ucCY8EdJXYAf/Oi2+aRdKB4kECb9Q1Zt0CK8i:VcCY8MoAMJSDkSCK8i","tlshash":"9fb35b00e2897f9dcf63647d456181cd9ee2dd3fa9809f7badbb2e6600538284d52d8c","first_seen":"2026-10-09T15:48:33.123101Z","last_seen":"2026-10-09T16:06:24.050113Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20261008-6125df1b.jpg?v=1791463162","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.235Z","timestamp":1791561869235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20261008-6125df1b.jpg?v=1791463162 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6ac78efa-8c91\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 35985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35985,"size_decoded":36565,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=1R4A6147 - https://wingsandsirens.com], progressive, precision 8, 900x506, components 3","md5":"e5cfce66af6b72fd6e838bd7f6c8a12e","sha1":"e31051cfefacfdc2bb7b8c03a8573921b9651bae","sha256":"aac9abb4f0e69a8c8f7d5769bd88b573bc041dbe11a9b16d14819cc5be8e418d","sha512":"98c37085d201bd062bf8b7bfd44c5eebaa671d279da2f2bd84b0c7c7a8b0eec502ec6d9aef34c7652b31ad815da7aba16a02cce2a7068902b14ce51b050c493e","ssdeep":"768:M4TAVPyEPSMw9uteTmHVv7Qs4S2CKMWVBlWzzHZMpbNv:M4qSV92eSBQsoZ5AzzHZ6bNv","tlshash":"cdf2f11bf3b6c411c795e3bdce167c261b32be9f703833ac80a4e56467a15a55da32c8","first_seen":"2026-10-09T15:48:33.091392Z","last_seen":"2026-10-09T16:06:24.057456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260918-b3b7ce67.jpg?v=1789708105","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.238Z","timestamp":1791561869238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260918-b3b7ce67.jpg?v=1789708105 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc749-15ed3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 89811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89811,"size_decoded":90392,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=Yellow Air Tractor Ready for Takeoff - https://wingsandsirens.com], progressive, precision 8, 900x600, components 3","md5":"7be007604c9d0c4a1e233f24627275ad","sha1":"1de4306128394b74a9a6eafdbd6393d9f4606d27","sha256":"fe12eae93e541d1a441d28639fac1e499b18447c9f40323b2f3f6d5566195863","sha512":"8bb95aa1900080d291a5b58b6262f90092a58f9718f4fa47bd3115fab2a9da1750eca829f2faf88ba867572aedaba13803d4a58a6aaf5fcf68c5a93c56aa8e1c","ssdeep":"1536:j3kGVM+RWubo9diYG0Y6MCpBGXwGe68kZSYFfIdi0BTzde7seZZK+aqoTF:wGi8o340zMCTGXf2kZTJrIEDZRa7F","tlshash":"19930125b50594a2b759f47ae904b731fe775d00220c0b8bbdf4ad46193b2cd2394ede","first_seen":"2026-10-09T15:48:33.077231Z","last_seen":"2026-10-09T16:06:24.062182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260918-bb2dcdd1.jpg?v=1789708108","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.241Z","timestamp":1791561869241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260918-bb2dcdd1.jpg?v=1789708108 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc74c-23f5b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 147291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147291,"size_decoded":147873,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=Yellow Air Tractor in Action - https://wingsandsirens.com], progressive, precision 8, 900x600, components 3","md5":"cce2f8a4b66052f5f4c12397da00531f","sha1":"85e60888f63c8467c0ad5c517953a83e144e9028","sha256":"83d9b7a1e5889236a34beee6ce61ccac933420aff173abca9862c0255c171462","sha512":"086db097e99c6921f37d005f74ebcdfa5e7829fb639bfcbc6c42f1d0b1f6f9edaaff1e0647e073e91cee0360f8929a554c33f021931b41abb1c47e698dd88a47","ssdeep":"3072:7tW9mNET0Nm1jBT9uUiS/nsVYr/n7d/ZpapEqJsOgsV6iXsoOn20cF:7gyECQ1AU8K/npzmzJsCVrsV27","tlshash":"e4e3120868e329754391de37c68156e70c1af2a9f743ac5db32791de011bafc6ea0d1d","first_seen":"2026-10-09T15:48:33.094395Z","last_seen":"2026-10-09T16:06:24.068003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260918-53d4503b.jpg?v=1789708113","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.244Z","timestamp":1791561869244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260918-53d4503b.jpg?v=1789708113 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc751-15d22\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 89378\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89378,"size_decoded":89959,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=On The Tarmac - https://wingsandsirens.com], progressive, precision 8, 900x600, components 3","md5":"ae66777011429a9cfbbdccf3e554446b","sha1":"5ec928ed624aa869307d25c9774effd17f7dd0e8","sha256":"7931e7ceabed79badd1bb4bebd275e8ce503afa8db76cb7b4a3a5d791e5d5f47","sha512":"ab6aa27e60980613c9efa3b2bfb8c31790177868afbd1911acc66b056755b23b46c81e2b97e4fff4070977a512146ba4a847b580ebb93cb72a28205200ae498e","ssdeep":"1536:zkIlqlTeWa4ALCUVKS62NHypgWDpQPeUGDPG0DM5v0jEo09A3aUb5Ss:zzWa4ALrVt62NyKW1Q6TDA0jf0A3aO5N","tlshash":"8993024e22434251e5496177d178e667f230ae502b23fe6d2b134a3436e01f77cb8abb","first_seen":"2026-10-09T15:48:33.101071Z","last_seen":"2026-10-09T16:06:24.076178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/static/app.js?v=29","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:28.950Z","timestamp":1791561868950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /static/app.js?v=29 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=3600\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aaca222-17a2-zstd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2305\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6050,"size_decoded":2955,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c65ae21a524761d42232d8487ad57394","sha1":"23208ef772cc90fc792c30b05e201a8831dd88f9","sha256":"055a4de44da602f2fd867625a79133e46519e6d7d0282255c153e06187c19c8f","sha512":"40293fbf60e5a0315b2db88f4e86c5e47a2843cdb75fc0a57a731959c90f2c3be3cbadc7f873b9482050ddf01ce7d34e0d1e4d6b4b6314f813bd11b913086114","ssdeep":"96:QfsAIZFho/2M8jLGWeeEJ6jKn1KqH1j0vEhoeKQUdlj8nCaNifH/RXPf0e2L:dZF7rjetDHHVUjHQiltfHO","tlshash":"ddc1502b2dd6147b50b3e17a668fe390fb7605032508ca013dadc1812fa493947beee9","first_seen":"2026-10-09T15:48:33.106269Z","last_seen":"2026-10-09T16:06:24.081857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260918-9e963fe6.jpg?v=1789708103","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.236Z","timestamp":1791561869236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260918-9e963fe6.jpg?v=1789708103 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc747-117fe\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 71678\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71678,"size_decoded":72259,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=Aircraft photographed on 2026-09-17 - https://wingsandsirens.com], progressive, precision 8, 900x600, components 3","md5":"68893b5f6363fb51822e4228a23badca","sha1":"98cc92c739c7bf131f326bdf19e69ad112585996","sha256":"5f4a7d1729e15cdcee514586a307f98609889b625dfe63060e535f92aa26293f","sha512":"7c8ed666670071de90538644598883e9a33c43b625b842f1a719b80bce131f8bb93fc896c4676ee96f966256d4d173cfff2780f9ea48f63e63aa0a9d96d1f3a5","ssdeep":"1536:5UW4fLtj23TxBPYUlabpgKs0vxbOyb2RlwRX/+n2F2BbPFzyLYfz6Cy3:5UVLtj2DXPfabpgJ0vNOyb2RgX/+2Fo6","tlshash":"fc63026d6535b225a86be934463860f0f698fc294d7002bd056bbb7d4c9bfaf218413a","first_seen":"2026-10-09T15:48:33.111967Z","last_seen":"2026-10-09T16:06:24.085857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:04:28.303Z","timestamp":1791561868303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 09 Oct 2026 16:04:28 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27024,"size_decoded":5188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10216)","md5":"74d8f16becea4b62db0c4666a7e5d3aa","sha1":"2eb6f0123ac9802743be35bd878725e8c6ad00c9","sha256":"54ae692b55e91f58dedc8301cc558f13dca2ca336de88ba164748578a00a935c","sha512":"a3360b66a9a424c02fc774e46d1a93607f9ede598171d8cbc1b814330e851b4bd87f4f1b9d04cc332135a16fa0ce2d565c22278d2265b81079e41c9778ea9ae2","ssdeep":"384:XqIIPdeauacwM+vzJTzJC94WuG3OWL1Xpx/Ur1lo2xjP6OI+Tm8fM8BMqgs7Qb:XqIIPsauacwDDE","tlshash":"80c283a0e0f21a7b51d3c1a12b949f76a6b1ff2f9545080db76c16801b9feb2db03619","first_seen":"2026-10-09T15:48:33.069657Z","last_seen":"2026-10-09T16:06:24.093034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":4,"connect":105,"send":0,"wait":117,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/static/style.css?v=29","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:28.948Z","timestamp":1791561868948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /static/style.css?v=29 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=3600\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 09 Oct 2026 16:04:28 GMT\r\netag: \"6aacc79f-98c1-zstd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39105,"size_decoded":11442,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (324), with CRLF, LF line terminators","md5":"4b0a083231b1895e669838a6bd175223","sha1":"8ff57ee6351f28aa15e0514b80ae3426bd761d45","sha256":"37d0c981040cd2c090e0583b1fc4629a95e62cc91dcd98cc55e7531b357c2a73","sha512":"bb22e0c5e09600e3d02d191bf572b92ab0b7560ed05e2a335d755f06f6a5c92760839d64089c2c205b76b1b4b3d8ed9e151039d9a983a8fc9a262b78ae1a28e8","ssdeep":"768:rXNHP/OmgwpYFO4dJRMnEVRt/RJ4+4xQR2:7BVppYen6JtPR2","tlshash":"670371622f112235b527eb64fbcbe7cdf35cb212950542bdbcda1004828e2ba556df9c","first_seen":"2026-10-09T15:48:33.072187Z","last_seen":"2026-10-09T16:06:24.09995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/display/20261008-6125df1b.jpg?v=1791463162","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:28.954Z","timestamp":1791561868954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/display/20261008-6125df1b.jpg?v=1791463162 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6ac78efa-22b2f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 142127\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142127,"size_decoded":142709,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=1R4A6147 - https://wingsandsirens.com], progressive, precision 8, 2048x1152, components 3","md5":"163f540d6a3b300f3a29286d8a18efb5","sha1":"f4840fb6fe7536a681fe7ddf957b51fb08d71596","sha256":"975e565245803d60649ea9833c7d2e60da5c0ec320a3753f8c64b5d815cde455","sha512":"fef8a38a7384688824d6d77e04447bc25673097606e90de273035a859ecfc8d5e7457f03a9e50db11b422d486acf972ec3b201e3ad1432846fe48f91048fe20d","ssdeep":"3072:sEQr/ExBwRmBTbyO0UOSu+79mkXSwDv/mjMvEWSyHbCoNT/3t+WQl:ZQbEx0mB3Q8u+7Uk5DDEWR7CoNT1d0","tlshash":"58d302822172cbc3e8745a6e5c95aa05f73e477c4afc728732c5ea77540c84129727fa","first_seen":"2026-10-09T15:48:33.108872Z","last_seen":"2026-10-09T16:06:24.105299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260918-621e1818.jpg?v=1789708111","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.243Z","timestamp":1791561869243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260918-621e1818.jpg?v=1789708111 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc74f-1c7d5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 116693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116693,"size_decoded":117275,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=Air Tractor Ready for Action - https://wingsandsirens.com], progressive, precision 8, 900x600, components 3","md5":"6fbcd546b15a49ea3f332ecedc9eafaa","sha1":"8fd135b889393bbcc2def379f570067982bfa30f","sha256":"c95a282917d568c847632fdfd4a0fafdb20eedfe2f1222a176f581b09b906e48","sha512":"a3136e948dcb13ed09a8b8620934e23f10a3ecee8d093c257006fec63c997f7e431a22d89afc721a9bdf7b10bda7b3a5f7c28fdad415efd0080fd2d291a17c79","ssdeep":"3072:QuhZa2kgzAbxO4AKD1N8bnHx+F8pxiLpTLK:zlkLnAo+RM2WNW","tlshash":"b3b3128cf78af479d22464736a3e9672b07a903d8554c9ba5ff130b0bd0a0594fb9532","first_seen":"2026-10-09T15:48:33.097215Z","last_seen":"2026-10-09T16:06:24.10859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260912-c790e7d5.jpg?v=1789708060","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.246Z","timestamp":1791561869246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260912-c790e7d5.jpg?v=1789708060 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc71c-1b0a1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 110753\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110753,"size_decoded":111335,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=WA Police on scene at Waroona - https://wingsandsirens.com], progressive, precision 8, 899x600, components 3","md5":"ab07aa05d329499dbca1e7a9bd132e1d","sha1":"72d2f9a87d8ec167c4237d374585619b0bc7e6e1","sha256":"1c969a65769c4c56192e12f0af6ae8f3c4473f0b024faf4620431db56191224f","sha512":"eab2f77f6ed633011388c99d00d179d25645540cae69d52089e5338699ba463829111cd2743caf0aa7627f8ce2c52afe43ee02c7ba7c2b1871693fdd6574318a","ssdeep":"3072:10EPJ7BKNQoIw2iPME/9x55k87jDpDeq0mJnPAhecD0J:1LtBKN9/1X5BvNeq/n4hecIJ","tlshash":"3fb302997be647fe02fd17f053068387d47bd88c17912ac5e0a55c8a0a38d7874e85af","first_seen":"2026-10-09T15:48:33.103757Z","last_seen":"2026-10-09T16:06:24.112254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260912-90bfbafa.jpg?v=1789708058","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.247Z","timestamp":1791561869247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260912-90bfbafa.jpg?v=1789708058 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc71a-1a6b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 108217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108217,"size_decoded":108799,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=St John Rural Ambulance - https://wingsandsirens.com], progressive, precision 8, 899x600, components 3","md5":"461768e34f26f6ecf2a67d99b69391ab","sha1":"ef4ed6e309f3b90543da7d7024df85b84ffd2360","sha256":"676d08278a4465ce3c793186d3ca9057ca2235312dd48851d29a6cf207fa5598","sha512":"029bb363bb877b530c7848c12031d4fdbe66aa782b8c50187e1472719aa1a492c6c31d597ec374439865d2404591a6ebab951f086229f202313998396af0ab3c","ssdeep":"1536:tqLdWsyu9O65kqszG/+LkaPdRQT1yCOoXxNwfyuo1+RR77TOXL1+6WzD7v/FOKxH:2gsp7zszG6kT1yCOSxAyuq+RR77YKPcu","tlshash":"59b3025a630117a0a07ca5f19f2796cea877c78b73d95af9f09078a5c6431c8582fcce","first_seen":"2026-10-09T15:48:33.083875Z","last_seen":"2026-10-09T16:06:24.114247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260912-9c8185ea.jpg?v=1789708056","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.249Z","timestamp":1791561869249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260912-9c8185ea.jpg?v=1789708056 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc718-14ef3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 85747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85747,"size_decoded":86328,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=Bunbury Career \u0026 Volunteer Fire Service Collie On scene At Waroona - https://wingsandsirens.com], progressive, precision 8, 899x600, components 3","md5":"875f14ae82712182a527c36df6938b59","sha1":"e5ca9575da91b91a9cc45ca04db0863847d9c280","sha256":"9f776b55b61fcefedb8ec6ed438fef9e5a2f150ce673138abba65dba64c0ae21","sha512":"a9bff34446e3dd1e5f63d2be5309dcd07f3077c4bf583b282b5a30cddfb9dbbdae2a0b0a79f4ca4a6d7f70113040db3506ed20c28f156bac478240842baeed7d","ssdeep":"1536:axLpIkXOHLrCZZcLvCWNZICCqQEU0mGPyq1yykE17eyolkYN90qgzwgdmuSoS:axLpIsOHn8ZcT74N5q1ZPeyolMzwglS","tlshash":"3a831257aa68864bd9d0c3748e4060c5b36def8ee01719584da71a08f54cec45befdec","first_seen":"2026-10-09T15:48:33.126078Z","last_seen":"2026-10-09T16:06:24.115326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/media/thumb/20260912-71f10ba9.jpg?v=1789708094","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.250Z","timestamp":1791561869250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /media/thumb/20260912-71f10ba9.jpg?v=1789708094 HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/jpeg\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aacc73e-a1cd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 41421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41421,"size_decoded":42001,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=VH-FCO - https://wingsandsirens.com], progressive, precision 8, 900x600, components 3","md5":"e1dbd6c680e31de389f2eb2de075b331","sha1":"31ef8b611cf67c1b34650cdaf7412610681e2f7f","sha256":"37869e82f1b0d1629265a2af80f99284e11b6c9cab30374bf1c6b7986f81652f","sha512":"2c177793896e6f71a617a3ac20cb9889f7ab0bd9def258ce5987d9a475dbe371685708ae5a1184c01ad49a305a402429e026315a8908e8b33637c6aa2803bc21","ssdeep":"768:Qlw7hW8dKozD7eOoz9y7SlTdZTemK8VeSbj7EEHL7+VhA:ZBKozneOoz9yOUmKceSbjbrV","tlshash":"e30301c7b8b0459ad085eab40def43c97aea1be2e9084a0fdc8c1d6431fb116cd45c6b","first_seen":"2026-10-09T15:48:33.114841Z","last_seen":"2026-10-09T16:06:24.120647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wingsandsirens.com/static/favicon.svg","fqdn":"wingsandsirens.com","domain":"wingsandsirens.com","tld":"com"},"ip":{"addr":"163.123.236.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wingsandsirens.com/","date":"2026-10-09T16:04:29.618Z","timestamp":1791561869618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wingsandsirens.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:13:29 GMT","end":"Fri, 11 Dec 2026 08:13:28 GMT"},"fingerprint":{"sha1":"34:01:4F:46:FC:98:3C:F0:2C:AB:58:D1:0A:F8:D2:5B:EF:7F:E1:43","sha256":"5D:F4:F9:00:02:A1:84:31:1B:85:A6:E2:C7:52:FA:07:4E:98:FD:A5:33:22:31:31:3E:F5:29:FE:15:61:6F:1E"}}},"request":{"raw":"GET /static/favicon.svg HTTP/1.1\r\nHost: wingsandsirens.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wingsandsirens.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=3600\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncontent-type: image/svg+xml\r\ndate: Fri, 09 Oct 2026 16:04:29 GMT\r\netag: \"6aa516bf-293-zstd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659,"size_decoded":975,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66eb467305973a7c41308c9488830db8","sha1":"ef0a7945efb91e984dcb83e51f7a4363a2717217","sha256":"8bb4b2538de12f8ce7c1f69c575c2d1f1042a89d493d293d459cd4ba46370b05","sha512":"f167bb5d96c75e1d502b0c36a696e2b2a308b19e4fdcb4de9795713323f76c4b837dd4c382cd250f462978c14d07678190e799cab719ecc05594126f9d636eaf","ssdeep":"","tlshash":"a1017dae22ee8838f0310ba49f7d20203926c5d7831c4385bc891eb85f1403dad7f8e6","first_seen":"2026-10-09T15:48:33.088791Z","last_seen":"2026-10-09T16:06:24.125294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"wingsandsirens.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}