{"report_id":"01c70639-296c-49a1-8e90-727aa3eae395","version":0,"status":"done","tags":[],"date":"2026-07-22T10:49:41Z","url":{"schema":"http","addr":"figure03.fun","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"title":"FIGURE03 — The Future Walks Among Us","dom":{"size":39252,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39230), with no line terminators","md5":"7e225679a8de86d9c8b95185c23f8690","sha1":"6b5d2d73ed171e0fcfed1cb59def796c1c542e7b","sha256":"a6ee46065b3a77f40bcf7dddd7add48431efb2d70a29866cc2647ae75ad66138","sha512":"18d24ed60c5f35545da594ca0223aaecc0f3e31b5f69f3e01dcb4b5388483557a055768c4fcaf9cf924811b1665980d3c34c4091808b1794f92e7f1c5b3a3e18","ssdeep":"768:BNsZuQOUaPFaln6HvrJVtl8KvL5EWhxR/d+2ykKNRPnnwpxr4nne2lvkTAQoH:eOfHvtNdtNV0","tlshash":"ce038330b001ce9abd675d75643faf3ea1ddd26bc65bcc18e3e9da11478ac3a5a421c0","dom_hash":"domhashe76fee09a7089fbd74db25fb638babb7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"figure03.fun","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:49:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"figure03.fun","ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-05-27","domain_rank":0,"first_seen":"2026-07-22T10:49:42.345543Z","last_seen":"2026-07-22T10:49:42.345543Z","alert_count":16,"request_count":16,"received_data":675219,"sent_data":7604,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0d3tkj33oycf2.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0952ae1a57d7d561f4f16c4b36463126","sha1":"8dd07917908aac6ab93a33f68c759dda6f56c079","sha256":"2a4653e53a56ac6ea963b296eda9626a685c9838a9603e3ad0280975e118a717","sha512":"203381341c2e9eee890e44b71ab2bda309db48d3105ebe8474d8a75d7ea7a1e4465ae42dbff92153c5271d3ef1eea1e22488816a6a0604a231be93328ee7d5e7","ssdeep":"768:vUosw2zQ3HSqD95hdFEA3tkB7LRCDkZqdqGmV:vpUQHp3M1VXV","tlshash":"9a43d8b57291faa303db91d9c0370012f2780c7130ad64b4b395d8af799dd8992faf69","size":57741,"data":"","first_seen":"2026-03-21T11:33:45.019991Z","last_seen":"2026-07-22T12:18:42.76802Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-22T13:22:19.73231Z","times_seen":197957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"a15569559e70b652d87595fb3e6694df","sha1":"f71c6e53a3a52fb9201d8177540565054b5f5d41","sha256":"af939b85df467f0e49998502f455b2af8fdd98aa6543b2bcbc424d1fcbfc2fac","sha512":"564c10daa2285f83a08d70eb9012710d579f3069381cd2bdd49be9901e7c96c815ac79c451b212917dc7eed3516608d51280b353f532a2315f2c56c4ea0dbc6b","ssdeep":"","tlshash":"40217f06f80af8416c30ed0f722f0f6589d4ecba95762489b38dda8a126197713cc98a","size":1149,"data":"","first_seen":"2026-07-22T10:49:45.525762Z","last_seen":"2026-07-22T10:49:45.525762Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bbb5de4820c77f8c9ee264126f88566","sha1":"a9426056af0bd8648d7a6a5ae1c97ed8f7d5a6ce","sha256":"e51f0e6b111918705e92b1adf957a0eedc33ba6ce90e574bb85fcbe8e9031db0","sha512":"bf2a730838ed6d28dc2f0283212dec45315565e10913694e2cc8fac6c8268c6d530bf16d95b02159c7dac8801d32d28382a0c8dde357a88336a752e49a754426","ssdeep":"96:LzqiCa7cg1xqzc/xmWe4FmBw3dnWF+Ji6vad6wvayHOCzxrva1Wa:8gnqzcpm1BsnvaowvayHlzxrvaf","tlshash":"37c11e6d7006ce99ec5a3d29113fac3b60dd85bb4b9ade78c2d8dd114a428bd67c29c0","size":5743,"data":"","first_seen":"2026-07-22T10:49:45.526708Z","last_seen":"2026-07-22T10:49:45.526708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b81830721f144aea0e319c2178b08cf","sha1":"ad338a9b8451048f0de5ec145f10b7ea99f3f54f","sha256":"609f98bccf5ceb8850668906fcd0e7e9c15f5883248fc01c2101700a3f325e71","sha512":"de6c69af0295592674cd8a7f7d117ad36965d718948e9ef375f180656353b6c0d2713ccb2b3200746cdc6948794e3e0a60b29d4b4bd9fdfe94808db4f18d5305","ssdeep":"","tlshash":"09214825f409fc05ad31fc1f603f5e3145dce87ac4ba982aa29ce906174183a53c89c4","size":1350,"data":"","first_seen":"2026-07-22T10:49:45.527676Z","last_seen":"2026-07-22T10:49:45.527676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"91f1dc1d0f2f8cbcf2f4c1503980b25b","sha1":"ba2f8cdfa24921618eb7dc3cc77bcf75d17ec2ae","sha256":"d98505a86774009a9a03fd2c35141fa46ee8a44d056f49d77791415a950dc3ae","sha512":"a44b4d44e2932f73757d60d1629288cb9548e7e33e8e9c568396672e2b9d3594eb092722208f1f111eba14c8ef9d9c3215d9df62ec671e1addc7f9d6b171ddd8","ssdeep":"","tlshash":"b45126247012cdecfc9b2d70243f5d39625dd65ec59bce61c2e0de218acb838ab826c0","size":2508,"data":"","first_seen":"2026-07-22T10:49:45.528506Z","last_seen":"2026-07-22T10:49:45.528506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"03d0dcc7dd3fcac130374594b2dac083","sha1":"d93f4fd183bc96cb56f5c49548bbbc2c54dae37e","sha256":"8478db3998c721bd45b81d96a324a7992dc94f816e9027c8c21a457f299f84f9","sha512":"e0083a7972e4d04184dbfff7a7b86f652ad88cd2730ce0529b7307cbc929c45c26255aa2503b02b60e0c2228b92fdb8929a1c7e04d7788d18ee72d5177ac8f4d","ssdeep":"","tlshash":"db6118347016dd5dfd9a3d25153e6c3d654ed25b869bce64c2e0ee2086c683dab839c0","size":3362,"data":"","first_seen":"2026-07-22T10:49:45.529403Z","last_seen":"2026-07-22T10:49:45.529403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8f9721f10ebb7de4d5fb9da10963063","sha1":"5f4b53c650044e0844f20eb5e8169efc1bc3f910","sha256":"45a20b807fbe548ef36e3b070de800f4ace136f278d12ae2477e4c862d4e579d","sha512":"7073c810227992526fdca260868ce94f8bdc735b10bd1f7437d28cc64360042c6c7a019e03598844a5edfdf148cf04a9b5f437a7f5b311be152815623903ebbf","ssdeep":"","tlshash":"ab417438b006dd59fc5e3d65143f9d3a608d81bb855adeb482d4ce11074783e7782ac0","size":1947,"data":"","first_seen":"2026-07-22T10:49:45.530295Z","last_seen":"2026-07-22T10:49:45.530295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"a34a648f3ff3458fb7a718aa5ae3f321","sha1":"4d2874697fcac5a4c1b0ddb78e5a84c0b640a7b6","sha256":"78d2e47b9f0c17795ed22472c93c538c5c2c50a5b6065ad7b38d7cc762e788b9","sha512":"cf3e746f5d866f5c757cab0ed61b8689cbbfe6230bc93f2396c19983f2ebda14b41a6ae9cb33155c0d46638fb6bebbfe15d973804bdf65fc33a952dcf46fa2d7","ssdeep":"","tlshash":"0ac08090cc42cc1dc6670f261c3a1c3521dcc574074555469dd5d9291985b3105b5d8d","size":178,"data":"","first_seen":"2025-11-01T17:13:33.98673Z","last_seen":"2026-07-22T10:49:45.531047Z","times_seen":731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6d2423a1e629a0a00a8c3317ea3b129","sha1":"f996eef81e8cf62e53697f86d04c439714e944a4","sha256":"9ef18fae64d91b8518c8182aa5c9e429420b5c5c17f56aadc494c0695c47f51d","sha512":"c141d9b9fe14c42fa47e8f4d701b93cc79703d67348ae73227779b918db3d16ed1faf61672f7065281b960d0368854466bfc3339b6b501a00450cfe84c29f387","ssdeep":"","tlshash":"17c09b11c849fc01d431dc4f603d6f5547d5d47680745d45779cd585515256763cccc9","size":147,"data":"","first_seen":"2026-05-27T16:38:45.64035Z","last_seen":"2026-07-22T10:49:45.531425Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ea9621910316480fedcf696858fe0f5","sha1":"d9d1e56e37153b09cdb0f9cfc5a8d0a3cc32927e","sha256":"6acd1b7119567dc56b5528f72f19facb098975ed928ee999b5d32f1342d743b5","sha512":"e543f11e7eb0dce91cbbfe88183cd9821235d5ff36be615dafac3cf1bbe5dc42c35c3ff475c80010ac85743d560475c43d0d3f4cd7c4fb905aae38ab7e2eb031","ssdeep":"","tlshash":"9d318ea2bd15dd458bc69e48243f3cb9b0ccc7a243a994afe28cd96c85c3e3459f1256","size":1850,"data":"","first_seen":"2026-07-22T10:49:45.532521Z","last_seen":"2026-07-22T10:49:45.532521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0.5pwomnx7nne.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3023157471215200f7e745df42306a66","sha1":"c1c5843dc2af0450468c817d30c5e639ce4d0b88","sha256":"3cb61e5d7a2d37033cb3f0b48f12f3c24ce181615c8928d33cdf65ec5827c8e9","sha512":"ae34d7f41c6913dce6e40559a8d7f959f0b6b952ad12c0c464c3f3052335fbea8ec779631399e5ea211f563df4e909b8841548db863eb5c188ba29590dfef0cc","ssdeep":"384:l8l2kBtT2HDJXVpTYpiiRD2c73oLUqau5hPvV+EuKv2mJ:I1luFpUpiiZT3WX5hPvVpvZJ","tlshash":"6da249247195fceca66b45d0983f800cb32e1eb8d61fe464b3f56c562e54488b063fea","size":23236,"data":"","first_seen":"2026-07-22T10:49:45.479707Z","last_seen":"2026-07-22T10:49:45.479707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0ursk~c~2p0vl.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"97ec2c098aa29e2f65cac1d51db85a95","sha1":"e1af1e8378ddd1d3acb8935c62d01a4680e19f79","sha256":"e5cac795038a17902959ee55d7b60dc606059f3583a62ee49bff20f068193064","sha512":"dec99e92d2a0494f8dbb5368730dbbab94f0639267c9f1906a7cf85044709ab3d763c262becb5c3d8c452b0b04dc629fc31a025590cb364d340fc1c95c8c65e8","ssdeep":"384:nfCT2eGmqg7vB/iTAkOF9qFudambF7EQ0IcT7N:nfCbGmqg75iMVFIFZmb9IN","tlshash":"85a217a97195f4412ba364a5407f500bf238297a286cd0b0a3e6e8f1bdf01add537f9d","size":22466,"data":"","first_seen":"2026-04-05T14:18:16.598053Z","last_seen":"2026-07-22T10:49:45.52233Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/03vcybz4ldxd4.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3476132e4150fb231f51ba8be49237c3","sha1":"4aaa06848d02ca1e9ad8333c0779f6359103d15c","sha256":"2d31b57f386193e0abb2254a4a9c66047eb8a4395d97b6793866a708c852c11c","sha512":"9caa2500d80fe78bcce36665a3405e2aaaca202b462c0219ac321704487c6af1e8de6d467fa2742d25c6a892cd6e7456865ecc0f13c0287e809f50241b71afe0","ssdeep":"3072:0aq6DI6kx1T6Hp6F0rVOAyzPrQwQm9zXLK0v+1K4a+:0aq6DI6kfT6HpRrVOAgPLHzXl+1K4a+","tlshash":"741407f932d1f99207a740e5c03f1006f22c4d76249d6860e3e5dcda756899de2b3faa","size":196152,"data":"","first_seen":"2026-05-09T02:58:09.664177Z","last_seen":"2026-07-22T10:49:45.470607Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/10u3y4bw1ayzs.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4852659b7544a549315c5e41af3123dc","sha1":"d2d87c8175caf4f2e4aeaa450a5319f97458d7be","sha256":"96729d17b8a2af53780da369d20c5a17d99f8e8b76282bee3ef314c46fae5830","sha512":"c15119b7fc3db155f9c8aeae6d91aa3737432488729c4ec4142e15fce934b947d615ae47894ef523a3fe83d626b67a7b5b9e944b9899e4e476f26f88d5d95401","ssdeep":"3072:VFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwd0++z:VFLtKOfGWYpyI9vGzD58nwd0++z","tlshash":"3c24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227314,"data":"","first_seen":"2026-05-08T22:46:46.552483Z","last_seen":"2026-07-22T11:35:45.115727Z","times_seen":2382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/turbopack-14t1r~.kq2cr8.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"de761fd999d3c5a6cf408d3ac7cb4b17","sha1":"b45f37ecf80087a27331757513d75c27dcd07a0e","sha256":"f0d702da4c910eead0067450005b38cf79c292230ad46753c567896f22938e7f","sha512":"05a7a3ecaa15c7aff103953279792cb982a1da47e44c6014a2e7a541f3cd5deee430c07e55965375fe537a920d7120f4288e6c5dd51d68ce34ee521390539796","ssdeep":"192:pQMEaBC83Esgfo2YEo+ZMGnmlF5oT6vh8BT4FIMcXX3rpj2:pQMEatq1XnmlfjCSIt8","tlshash":"0922d8da37a6f07343afa1ebd06b4044f17944a8145d141cd3ace8eb28394ae85e7f76","size":10547,"data":"","first_seen":"2026-07-22T10:35:37.179604Z","last_seen":"2026-07-22T10:49:45.523103Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0fsi8lw5utejl.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","size":282,"data":"","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-07-22T12:42:24.686632Z","times_seen":25278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/03vcybz4ldxd4.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.745Z","timestamp":1784717345745,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/03vcybz4ldxd4.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"2fe38-19e7090a960\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196152,"size_decoded":49565,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3476132e4150fb231f51ba8be49237c3","sha1":"4aaa06848d02ca1e9ad8333c0779f6359103d15c","sha256":"2d31b57f386193e0abb2254a4a9c66047eb8a4395d97b6793866a708c852c11c","sha512":"9caa2500d80fe78bcce36665a3405e2aaaca202b462c0219ac321704487c6af1e8de6d467fa2742d25c6a892cd6e7456865ecc0f13c0287e809f50241b71afe0","ssdeep":"3072:0aq6DI6kx1T6Hp6F0rVOAyzPrQwQm9zXLK0v+1K4a+:0aq6DI6kfT6HpRrVOAgPLHzXl+1K4a+","tlshash":"741407f932d1f99207a740e5c03f1006f22c4d76249d6860e3e5dcda756899de2b3faa","first_seen":"2026-05-09T02:58:09.664177Z","last_seen":"2026-07-22T10:49:45.470607Z","times_seen":66,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":205,"receive":99,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0fsi8lw5utejl.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.753Z","timestamp":1784717345753,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/0fsi8lw5utejl.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 282\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"11a-19e7090a95a\"\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":749,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-07-22T12:42:24.686632Z","times_seen":25278,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0d3tkj33oycf2.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.754Z","timestamp":1784717345754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/0d3tkj33oycf2.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"e18d-19e7090a968\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57741,"size_decoded":14312,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57739), with no line terminators","md5":"0952ae1a57d7d561f4f16c4b36463126","sha1":"8dd07917908aac6ab93a33f68c759dda6f56c079","sha256":"2a4653e53a56ac6ea963b296eda9626a685c9838a9603e3ad0280975e118a717","sha512":"203381341c2e9eee890e44b71ab2bda309db48d3105ebe8474d8a75d7ea7a1e4465ae42dbff92153c5271d3ef1eea1e22488816a6a0604a231be93328ee7d5e7","ssdeep":"768:vUosw2zQ3HSqD95hdFEA3tkB7LRCDkZqdqGmV:vpUQHp3M1VXV","tlshash":"9a43d8b57291faa303db91d9c0370012f2780c7130ad64b4b395d8af799dd8992faf69","first_seen":"2026-03-21T11:33:45.019991Z","last_seen":"2026-07-22T12:18:42.76802Z","times_seen":449,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0.5pwomnx7nne.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.755Z","timestamp":1784717345755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/0.5pwomnx7nne.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"5ac4-19e7090a961\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":23236,"size_decoded":8685,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12517)","md5":"3023157471215200f7e745df42306a66","sha1":"c1c5843dc2af0450468c817d30c5e639ce4d0b88","sha256":"3cb61e5d7a2d37033cb3f0b48f12f3c24ce181615c8928d33cdf65ec5827c8e9","sha512":"ae34d7f41c6913dce6e40559a8d7f959f0b6b952ad12c0c464c3f3052335fbea8ec779631399e5ea211f563df4e909b8841548db863eb5c188ba29590dfef0cc","ssdeep":"384:l8l2kBtT2HDJXVpTYpiiRD2c73oLUqau5hPvV+EuKv2mJ:I1luFpUpiiZT3WX5hPvVpvZJ","tlshash":"6da249247195fceca66b45d0983f800cb32e1eb8d61fe464b3f56c562e54488b063fea","first_seen":"2026-07-22T10:49:45.479707Z","last_seen":"2026-07-22T10:49:45.479707Z","times_seen":1,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/image?url=%2Ffig3.png\u0026w=1920\u0026q=75","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.765Z","timestamp":1784717345765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/image?url=%2Ffig3.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13418\r\nConnection: keep-alive\r\nVary: Accept\r\nCache-Control: public, max-age=14400, must-revalidate\r\nETag: VEgu3qefUGlkwhMlRPuS2re6OeDQ_jXbNWhoXNz1iF4\r\nContent-Disposition: attachment; filename=\"fig3.webp\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13418,"size_decoded":13960,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc3a02995ee5aa9249d4583dc344c2c3","sha1":"333b2fb244be68321c7c902e59ca06a3d7e7b475","sha256":"54482edea79f506964c2132544fb92dab7ba39e0d0fe35db3568685cdcf5885e","sha512":"93e077331f765800a7915be73627fd53bb1505394ecbf00713c36e0c5958ff2e6833451ac01df515a70b7ebfd7615fb3836f4c0b008bb4586e968984692ac6f5","ssdeep":"384:qcT60iiESb96ZWcUIF6Hg+1+aWE5LaAsIvV/+I:F1cSp6+hHgg+QvV/7","tlshash":"2252bf7a24e49a66b409fccb2019c35b6d8461fdc69f3dc47f815db12866c4b6017b18","first_seen":"2026-07-22T10:49:45.49438Z","last_seen":"2026-07-22T10:49:45.49438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":380,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/favicon.ico","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:06.261Z","timestamp":1784717346261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 27 May 2026 03:07:19 GMT\r\nETag: W/\"486-19e6766a1e8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1158,"size_decoded":1636,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7fd2964a80039852904c4d1c0f72ed87","sha1":"c51827ee90f8adfc72d5a376f89043c1802fc3bf","sha256":"650e3bea059dd7d09893076c0f4da766b27e01e62dd4db282c18aebd104f2e59","sha512":"729b8bb473809ef2a65e93d121d668ee2b07d7108ae69b4063cecf84d5e02bd77801f97cd5cd8f6e2ffac03085caa76b4351d1411a039177ad9c32b477d566b7","ssdeep":"","tlshash":"a921d79f412c4c6acba583730533c0e4ace63e1d813691c71d91656703d5c5e3130b4c","first_seen":"2026-07-22T10:49:45.502391Z","last_seen":"2026-07-22T10:49:45.502391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/api/stats","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:06.362Z","timestamp":1784717346362,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /api/stats HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":591,"mime_type":"application/json","magic":"JSON text data","md5":"da471d0897015b6e6b4f652018b3fe88","sha1":"8a2a398749e43d4e918c372442e9445e32644328","sha256":"9815b35b06c1113650e53d370fc7a439eed8b569ef32223f6d7f3b48e09200c1","sha512":"d0bbae6dab697feb56ae232adf3cb6affe4629249d2b5d00cfcb0124b12f676be9e00165f7f1a561e5e76f7259e0a4de2803a232ce67ebdb33b493f54e3f6a18","ssdeep":"","tlshash":"80d0239c43f441cc928f646fc10c54614cdd71954fd6281741b40f4cd0954fbd40f56d","first_seen":"2026-07-22T10:49:45.503706Z","last_seen":"2026-07-22T10:49:45.503706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.741Z","timestamp":1784717345741,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2 HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:05 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 29288\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"7268-19e7090a95f\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":29288,"size_decoded":29708,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-07-22T12:36:48.579925Z","times_seen":8445,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":199,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:06.259Z","timestamp":1784717346259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 27 May 2026 03:07:19 GMT\r\nETag: W/\"486-19e6766a1e8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1158,"size_decoded":1636,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7fd2964a80039852904c4d1c0f72ed87","sha1":"c51827ee90f8adfc72d5a376f89043c1802fc3bf","sha256":"650e3bea059dd7d09893076c0f4da766b27e01e62dd4db282c18aebd104f2e59","sha512":"729b8bb473809ef2a65e93d121d668ee2b07d7108ae69b4063cecf84d5e02bd77801f97cd5cd8f6e2ffac03085caa76b4351d1411a039177ad9c32b477d566b7","ssdeep":"","tlshash":"a921d79f412c4c6acba583730533c0e4ace63e1d813691c71d91656703d5c5e3130b4c","first_seen":"2026-07-22T10:49:45.502391Z","last_seen":"2026-07-22T10:49:45.502391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/api/gallery?limit=12","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:06.368Z","timestamp":1784717346368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /api/gallery?limit=12 HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1501,"size_decoded":1871,"mime_type":"application/json","magic":"JSON text data","md5":"3c576e7ecc35562cf418c521db3be43c","sha1":"e02901abafe7f51d10716c90b88259bc3ffb6fde","sha256":"64bb4cd24499dea2fdc8c2fb5bf13dbe65d18de9f8618ac85c6c20d8183d5b1f","sha512":"33a9210e41cd1aabc21c80660075228c4591e06f0902ec5f4e7ade2e1546e79584b139362e472a83689a775ddef3ac8b608a5c5e4501d5adea28d26dfd9b8e9f","ssdeep":"","tlshash":"3431f1b4ed3c479f2e299d09824760ff97d5b8f33cfa2464bc456e78caac40b424a850","first_seen":"2026-07-22T10:49:45.510982Z","last_seen":"2026-07-22T10:49:45.510982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/10u3y4bw1ayzs.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.747Z","timestamp":1784717345747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/10u3y4bw1ayzs.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"377f2-19e7090a959\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227314,"size_decoded":71481,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4852659b7544a549315c5e41af3123dc","sha1":"d2d87c8175caf4f2e4aeaa450a5319f97458d7be","sha256":"96729d17b8a2af53780da369d20c5a17d99f8e8b76282bee3ef314c46fae5830","sha512":"c15119b7fc3db155f9c8aeae6d91aa3737432488729c4ec4142e15fce934b947d615ae47894ef523a3fe83d626b67a7b5b9e944b9899e4e476f26f88d5d95401","ssdeep":"3072:VFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwd0++z:VFLtKOfGWYpyI9vGzD58nwd0++z","tlshash":"3c24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-05-08T22:46:46.552483Z","last_seen":"2026-07-22T11:35:45.115727Z","times_seen":2382,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":201,"receive":99,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:49:05.097Z","timestamp":1784717345097,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nX-Powered-By: Next.js\r\nCache-Control: s-maxage=31536000\r\nETag: \"qlab34odkrod0\"\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":31594,"size_decoded":6648,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31572), with no line terminators","md5":"d73acb9aa3e3183c2439ece03c6dc718","sha1":"ef1654a6166389db9d66a7cc05555c4a66507ce2","sha256":"55b603297c46c45d344c9d67e41f5314d1e7ff4883a56133658db00c6817f4e6","sha512":"6bf33789d9811c2e00ff11c5915a35e3369d822175876d6bf7224a6f63ec41c52f02fc19ea788bbeb65430a68d27877f2cbafd5d4d513552cc2944643f6858d9","ssdeep":"768:PCSUON2OUaPFalnxHvrJJAJSWhxR/dUkKNRPnnwpxr4nne2lvkTAQox:2OiHvtsd7VI","tlshash":"e0e28430b001dd9afda76d69213f6e3aa0cdc56bc65bcd69d3d8ca1147c6c396b826c0","first_seen":"2026-07-22T10:49:45.512665Z","last_seen":"2026-07-22T10:49:45.512665Z","times_seen":1,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":71,"connect":104,"send":0,"wait":109,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/media/797e433ab948586e-s.p.09zddjkbdep5a.woff2","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.740Z","timestamp":1784717345740,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.09zddjkbdep5a.woff2 HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:05 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 29972\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"7514-19e7090a959\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":29972,"size_decoded":30392,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29972, version 1.0","md5":"075226e68ad06f734d7920a0fcd35b39","sha1":"ef6dca3a2a3646c3935f3d46a0879dd780ea7f9f","sha256":"d862e0cb912309b51e5408427216d449095092c53345af79ae9da917fb3fb8eb","sha512":"f639cd367328c30b7d1dc790511e8c3f288886f91fe21a0e54c48c9bff70302962f28a20215ada81b4e269437c8bd397cec7ae8c96c2b4b952eac5361cd85bfb","ssdeep":"768:FzbzCDmLBtXaaTN5g+F+wCByvz0rcUOPPxsT9nvEb+D:FHzC2BtqaTr9F+wDgrcUO2OQ","tlshash":"cad2e1b0c3fcf815e992ceb3b1a51c6b76e20d2d433b60c9807f659a88d5227a948f04","first_seen":"2026-05-14T03:36:35.107349Z","last_seen":"2026-07-22T10:49:45.521078Z","times_seen":3255,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0ursk~c~2p0vl.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.744Z","timestamp":1784717345744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/0ursk~c~2p0vl.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"57c2-19e7090a961\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22466,"size_decoded":8014,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19032)","md5":"97ec2c098aa29e2f65cac1d51db85a95","sha1":"e1af1e8378ddd1d3acb8935c62d01a4680e19f79","sha256":"e5cac795038a17902959ee55d7b60dc606059f3583a62ee49bff20f068193064","sha512":"dec99e92d2a0494f8dbb5368730dbbab94f0639267c9f1906a7cf85044709ab3d763c262becb5c3d8c452b0b04dc629fc31a025590cb364d340fc1c95c8c65e8","ssdeep":"384:nfCT2eGmqg7vB/iTAkOF9qFudambF7EQ0IcT7N:nfCbGmqg75iMVFIFZmb9IN","tlshash":"85a217a97195f4412ba364a5407f500bf238297a286cd0b0a3e6e8f1bdf01add537f9d","first_seen":"2026-04-05T14:18:16.598053Z","last_seen":"2026-07-22T10:49:45.52233Z","times_seen":52,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":97,"send":0,"wait":103,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/turbopack-14t1r~.kq2cr8.js","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.751Z","timestamp":1784717345751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-14t1r~.kq2cr8.js HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:06 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"2933-19e7090a956\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10547,"size_decoded":4634,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10547), with no line terminators","md5":"de761fd999d3c5a6cf408d3ac7cb4b17","sha1":"b45f37ecf80087a27331757513d75c27dcd07a0e","sha256":"f0d702da4c910eead0067450005b38cf79c292230ad46753c567896f22938e7f","sha512":"05a7a3ecaa15c7aff103953279792cb982a1da47e44c6014a2e7a541f3cd5deee430c07e55965375fe537a920d7120f4288e6c5dd51d68ce34ee521390539796","ssdeep":"192:pQMEaBC83Esgfo2YEo+ZMGnmlF5oT6vh8BT4FIMcXX3rpj2:pQMEatq1XnmlfjCSIt8","tlshash":"0922d8da37a6f07343afa1ebd06b4044f17944a8145d141cd3ace8eb28394ae85e7f76","first_seen":"2026-07-22T10:35:37.179604Z","last_seen":"2026-07-22T10:49:45.523103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"figure03.fun/_next/static/chunks/0mkv~4o5yy4yd.css","fqdn":"figure03.fun","domain":"figure03.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://figure03.fun/","date":"2026-07-22T10:49:05.743Z","timestamp":1784717345743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"figure03.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:44:32 GMT","end":"Tue, 25 Aug 2026 01:44:31 GMT"},"fingerprint":{"sha1":"86:03:74:E2:B9:25:3E:76:3D:C3:43:5D:51:17:DC:D5:50:99:99:1B","sha256":"87:AD:97:E8:36:D1:F6:8F:D9:CD:AD:36:C5:97:6B:85:B3:11:18:37:93:CB:8D:0B:40:13:99:90:E0:FF:86:7B"}}},"request":{"raw":"GET /_next/static/chunks/0mkv~4o5yy4yd.css HTTP/1.1\r\nHost: figure03.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://figure03.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:49:05 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 21:49:49 GMT\r\nETag: W/\"5473-19e7090a960\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21619,"size_decoded":6060,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (17905)","md5":"a168dec330d5783833d4a4070a1ce928","sha1":"6d5078e7c14243f40892d9c764dd6977569a7e8b","sha256":"1545474c9fdb96c44cc0b742ab7f6433d089c34e45764f8fa28f82821bb595f8","sha512":"01461290aec5f37b316fd44555cd0927577f71a3a410578a683af1cede8c156dbaa8f755c2aa09dd22c8326269b2c3ea8f30612284c825ce31d50eab6baf15bc","ssdeep":"192:daRO71HRZPOuXHRkbQhfts7pKWXI2vNIVtto+WSeTzSP/qCIvS76wjSP2VvntB7K:EOhHOQkMo4WXIlVtto+WLzS/jSP23D6","tlshash":"72a2e875b329d87edda348b3b7dd741c5118a443ce222ad8df422a32cdcb7b21a41728","first_seen":"2026-07-22T10:49:45.523839Z","last_seen":"2026-07-22T10:49:45.523839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":102,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"figure03.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}