{"report_id":"035c6bc9-8b0e-484d-96ca-3427b00ffb46","version":6,"status":"done","tags":[],"date":"2026-04-02T15:14:07Z","url":{"schema":"https","addr":"fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"title":"Возврат средств от мошенничества - Юридическая помощь","dom":{"size":135309,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57799)","md5":"8fdcdecf87b582683fe1a0116e04d28d","sha1":"f7ed35c258ac03260dd0342e2cea27f60fdf8fba","sha256":"4d6d19b72af3502b93c9ad6cb9ab4c63de304713afa2d48933b8c7f212fdf6ce","sha512":"06f57306e89a5d45aa1610fbaed88abdfc91aba5907fd89d18046afa015233828f6a467a58eeee82806f999a0cab5f2b716ebde968c1fa85c916ddc4f52816a7","ssdeep":"1536:G8rUgQmTaAMZo+Hd1+8afmDJxce77/8KZ3EF5UgeUSSPSMuR:G8rO7Sfmbce77/8KZ3EF5UgetSPSJ","tlshash":"4dd3a023416968174033c1c174659f3be9a6996ffe970a013aec4bfb6bfac60741b21d","dom_hash":"domhashbcac2992d317e1aa3db0d5e818ca4bba","first_seen":"2026-04-02T15:14:12.128265Z","last_seen":"2026-04-02T15:14:12.128265Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T15:14:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fco-mains.cc","ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-04-02T14:58:18.868819Z","last_seen":"2026-04-02T14:58:18.868819Z","alert_count":342,"request_count":57,"received_data":6178896,"sent_data":75591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"vz-e5648023-981.b-cdn.net","ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-04-02T14:58:18.867632Z","last_seen":"2026-04-02T14:58:18.867632Z","alert_count":0,"request_count":5,"received_data":1933175,"sent_data":2441,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":8,"received_data":244013,"sent_data":4462,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-04-01T15:52:12.468501Z","alert_count":0,"request_count":1,"received_data":2497,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":12504,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/intlTelInput.min.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e3068a80c7cfb7e0d2833be9544fc91","sha1":"79882b858ba9e06ca5ffe4c899f56859563cae58","sha256":"a538cea99a498e00da1fd7a2a3aea511f390aa4ca7e6ee640163a9f73d18bebe","sha512":"c8cf36658f41ba3a607bf310bf39dc0baac822f6aec7c0ed691053ee5344657884f300ecd6dd80bcd533cfb2df8d1586250417482e7923d21990a628008564c9","ssdeep":"768:DQrJ0FRsgHvXpwJxuiKIixVD3IhIwxTRl5NHkXD5rk:D2gHrixixVD3oTfHk5k","tlshash":"9513d76d6302672babfd8155a4e4a582de6f79460944886c3dfc8fcb0194dc375b3734","size":41959,"data":"","first_seen":"2026-04-02T14:58:27.661068Z","last_seen":"2026-06-25T11:52:15.683234Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/hls.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"668b3935d8ac1385a1ce1a5454cdec26","sha1":"5178a4fbfd1ba38abaf52a211c0e1092ccf73946","sha256":"3b6849e7c23100166c513c2888ccb6f1932b1d0b492fbd07bc1a4ff8318fffee","sha512":"9c3d26a260f0d965f7df2eb64fc1617ff8525ce4211d0934a7a189579811f9a41901a21b09fb50cb9a3a7cf53f8486f79177659b5c61cd2e745c481851c10f59","ssdeep":"6144:ax52zYCo5VplapfQn4RzVt2tFPR5Szfmm6faVqKxh7U4StP1BHTO1OMAt2TMQxI0:a959aB7RzT2tF4lVqKxKld24QZ","tlshash":"c2b429ee3695a01643c2b169903f5507633a7d0a284cc12cfa2be9db2d7994db13bf74","size":541833,"data":"","first_seen":"2026-01-17T07:24:35.921712Z","last_seen":"2026-07-21T08:21:05.340158Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/utils.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e246c225307caeca49f1cb46a36ce6c5","sha1":"9974dbf66f7a248e2343c99c198bdf1f5ef8d466","sha256":"3f1a91ff16ff00df67ee21c1d517dd901e74bf49ce6f8b1f06e9dd8365a533be","sha512":"562192b652002f43db904592b9a5de3bf710015c271bd740770e20170a4efad2b3b60a7a14d57d0acfdb50ce58d8885d085b2457e6e67d11bb16ba0e38476c4c","ssdeep":"3072:9klM0tDKjFs3OwPss3MwPkGeLHtI33lMfMGahvU4sUiZ5S3mLtjo/QQWVkmAmVEB:9klMmDOwew3lMfMGaoIoM","tlshash":"5c44f0ebd63c9737a1d87b35968eb3cd5a8cbca3c858567826c3b54f52788e0706c205","size":268292,"data":"","first_seen":"2026-04-02T14:58:27.665469Z","last_seen":"2026-06-25T11:52:15.716018Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/params.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bec592964d64f61af47986b9d3ef1fbc","sha1":"c6ccbe6caa51f766d302fb56cd77f273ba88457c","sha256":"888b439d1330112af058b1384d429dceaf6fb8a895b1ade5727b3abdc99343a3","sha512":"eacc822a66f3193ef3d3ccbe4b8cf264b93909652612eabab87e799ce71e5a958a2f1d8577ce03524b8f6a7f8b9ba754e9a84b789b21b025bafb4a05a5c6e9b2","ssdeep":"","tlshash":"f2710f1d2c56f4a612b327b9e7979204f8365426224282417cbcda952fb0c1b1babec9","size":3788,"data":"","first_seen":"2026-04-02T14:58:27.682513Z","last_seen":"2026-04-02T15:14:12.175003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/form.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c153dd579df6eddd1a59d4789fa0ccd","sha1":"6c289f619a67e1830cff5110396365657e9781b1","sha256":"dc4ac8f52cc9f3a5e4be692be11f6b2adb4b61f6f78d8857ec42c99eeec369c2","sha512":"7afc41a1ac2fdc9f30eb7f391fab0a151a916e9e72fe92f71a652425beed6da372ddfbb9c77f39b842db61e6c06f047b4374a82b2401b71b523148ca2d840fde","ssdeep":"96:LBVDebfpYjDC5ERU5FwVf3NfrxNhJ/TlJ6NnrUSKWZoTQY:dVDS6CSRMwlBrDH63u","tlshash":"26c19456146008b78e76a669fb8a6108f2ca057f7a80c3523dbc57141ff10d49be0fed","size":5943,"data":"","first_seen":"2026-04-02T14:58:27.701983Z","last_seen":"2026-04-02T15:14:12.166321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/main.js?v=1.4","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93b1ef8e192c7cc7f8c71af9fa32d01c","sha1":"bde10b47e675f629d599625740669f978629b468","sha256":"330b34e35b561eab985814680da3e0b9a59ad9e9b337a2f214ed3d5853c60527","sha512":"dcd04230fba8ba42ec67bfb70cd338da267e3601d90bae8912c04104e0249da7ef39e5ee9405c81e0336126d50fa6c0d607948aec00d47413d407a6243edfd1c","ssdeep":"96:YolrlCOWI50aMOVM6ntiyniKOU0Nimvh6yCphT2eTLVbM5q:YoBcOWI5pfVrtikiKOlimZ6yCjT28LVP","tlshash":"38c15156111a007309b7e36eab55a718fa3012bfb142861a3dfc04294fb2fb140b6fed","size":5980,"data":"","first_seen":"2026-04-02T14:58:27.668819Z","last_seen":"2026-04-02T15:14:12.141619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/swiper-bundle.min.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44074ff4bbe9225670e93dbca387115e","sha1":"771d9ad33ebb38d992714f73534f322282c519df","sha256":"10c42d4d0312194d3c3495c5d01d1c64674826409fba4e1ae2d6d1749b6a6a8b","sha512":"505d8bc30cf5fe9a27f70bd499d5914f46110d1bafa2ee8ea515e4e92a7e4d563ece53312d120a84b63c08460e9fea838ec0eca9202853d06115c4ac82760b37","ssdeep":"3072:AQcYBYNrja+8b7kHGe4G5PqTbWaqGVjj+Anw:AQ7B0ja+8HkHd4G5P8awVjj+Anw","tlshash":"e3e308896120b57646e716cb93e8c25172b54804b40ec5f870bd4caf99bec9803bfef9","size":154166,"data":"","first_seen":"2026-04-02T14:58:27.654492Z","last_seen":"2026-05-20T04:58:15.460524Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img2.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img2.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-12538\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 75064\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfC4ikcDP5uZDGPzUK5L6HmsssYueHx4dFgxf1EBgPcCx0j8tFlul6dv98n7KpHsXZio6pKPakCjI7cOnssJ9GNvlI3yKREPKV96v%2Fjnau9lv%2FHT6Nezj8UspCS7I4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d250b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75064,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1590, components 3","md5":"ff012e2bd02cdb5ed70cf5405b67a6dd","sha1":"fc39076c83a4afc05479b10402b7643743dbbdf7","sha256":"c185be0e29368d5a9baf0cd69c4e5482cedb06fcca31aa6fd786a780f36bc17b","sha512":"c38f53f78bc17a45225f33a372990095b32a733a303a0cd4877b711490627423f8f93ee3adf01fd40e49ec04a9e773791467e78e71f9ca38124ef28eaf178223","ssdeep":"1536:sObC7D4BLin45kUXxhOKVCUz8FswLTGL8dsWs:sWC34BFbBh5EUKni","tlshash":"7473e1ab43d84a4acf1653b8688897ceea7b6525fa11d1f723044723b28e43bfcc14d4","first_seen":"2026-04-02T14:58:27.672304Z","last_seen":"2026-04-02T15:14:12.130407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/arrow.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/arrow.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-2b43\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 11075\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYri7dRAmI3pX9%2BlWZTxqE9NpUDq8jPQxCbIRK9BO1EG7B%2B9JlxYKD7PT9NNUG7qVCrmhiuUv3FlEE67K8MA95AFGdWkuwwXCAPbZC7QHUHLKbSkoRRLBCAiajdnSKc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d150b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"b0153f7c16807edc8c1399fca42a889a","sha1":"8a5768483b6961e1df0054b008be98d9be29f3fd","sha256":"afcf6b0ec815f5f767a2729e300b72efff5dd4fc047ebb060a5bce370bb824cc","sha512":"b8501b643024253a3cfec245e72eb96b6432acb22ffd8d62641a3ee275f5c31d26e24720bf5770738259fa3d3fc0b1e7ea4dc46243cbc04180e9083562df6fde","ssdeep":"192:uBHBQEhhf7U9zXIJhb7yow6ow4P3WKTslRcvgcU7LtlhyKV6eb1E+bnO+O:ujh4tIJhHyo9ow4/WKTYC4TZlkDG1NOT","tlshash":"7432af3608e6ecd6cd67897738ae4e5ed017f83180f906bf29f998e7088b0a8540cd15","first_seen":"2026-04-02T14:58:27.658188Z","last_seen":"2026-04-02T15:14:12.131858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/intlTelInput.min.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/intlTelInput.min.js HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: application/javascript\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69931706-a3e7\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dudxSa6D8W2nNmE7GeEuzbN%2FrsyRgo1gF3K%2B9AjtHAzL8fVRqHlqfBwDZ5P8FF4YYAjI0KyUvlbYA2iFH1cGdn%2Fc%2BF8chNcPJHXpVD4T38JbYJcJ8iRpAe3Eqh4%2FpuA%3D\"}]}\r\ncf-ray: 9e60c772cd3e0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27423)","md5":"0e3068a80c7cfb7e0d2833be9544fc91","sha1":"79882b858ba9e06ca5ffe4c899f56859563cae58","sha256":"a538cea99a498e00da1fd7a2a3aea511f390aa4ca7e6ee640163a9f73d18bebe","sha512":"c8cf36658f41ba3a607bf310bf39dc0baac822f6aec7c0ed691053ee5344657884f300ecd6dd80bcd533cfb2df8d1586250417482e7923d21990a628008564c9","ssdeep":"768:DQrJ0FRsgHvXpwJxuiKIixVD3IhIwxTRl5NHkXD5rk:D2gHrixixVD3oTfHk5k","tlshash":"9513d76d6302672babfd8155a4e4a582de6f79460944886c3dfc8fcb0194dc375b3734","first_seen":"2026-04-02T14:58:27.661068Z","last_seen":"2026-06-25T11:52:15.683234Z","times_seen":9,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vz-e5648023-981.b-cdn.net/696f7ef2-6e65-45bf-bef3-7465ec6b7b47/360p/video.m3u8","fqdn":"vz-e5648023-981.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /696f7ef2-6e65-45bf-bef3-7465ec6b7b47/360p/video.m3u8 HTTP/1.1\r\nHost: vz-e5648023-981.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 4927836\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=30\r\ncontent-encoding: br\r\netag: \"695ceda1-424\"\r\nlast-modified: Tue, 06 Jan 2026 11:10:25 GMT\r\ncdn-storageserver: DE-1137\r\ncdn-fileserver: 1006\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/16/2026 03:47:30\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: bcdc3ede5786df1f91f840ed993b67cf\r\ncdn-cache: REVALIDATED\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"401eddcda2a65fc61810267e7a3509c1","sha1":"06dc2d35447c2fcae5621b407776f100f8d88efb","sha256":"0b0b2a86c51fb45d3b15d2fa08a54b463a9c635a474e1e3632b84cd073c9135d","sha512":"6e43af216f1fefa424efa1824f831fe129604d5c3769233e202bd172f8e72d9010ded26f434838c38d5ac51340e381fc12cefd384b5815dbcfdabb654f0a0b10","ssdeep":"","tlshash":"4e11db9ad548349b923c4fa4ba4230f8f241bd624de1e8c215f247c92a32fe615c85fc","first_seen":"2026-04-02T14:58:27.679478Z","last_seen":"2026-04-02T15:14:12.134328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/arrows.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/arrows.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-72b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvTbTD360jjje8MxcrpQbpnRBUrVmddg3YOkcycMRFjC40t1FZ%2BraKbtT2%2B5Ry0acffoxYV1ZGrFq4KSy19b%2FpmvcSh4CnrsJ35aeEckzyLW4stzOg5p3rVIAaXFfXk%3D\"}]}\r\ncf-ray: 9e60c7729d1c0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1835,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5865f0d94254a1cc567ec7856b22734c","sha1":"e9259ad85234eef4f5e2bf36f3733f26ccc329c6","sha256":"c9b67d80996497b615735ef720891ce2b956320b1af4296a8b743b02a57f19bd","sha512":"89bb8af88a898c40a627abc8bb314003f204b06224ee746e593cfdac4a9830d8b0d4af05a0b634fb2b19f4d651c4f6d82841da408c339e5cfeeab3a46213a581","ssdeep":"","tlshash":"fd31758dd97049bdf248dbc4df13e47430aa20bbca8bc234d5845f0e60e08cb9e195d1","first_seen":"2026-04-02T14:58:27.710621Z","last_seen":"2026-04-02T15:14:12.135009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/countries2.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/countries2.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-abfb\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 44027\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Aaxy7aUzvC80w4vj71nFY2bZaYOjDWCrjeBwbM1Xdye9uGjnukAVkEU1Un3hLKOg7PNUp%2Bi2p6pBJ15kIQqZa2mbh2l0cNTRcoc4Bo6a2IgdAFNihgE5yeKyahUCsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d1d0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3013 x 36, 8-bit/color RGBA, non-interlaced","md5":"dbef25972f0ea6ee1e2f0f5aee5235ce","sha1":"df56b540ee11910d1cc91134ed3cd9913da2a936","sha256":"862be3613c7154465b29f0d9905d2b41f84f0a8436c8cd26376c49bf854906fb","sha512":"ba42e334c8f3222cb855f2b83e3eb97a49a5bca7ae00e166cff8a5d2f8b5efbaf899c619331e823efcd3b817c6953efe27b1d605a387a085965e1bf47007635d","ssdeep":"768:XF2/of83OpSBdr1WUVOCTp6oqVUvKVFDzZcpac4l7WZH3n6bt2p/V:X+ofcO4BZ/OCTp63TdVct4RWZXnOtk","tlshash":"9f13f28742149dca13eb0219b0501a6ab8162052537ab3334d5ad3adf5fdfe9eb4a90f","first_seen":"2026-04-02T14:58:27.730264Z","last_seen":"2026-04-02T15:14:12.135795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/how-we-work4.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/how-we-work4.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-3dc00\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 252928\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ6SfpJnN8QAujITiqbBJFDMqBkSak0qsOcjtx2fLvlJ82lASZPGsgBmlWNWZ%2BJ%2BZBLHzJ06u08TQ5pUI0qN9Py0eacZhyo7AEzYhncBMucotOgn8jpHb4bUOSL9aWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d210b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252928,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x486, components 3","md5":"b76b60e8e720a942936bf0eeecc22ced","sha1":"ac3506a5db2b296f1d617dbb9b221efdfac63af2","sha256":"4df604e22f80f16b9e5c564244e6aca080c47af16ce79930ddd9c84ad7874abf","sha512":"a06fdc677cd479ef0df956e902d40a782d5974ae54f30cfa2e1cdc08332274a78bc98a8180424099949b8a918feb656c364969e27a36b7df4b99420a7e61322c","ssdeep":"6144:+LVsM1iVvlTnfqtV2chWl6ixuIGGSYWBcGza54Nf6OKUctJg:+LCDqtVLhShFGhrAC6OotJg","tlshash":"fc34220183a0deacdf149066ab59d7427949b0110bd0bd6fe6a9b2bdcd362467cc13fc","first_seen":"2026-03-20T18:58:23.120624Z","last_seen":"2026-06-01T15:17:12.285564Z","times_seen":11,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/swiper-bundle.min.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/swiper-bundle.min.js HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: application/javascript\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69931706-25a36\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PUHPHHVY5aiWeNlGb2oDOwV3LjxNWesn71qEQ4w6hh%2FUmxFLlKjE%2BDjw9uEbf0p1sRGqGrCmqp2NhXGokYWUKgv07nXLcYXHfFfuY1DHSKjJo18mQFrkFlUWb2mhzQ%3D\"}]}\r\ncf-ray: 9e60c772cd3b0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65267), with CRLF line terminators","md5":"44074ff4bbe9225670e93dbca387115e","sha1":"771d9ad33ebb38d992714f73534f322282c519df","sha256":"10c42d4d0312194d3c3495c5d01d1c64674826409fba4e1ae2d6d1749b6a6a8b","sha512":"505d8bc30cf5fe9a27f70bd499d5914f46110d1bafa2ee8ea515e4e92a7e4d563ece53312d120a84b63c08460e9fea838ec0eca9202853d06115c4ac82760b37","ssdeep":"3072:AQcYBYNrja+8b7kHGe4G5PqTbWaqGVjj+Anw:AQ7B0ja+8HkHd4G5P8awVjj+Anw","tlshash":"e3e308896120b57646e716cb93e8c25172b54804b40ec5f870bd4caf99bec9803bfef9","first_seen":"2026-04-02T14:58:27.654492Z","last_seen":"2026-05-20T04:58:15.460524Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/bg-slide.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/bg-slide.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/lander/fcs-new-breath-top-form/css/style.css?v=1.5\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:43 GMT\r\netag: \"69931706-28e3a\"\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 167482\r\nage: 950\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRMD7jDWIo5pnW1G8f%2BmWZBvdJYPJXEPAiE2xzimHduUqwR5Fxm08ov8GeVzf29peCGKs8D2rn7AIZfE3x66VJRWQWRVUQ3iz1Xr%2BgG%2F195bsIMtBO8WY9uF%2BJhWGz8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7764d4d0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1501, 8-bit/color RGBA, non-interlaced","md5":"7df36c072538e5b02ddbdc05a4e561cb","sha1":"fb108eed005eaf4c6494173f8857c8e16780c73d","sha256":"10b98c7a85586192c93401c84a2b56c121cf1478c748738dd3ea4e214f27f5bd","sha512":"44751e4c80231d2b5744588601e86c066e62579e6bb083cc259100889954b08cd45d3af0a1174038f14d5eddf43daf5ffe311c8a1280058d6a256e7c2b667698","ssdeep":"3072:YDimgudveujKFBHoYW1smMiDUuhRZnKp67CwA/dGkqLJHe4ZhQxsSAh8J:UinudveCgKYIsmMiD3cgq1GxtDQxs/8J","tlshash":"bbf312464d77c985ce4be1b1b4b207277befcb9a02ca4b0b57008aadec53e936181dd5","first_seen":"2025-05-20T09:12:45.954746Z","last_seen":"2026-04-02T15:14:12.137792Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDTbtPY_Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDTbtPY_Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12360\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 01:56:23 GMT\r\nexpires: Sun, 28 Mar 2027 01:56:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:55 GMT\r\ncontent-type: font/woff2\r\nage: 479840\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12360, version 1.0","md5":"0f681c34dc1949c1ef167cc14efc4cf2","sha1":"b2fe6b27fc6b6fcc2e3e029d655feda38bdf0cb6","sha256":"cfbfb0e36791f82470367d25c5a8d498dc1561a7a66a4172b7c6df749fdf9894","sha512":"35fdd68a803a225b08392cab14b7ba0170e23ae849484b11e9ddb2d7adb5b55e3c02902c967da22b199fcaa7eb5a70d94d9b95141a549cc3a113096b9ed0725b","ssdeep":"384:txwxSkCDw6CpSok6B+dJB9M5bao+9t1lFkI:2Skqskok4+dLGivXiI","tlshash":"9842d1f9f8cae357e660607cc6e57b6d442aad135809228d3580617a0df3433f4d5c5d","first_seen":"2025-10-07T20:10:31.799736Z","last_seen":"2026-07-25T04:24:16.689674Z","times_seen":30,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":219,"dns":0,"connect":10,"send":0,"wait":17,"receive":1,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T15:13:42.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Thu, 02 Apr 2026 15:13:42 GMT\r\nserver: cloudflare\r\nset-cookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax\n_subid=1sjos4f9nmat; expires=Sun, 03 May 2026 15:13:42 GMT; path=/\n07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; expires=Fri, 03 Apr 2026 15:13:42 GMT; path=/\n_token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670; expires=Sun, 03 May 2026 15:13:42 GMT; path=/\r\nx-powered-by: PHP/7.4.33\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLdOtEeZ6BbvQFkHYzJ3ML8dQYNhOf%2B7D%2Fcs4ZtU%2Bb%2FbotE%2FBKr2w3CNUfnPAHPaNc71zcXgk%2FSneA5vl5lRsmgTgE8JuCvhpj0bXEMO4JtoH%2FR1a1lBWTd%2BigV4VtQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e60c76f98e30b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":56972,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7957)","md5":"d2b6d5837ecd05300594cc32118f8aac","sha1":"c1e915ca4d93edb7bfb2780e98006727ea6ef55f","sha256":"e9785d38b532cc7180166064a97ee84a6e218fbe807ed0bdd4e0464b928e3496","sha512":"51d44575dd9bf69f29fb50df4ad03caa5f856bf5027fac1088c7a88ad318ddc841bb7212198553dd33c742f8a9f0bb955a482b924ab8a2b269ba5508f28f4afc","ssdeep":"768:5z99xr2jMeJNvce776rff8G5ZTPDK8PE/F5w+c1SOizSSs2ScPV:55/mDJxce77O8KZ3EF5UgOUSSPScPV","tlshash":"8d43aa6041fa649b0112d08ae9156f0e3ed591bfbf17471136ec1eae7fe3865ca2b20d","first_seen":"2026-04-02T14:58:27.721189Z","last_seen":"2026-04-02T15:14:12.138954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":33,"dns":22,"connect":1,"send":0,"wait":264,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/countries1.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/countries1.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-af82\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 44930\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bm2HGxhTQWJ0PIPdaq4DNWOdiv4CnzLIULUOT26FnvZQIaA2W%2F0J3%2F7tYEXH%2BYARDZ3rIHToZwB2VWbaPxuFhzu%2FDva2daFsUDRvxKp0KmUDTJYBel22HUWMiMNWFko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d1b0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3013 x 36, 8-bit/color RGBA, non-interlaced","md5":"1fcab36809e0a855d623e4f70f1c15ae","sha1":"81cee2e4cf90bc47981eebca0e25f7a8601bc1a6","sha256":"bd090367f9ba7a7ce7643847749608f3e86ad9b215400fd4ff8a8bd4c4467060","sha512":"35e582cbf69909f3e987cd404a2db94b1fafb120527076050c68474d07a9d7640bb5ed78e36300258b542868f34169151ae1382fad73a8f051815b2b31780e52","ssdeep":"768:eoiJgWr8nEWMzbvk2xe5GlZFE6gZeCOwTIFvpCtZ9WXIQYilA6oCzxcpOjipRL4N:eoiyi8E1dA5GlZFE6MezEtZ9fil1oCzB","tlshash":"881302cd65ecc66f68a26c7bd78b1a3b576181e0bc136b1434660d797ec3a23d8d41e0","first_seen":"2026-04-02T14:58:27.712241Z","last_seen":"2026-04-02T15:14:12.140221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/review-img2.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/review-img2.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-363d\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 13885\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSOBzGEz7N%2BGZsXxh4KUYtukRHHGKxUIPy%2Bx8sPbIJ0kF9sMOqpVAunCEbozzdqAy5lREC%2F0vuySYFGA1m7icTjfYpq0XWflalKzH3LgOaMqoj4DQZ789hYjAlXDHN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd300b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13885,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 163x163, components 3","md5":"cee310a7b6e211e9a0915ae57565f4f4","sha1":"e28b42c96f11953891843d665905da83c89354a3","sha256":"6f2a840865de8947cb6f5e601e7c8e38bc9914e5bfb61fa07c18c120fe28cc5e","sha512":"f17143b0833d6876f34ae9547e54064fc4e2be94b92b4c25c2acf504fffadbac4bfe07db81a7353e8b9feef1a5b5a7eb55491375ec0b60a19d7553cc851e33e7","ssdeep":"384:TNxbMoybKYuCUenkkpPov7n0yFJOK6V2OiA5eH3:TNxNybKXCU89ovb0yvOKGIJ3","tlshash":"8452d05da19acfd25dc861f279f8e175a88c2e286c23554e43338330b24acece9340f9","first_seen":"2026-04-02T14:58:27.66785Z","last_seen":"2026-04-02T15:14:12.140915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/main.js?v=1.4","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/main.js?v=1.4 HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: application/javascript\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69931706-175c\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TX6EyzvwNxx8fBOKOiR0FiFt3%2FFSiKRbWNS%2FZBeZzNIZ17zghgRLD%2Fv%2Fkgjt1Inz%2FzeVKuAhTrTf6wHt%2BVxWiGHnbzz%2FrqgZOe3pZ6Sb4M19oqnYKPhFspVJiYGmTpg%3D\"}]}\r\ncf-ray: 9e60c772dd410b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5980,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"93b1ef8e192c7cc7f8c71af9fa32d01c","sha1":"bde10b47e675f629d599625740669f978629b468","sha256":"330b34e35b561eab985814680da3e0b9a59ad9e9b337a2f214ed3d5853c60527","sha512":"dcd04230fba8ba42ec67bfb70cd338da267e3601d90bae8912c04104e0249da7ef39e5ee9405c81e0336126d50fa6c0d607948aec00d47413d407a6243edfd1c","ssdeep":"96:YolrlCOWI50aMOVM6ntiyniKOU0Nimvh6yCphT2eTLVbM5q:YoBcOWI5pfVrtikiKOlimZ6yCjT28LVP","tlshash":"38c15156111a007309b7e36eab55a718fa3012bfb142861a3dfc04294fb2fb140b6fed","first_seen":"2026-04-02T14:58:27.668819Z","last_seen":"2026-04-02T15:14:12.141619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/css/swiper-bundle.min.css","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/css/swiper-bundle.min.css HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: text/css\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69931706-4822\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4Kvfn52OVZhs%2F3SwZYw8urJjmBc0FWgyl5TM5PCMqs9LHpxzEH8FqeWEXpma%2FwrSw2SseBGQIVKtNFANrhZUYUke3uV8%2FxjusbQOyRrjf%2BGlVkRNHxRdM%2F2juPYwaQ%3D\"}]}\r\ncf-ray: 9e60c7728d0f0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18199), with CRLF line terminators","md5":"ffce2689392d0ac46599f36a420ec555","sha1":"530bcdff1d8e11ffad04bb93477865119832875a","sha256":"898854da6d6bee544883f83bd7020b6d1cff34fbae1edf550180724e8842a012","sha512":"47761b38692068bd83907969b9cdc925524824352679ee805d6dfe9a9f68710780ff843ae251c36213eb3c9555f7088685f6538095b52ef4af0a556d6cdb5ed6","ssdeep":"192:68MmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbw:6sUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"b78266a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee48d7facb9132f2a9","first_seen":"2025-08-20T01:55:10.581141Z","last_seen":"2026-08-06T18:06:08.930984Z","times_seen":183,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/review-img1.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/review-img1.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-edef\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 60911\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhpnraZsLT1JFcDNaT%2BzfGMb3t43u97LviRjFhG8xgMOCIA2QDQDpmajpbSVufVm1f%2BmXu3ztu%2F1Tnpvb%2BY8%2FR8LOGeXdTSvAyA2FShtPxCzR3I8HdJVBnZMUvPrvOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd2e0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 229x229, components 3","md5":"b989b5a9b4ee7cda5fe65edaa9d301c8","sha1":"229343c824ad70e5dd48627834c6f8c994d0128f","sha256":"b3d6f4a8df28ce984216341223bf36e7d6fab8de1a092c0f893d9dcebe4fbc0b","sha512":"3f7371d8090c6caf213873649ebf98da5acd767321c60f0b5cccf4722a591e3fb1526edbe09066a841942c2a2795f82596887321b3b586b4e46b7b67afdffa4c","ssdeep":"1536:BB85kA0DAFgDqfrYO6bY4OAspNx/YuSK1ARfsef6gGHfhtaK:H85Xqgqb/spj/fSbJseCfff1","tlshash":"3153f1288dca881e851e09b3a14a16d4d1c0cdd263f9b53dcd8fef42ef041e69618bbd","first_seen":"2026-04-02T14:58:27.717502Z","last_seen":"2026-06-01T15:17:12.290235Z","times_seen":4,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/slide2.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/slide2.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-317be\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 202686\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FVCl60%2FPYKTTIf8%2FqRXtNHPUV9s5wb99frJezcfPZYUVDTb7sus%2BNIFRskMswV52u6y46418x4ktoyAACYxi8xZHdcq7yTwFypNfBABuZ6T%2FT4vFbkGYhhWjtm8DrA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d170b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 616 x 616, 8-bit/color RGBA, non-interlaced","md5":"e16680a1b4936d081b459fc3c4dfd872","sha1":"b855174726d70732a4eb633e457f41f33adf1d55","sha256":"7ee9745dab74be440be2422bf40a13429ecb80609da94cccd06d52a556b77a59","sha512":"b1f3da567065d26ee61a91bcfc5db2b9271926368983f8b5a45598e220b9ebec4e0e40eef80acc23f361ec7073406179a7c049eb2b1dbc90a9be16cd95191930","ssdeep":"3072:aZoY5EFuWPr9pTLWhYzY3Yvm/tJ66iNo4r+FLHdkFpbi3w5uxQJEbhn/8V39UagT:Hbz9pTUrYEtJ+N0kVdbJEbhLag3OW","tlshash":"2f14126bc14c19aeb3124932d45ac2ac920c4f2bca5dc6163fbc1dcabf1471daf67562","first_seen":"2025-05-20T09:12:45.988122Z","last_seen":"2026-04-02T15:14:12.143703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/procedure-icon2.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/procedure-icon2.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-ccf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMmH4yGaq9MS28pR12hLfxvPv8CV6Bd9ijTBc%2FYgSOKUX9r4DG5839a2KU5lv4Fy37oEI6NuP216x1U1tu2K9roBqV2IDlUDdusrl5I94uO%2F9zc7bCTq18%2FZSZPRnog%3D\"}]}\r\ncf-ray: 9e60c7729d230b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d00b106ca2c85a220e91e7450a8ed374","sha1":"2217f53954c4c17ba21afa0b77363e4a65c1e2bc","sha256":"6944aeb9533b66e5bcb731d225a46b740d38a175aa7bf2f85ae6ce336a6477a1","sha512":"618f4d69521619aa444352914dab4a411efc187ab8b9369830e16d8662e14245ad712c25ddbced81ae7bd103abbd0f9e20b44345a2cbe15516a0e6304d071365","ssdeep":"","tlshash":"546187b87676a3f8e914b6f6cd3d68e4ad0a34da93c60b78c3461d9585170f0ca408d5","first_seen":"2026-04-02T14:58:27.675031Z","last_seen":"2026-04-02T15:14:12.144387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/green-round-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/green-round-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-22c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoA2b89ffnIVwNVD74cFHm%2FverO0Xt%2FuZnrn6kHXx%2FijC87GkzM%2F%2BZWUtL0%2BIA6TR%2Bh6ssCtINC7oeTt2iqEs0gb70L4Rq5JNtS%2BBlHnnQrJIiI2KAmgRG74gR%2FesDc%3D\"}]}\r\ncf-ray: 9e60c772bd310b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47419d38d389e0c0631ec7929abc17cc","sha1":"fdc2de134bd85ecdd2faa3396e63960ca5d4f9aa","sha256":"7401fbe71daf28dce679d0939924b06c9ec62da3342832fee7044e6cb5eaf27f","sha512":"dbe425e21e88a07d8156f8ba357a2a76250251fc3a79d908677313559fe31b232ae809c1f09fa45e4a8f7efbe4d2fb24c233a03f394d969f0d4a6af71be9f70f","ssdeep":"","tlshash":"4bf0eb21c45dd81bc218c349896ce02462aea1f7c9e94120f2c0af4e20180c3280c178","first_seen":"2026-03-20T18:58:23.09657Z","last_seen":"2026-04-30T05:40:17.576818Z","times_seen":9,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/hero-main1.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/hero-main1.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/lander/fcs-new-breath-top-form/css/style.css?v=1.5\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:43 GMT\r\netag: \"69931706-4edb9\"\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 323001\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLvR3YxXnh7%2BEMFxagSfNK4ZYoAOekfgWCVhJeMPQxRsyTnWS%2BxkRW%2BKfl4LwYGHCqo7jIGgClzfuyP%2BD2yBtojEDiYORuSBCsQHj%2Bb9PbE2HZ92X2NtePFF%2BaSW6O8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7764d4c0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 580, 8-bit colormap, non-interlaced","md5":"1c6ae3259589782523c7455c87efcbca","sha1":"a836751408ce0c55db45027c386e6565752e560b","sha256":"2034bec09b83103b8b3781230cc690b1f018fb8c5400d10a46480616ee1111bf","sha512":"32dc5f93652fa85f8a36a924a4d67f39ab80cce2579c1a3aa892a5a27832481f10a738f1e4380917cb74c7ca3efd576436bf1b5ccc56bc4b25928bd9097c035a","ssdeep":"6144:G4UT9rT3JJdgrQWDc6szjZG/L0LCB0v5BykGb05p2QimLsMUGBOw+jL45:MT9rPdgrQO3sC0LHrGbY2QRUGstLy","tlshash":"526423137132bab05d40e39ce8c4bb42fe7a6136561a2b8659bff2d349277502d2cbd4","first_seen":"2026-04-02T14:58:27.686705Z","last_seen":"2026-04-02T15:14:12.145581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/css/intlTelInput.min.css","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/css/intlTelInput.min.css HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: text/css\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69931706-3ad6\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2YrDlqqohESIdompdpayP6JBP%2F1YPxjpsP9aji6BBvQbdJtUO5CHccRIgL2Ix84viVDtFpqgsF9VwO4IsCGSTbkn38BAwPNrnobsfOCjjDlm34SQSbE697eHKYi5d4E%3D\"}]}\r\ncf-ray: 9e60c7728d100b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15062,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14364), with CRLF line terminators","md5":"e7966fa50c2ad05f6a056e912b8839f9","sha1":"711083b412477fc7b787ff202f1c5178040a904f","sha256":"1afc0296b498390f966353b70de3ab19affe891ef38e1ae668ab459efb344062","sha512":"e45935290f692c368cbf95732401b3895d7d6e3f7ebc0e36211de1eeea8556623b362172595261afac5014307c48fd8be02be5508a38997be598e091b48386c0","ssdeep":"192:enqr4q5fnX/zScObOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKaGDQ+Y:3BxvkbOEM7IX","tlshash":"1e6295034708953ee716c1397162d5fd3fbfbf0074d7cad5e6c8822f988798089aaa49","first_seen":"2026-04-02T14:58:27.708892Z","last_seen":"2026-04-02T15:14:12.146285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/help-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/help-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-6b4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lU8wq5p%2B%2FaL1FfD4VdgxLvgle1qCNZrFwkGHGC9OvQhigAgBZdn5v5PGlMofz%2F8E6YMCyO1WHULREE6nH1EvEQsbonlO7W52KEEv2Hup4rGfOLs9SM903RHFUC4QlSs%3D\"}]}\r\ncf-ray: 9e60c7729d1a0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76ace18c971acb78c64c8bca65b5b6e1","sha1":"4bc86a233899504be8daca7f58477fea0a9dbbf7","sha256":"3ca446d57470234b081aaea6dedcdc77a4668713cad6d1186de1963f0847d073","sha512":"9947c2da8ee2bdd2c672d4eeb1820fbf6013391d6140b1f12c301fdafe1112ec56ed65c80ce00a334cd009edf0975d39b3f7d4bd3617484a9573e06fbb4ca4c6","ssdeep":"","tlshash":"5d3142dc17758ac8fc48d2f2df6651edb820147fd6c01b18d3b98a44760706c6952937","first_seen":"2026-04-02T14:58:27.694527Z","last_seen":"2026-04-02T15:14:12.147494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vz-e5648023-981.b-cdn.net/696f7ef2-6e65-45bf-bef3-7465ec6b7b47/720p/video.m3u8","fqdn":"vz-e5648023-981.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /696f7ef2-6e65-45bf-bef3-7465ec6b7b47/720p/video.m3u8 HTTP/1.1\r\nHost: vz-e5648023-981.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 4927836\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=30\r\ncontent-encoding: br\r\netag: \"695cedab-424\"\r\nlast-modified: Tue, 06 Jan 2026 11:10:35 GMT\r\ncdn-storageserver: DE-1137\r\ncdn-fileserver: 611\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/16/2026 03:47:32\r\ncdn-edgestorageid: 1049\r\ncdn-requestid: c611fcaaece2427c31d38b8534c00b82\r\ncdn-cache: REVALIDATED\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"401eddcda2a65fc61810267e7a3509c1","sha1":"06dc2d35447c2fcae5621b407776f100f8d88efb","sha256":"0b0b2a86c51fb45d3b15d2fa08a54b463a9c635a474e1e3632b84cd073c9135d","sha512":"6e43af216f1fefa424efa1824f831fe129604d5c3769233e202bd172f8e72d9010ded26f434838c38d5ac51340e381fc12cefd384b5815dbcfdabb654f0a0b10","ssdeep":"","tlshash":"4e11db9ad548349b923c4fa4ba4230f8f241bd624de1e8c215f247c92a32fe615c85fc","first_seen":"2026-04-02T14:58:27.679478Z","last_seen":"2026-04-02T15:14:12.134328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/how-we-work1.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/how-we-work1.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-3450f\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 214287\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lt4c0eUPS0W7frE5Krvh8mNKbJMOx2brBJPyCFrLpm%2BsQYHt1VP4tkl8iGU954bvyIdGxBqjMLzWAapOqkklpXX4EZNrbeicMcoZd1yMRH8ElPqd7wuaIAj7fMtwHD4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d1e0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214287,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x486, components 3","md5":"ecca63188ad461c97542971c4266575a","sha1":"eda77d11f3bddb695671f7928846e0b386ca37a6","sha256":"93cd6af1800668e7fbce067917286c53b25c276e8b6dbc6304f979cd12e4247e","sha512":"fedba1b7e1fa847d87364bad0cd18dadef187316685a09bc2c0baf7eca32db3131473b0e303236d8e04de02a07ce9a4ceef9d0020db41e183e0d398656ab2c0b","ssdeep":"6144:ucM7OpEyFKqSFf5iZY+2Ssv5FhresIt6GT3wjRPhKJ:ASppFhgf56Y+sBFgz7T3+h8","tlshash":"202422a74d4934376cbbec5f3fc36ef0a093bb16b788c09c14b129cad8aa19105955da","first_seen":"2026-03-20T18:58:23.116286Z","last_seen":"2026-06-01T15:17:12.254387Z","times_seen":11,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img3.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img3.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-13b65\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 80741\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQVRIMb0zjEjaSo8BehP9pz64Z24bXffUi%2BftaUaipsaH%2B6z5B5A0G0LFE9DW8XLpPoc3f9dfDQ1HQV2vMzne7ige5%2BYxMYigfBgWujVrTwiGc%2BF1ShIbAwtV4Os6RY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d260b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1179x1414, components 3","md5":"131402512fdbe099e25f3b14802a6a9a","sha1":"479c3f0446cda697dfe49584f9d44ff2ce13dca7","sha256":"65e1a97ae848528c755e01589b25db390acc622c7a6b10bcd8095b0a49ccd7e1","sha512":"524541ba34a35eb1f949c5adfaf6f935f6b72c3cf13389d1b63623265aecab2e085d4e298d94130d7be33a21f4df51287491c49a8f7933c379612aca7e56c097","ssdeep":"1536:/V9Ghk85afHt7wuMffm2VhFHLDMcWyLZOn+5LfJraCe:XGhdYlM31VhpDWQhph+Ce","tlshash":"3383d0d15f11c18cfab40f769d7a7739fd6f1048ec1260e6994a8cf2908c3364a65ab7","first_seen":"2026-04-02T14:58:27.676063Z","last_seen":"2026-04-02T15:14:12.149528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:21:25 GMT\r\nexpires: Fri, 02 Apr 2027 08:21:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nage: 24738\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-11T23:34:53.868113Z","times_seen":11477,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":60,"dns":1,"connect":21,"send":0,"wait":20,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vz-e5648023-981.b-cdn.net/696f7ef2-6e65-45bf-bef3-7465ec6b7b47/playlist.m3u8","fqdn":"vz-e5648023-981.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /696f7ef2-6e65-45bf-bef3-7465ec6b7b47/playlist.m3u8 HTTP/1.1\r\nHost: vz-e5648023-981.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 4927836\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=30\r\ncontent-encoding: br\r\netag: \"695ceda9-1b7\"\r\nlast-modified: Tue, 06 Jan 2026 11:10:33 GMT\r\ncdn-storageserver: DE-1142\r\ncdn-fileserver: 639\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/16/2026 03:47:29\r\ncdn-edgestorageid: 1053\r\ncdn-requestid: 4547a56fe081cfe6deb803669729ce22\r\ncdn-cache: REVALIDATED\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text, with CRLF, LF line terminators","md5":"72f311341ef33a7b5f11b1a9d2c387a9","sha1":"3ec433a4a43ff69b063ad7c9264a9bbc19201a5e","sha256":"0b8d35055fa9c5efa81afe8319b4af3d3ab969d0658152f43db32b24ab45bc56","sha512":"b9c77b67c5802e46f600d25d2d1f11ab7c95afa17eae4eb80c8819b2714428893a59c13b0d38c5d97b938ca6d7b907045e627700dc8d51eb9cde11d63e8aeb11","ssdeep":"","tlshash":"59f0e595211ee2042c1888d76450b3d17c9aa8ec5acc1a2872bb8dd54193cfc3beb6b8","first_seen":"2026-04-02T14:58:27.692516Z","last_seen":"2026-04-02T15:14:12.151406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":98,"dns":19,"connect":23,"send":0,"wait":42,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/poster.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/poster.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-4c4f1\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 312561\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1JBTAlXtYAV1vHe3uYEEcG0k6%2BKZ3opQuDC9nIYF703cV1JzxkZKzrmCPT7GCAqDMrDuqnTjw9FWPIr0SN8GHc%2BJC6QC8TtO8P6gZip8K%2F%2B4Tm6y0MHeGpHmcfXM6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d110b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1679 x 1049, 8-bit colormap, non-interlaced","md5":"a5b73b21c0533988361b42773b77f37e","sha1":"a9526bd14ebddf1c54cb5f19ebbc0ffd55b7c72c","sha256":"f013d49aae2f3ccbc4900cf0c7f44f6988b5300ed3db23afc4c432be0daf845d","sha512":"0024f7449789b8697fb14e0ad198daf4b984406e45fcf78085f1e8044531360029df6a19b9a358d07d3eb624f1ac648db73d28c6cfd880b6b0734706aa613015","ssdeep":"6144:yALEUA0f97UePrWS+qH0OV2wngpZ75fMupOPaLnjS+dwbydXOnsnXeR:eUA0LCSmwngpZ75fIPKj4yd+nsnXq","tlshash":"e364231ce8bb07cf645041f865cc6b6ce7aad11496c4f6fd80f9a790bbe289e71530a1","first_seen":"2026-04-02T14:58:27.66649Z","last_seen":"2026-04-02T15:14:12.152693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/slide1.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/slide1.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-2e3ef\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 189423\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfeOIc8D5MFE1xE0bdtHO8GQOXHxukvL6K8MaVRrelZzArKUfS4781QckoR0ZWVLz5J1EmL%2FQeycD5JYi6MLy8VQqN%2FP59rACbfEhQp18iAwpYni6yt0eoKCEQpfigY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d130b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 572 x 572, 8-bit/color RGBA, non-interlaced","md5":"dac7a1534eb9c65e96dbc9cd169798b6","sha1":"91ad0c5b748bf16537736f752dba973919c39f7e","sha256":"08d4e5bef80dca5582c260f8cd0e4fdf9545a45c737f756de847ceb5a18ad5e9","sha512":"c1d5ee5a877e1e181d3c2d665a2d05ec7b7deb7feb0d5972e0bedeff9c56ba13f7afa91ef837049609dd370373ed09557cfb3f2da319b89c2e818aa271bf1a60","ssdeep":"3072:tmB5g1JbXymBmRK+JdtWUaagaBclGETAJXS+A/ZgF7u2YovJjKLaftXJ4sgbHMF0:k4JbCLaDaB+GECp6ZgxueBuWfL4hbHF","tlshash":"d704222c27a8873556617e36d4860f83b3c395e1c2dcde0aa93980dd64df454acf32ab","first_seen":"2025-05-20T09:12:45.967999Z","last_seen":"2026-04-02T15:14:12.153505Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/slide5.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/slide5.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-3625b\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 221787\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WD6gs65Ydzz%2BDXzw%2F3ktklpJWJzmHJa9TuvsXM41NclmokIltPTLHZEyJ0V%2FG0h1K0qVpKT1mXuvsfdOB1m2YMeBwE3cLBpQJXIHr547DqkqfPxlsIKVtRdV1xzViWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d190b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 572 x 572, 8-bit/color RGBA, non-interlaced","md5":"5aed240c0094938ae6cdd41379afb5e4","sha1":"362d4951cc61832d7238310ae442864119f7b37c","sha256":"c6e4d65589e7095ac6d976a63b4191410a2e4021214492898bb2691ccb62043a","sha512":"39c8daff19cdd123c96ae5bc991bed5c58dfee4c300b8ef5e21177ba95106682af6cac3e45b0d5fb9d7a2b9b2ff5d9f96fc7284e0991c8c3f5201b3ebe12213f","ssdeep":"6144:stLHYujMZJLc6iX7/qlPJOXwoZQAzKHNx:stLHh14PlkmHD","tlshash":"7d2423e709dc39096a773a96b63fdd1b4480786b56006acc0ddf7a5d8e1e1cea20b0f4","first_seen":"2025-05-20T09:12:45.959309Z","last_seen":"2026-04-02T15:14:12.154769Z","times_seen":4,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img5.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img5.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-16c59\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 93273\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTg8e8C6oJ6Bp4AP8e48BxLHzI5JF%2BUIz28V6MDS%2BpIUjeUWQW9a6ECa4Un5SUkh9dWp%2Bo99rUynId6W3le60zlf8yNmrKIC9r0oudi9WjNo8A9dwg0PclY4mDWh1Zc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772ad280b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93273,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1212x2006, components 3","md5":"7e2f55d02b7c5e02ecca14d7214c4715","sha1":"f13e9a8448e6ccda17a12f83c1f487ae9f993c82","sha256":"01c6de297ee716bf889079e2e6a0bb88c47f9fcde985e1f6995017ecf992d124","sha512":"74fcdf3c93fccd22999095f2d15f14d1ebcab35a93eb13f8f99efa1cb1a45463a0e31a54e92266ff065460d63d1233f9fcb72d98391910983386779e5840d862","ssdeep":"1536:o6wcnQn3iwfqMM/2Ldz6UUP6T2KU+Dj1fnHXqh8TZJ5eXufbzkzoS2P:BruywlMexzpUo2KU41P3n5dDgoS2P","tlshash":"9193f1754b699dcfc82a577094d32367bf3b8778c29946868350697a3ef430abf71810","first_seen":"2026-04-02T14:58:27.693525Z","last_seen":"2026-04-02T15:14:12.155433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/review-img6.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/review-img6.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-699b\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 27035\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xharT8XpidAja%2BaTVgRrX%2B2xIpqTzDr3%2B9%2Fv5lbvLJYaQCkJrm41CMXF%2BNDOMPxUM625aYMAypYE5lL0RAb1wLliWW9lDo24tBecp%2BJ%2BzQWdmKNWeEpksr21O3NbPyw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd350b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 229x229, components 1","md5":"d98383411c5f6b3ad575608bc5a30df2","sha1":"d7f6237672ba86b2331bda4aa401e39e904c218f","sha256":"e3d3ab801f51863b03bf85909c2f270c8eec1dd5f1bfecb21a646f6ab39a7370","sha512":"69cf9d6658eb694c80f23ce880c7caad6e86eab16964512d1c6f3bc0e990c514feb59d66e27687e2d9077c7d8620d260c7ef6c95c39bbeaf26c117085589e640","ssdeep":"768:JbOfIrV5Qv2iwfBCwD0tFszA5DdDc6VQp4/LoT:JbOfIrV5Qv2iQBCqCFzDdCG/cT","tlshash":"93c2f18830697b4ce25f42a1076467f2c2ef95e4ea14b8080b555447dabc4cdefaabc3","first_seen":"2026-04-02T14:58:27.705692Z","last_seen":"2026-06-01T15:17:12.245315Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/how-we-work2.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/how-we-work2.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-440a2\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 278690\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywTnitAc%2BpsPoLBUhoSCHtF6Dd1mLM1t0C8vozxrMggqV4EQKUbLsI%2FdrwzN%2FYrHXrf8BenPuEDC1r6SiC3Y95Uv2dFGsDyReljY%2FEPpG%2Bi8PZ73JDsP7ZNsLUOUQvM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d1f0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x486, components 3","md5":"f7bbcb230dd154ee65ea6b20c6d87ac9","sha1":"4472730d90dbbfa3b32fd8b8a0b5ad9131005041","sha256":"ec769306afd0e4ccaf2fc627916132ac0eb0bdd9b3c6e48ec36656b54d5199ce","sha512":"f21fe8696332de01a9671a69d21417251808d4e5c2c7b1f99b405d24e0b16f1c0eb06593da163fcff0701317a3195de2038c9f2ddffee54bcb9e4361a80b814d","ssdeep":"6144:pME/ytr40SQf5lH5HGvlP4JsWrFCb3fzy8Ex38K8Qxl+jrKMrU19V:pZ5TQf5lNG14+WJw3ry8iW3KIUvV","tlshash":"255423f404058eb0d7964d6fb07b20bdae70aba0769ebb05d2e41e27e21358efc59075","first_seen":"2026-03-20T18:58:23.083003Z","last_seen":"2026-06-01T15:17:12.270972Z","times_seen":11,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/review-img4.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/review-img4.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-dd91\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 56721\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsZ4ucaUBgV6txq11c2DPLp2UZszM63xFuCCnadZ0dki6%2BBKl2mkO6IaRVovjCDOzA4KJpsoYadOJl7SW6%2FMsT7Jep9blDUEG1BYjW12C6wRDq6yY8HyOTY7gDyb1ow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd330b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56721,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 194x194, components 3","md5":"22852fc66a74aea7dd77138016dccbab","sha1":"67c89425c4982b58d94f5143446aedd7dd3c4456","sha256":"8ada8ed3e7cbce443116c6de82aec698dfa3394b38c96c93c193f7cfd1fea8d3","sha512":"06eb16b63bbc27b10821c8cc6fa8691f3f92d97e02b2c159e762a8aa31c2f9929efc47070401aaaa6c04a5ecc4931cd4106b4377cbd5b99d1d452649e38be857","ssdeep":"768:XsDR8lBAWu1dN/yg+RnUd5jONiUAnzSD8Jhx3HhrlWlVT2vaEpEwOFVGvoq:8NoBAWut/r+9UrugzO8J7xYlgVKBFKoq","tlshash":"ae43f1d7a2621f571ec56112f6b1ba0e7580067c2b6f91ec6fad402cf796c40472fea4","first_seen":"2026-04-02T14:58:27.652112Z","last_seen":"2026-06-01T15:17:12.275571Z","times_seen":4,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 24471\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T00:50:40.699247Z","times_seen":256866,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":211,"dns":5,"connect":7,"send":0,"wait":10,"receive":4,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img4.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img4.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-1222d\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 74285\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsRWu9rHef8a6n5zRzoajN7PrCK5fxnGB%2BoIUTFuVTnV0WVyO2AQkewOF%2F2kiDq526t9K0oVrhvv3dGhCRkrqdcHU1dBxlVPdXHNWdRzbL8c7VyDdm%2BkhL7H%2FCHBci0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772ad270b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74285,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1125x2001, components 3","md5":"f7269daf09e61f5ea09ee3af5fd8f4b9","sha1":"2145618ec7e4100b2f991c01120073ba37cbc65f","sha256":"00b804393bb1d5043bdddf3be55e02088d374ef21873a527b76b4ceaaa5947e0","sha512":"949b0c190873ffef1ebf59ab13ebe9eae608a3e19c4ee22e81f856a962dc1a923229f4c295d4204b774ec0d56f11c7e954ca1146260f7c4da4406482102f5f3d","ssdeep":"1536:VRGybFpezSHxnZ+wjFBz03gqlctiN9RSj7Dz1miEnB9zAbUu7T:AzSRZrBigqlcw9Rw3hEnBZAb/","tlshash":"8f73f11ab30ea325c6fd537dcdd7083937768073816510616fa2ed817a676c9afec980","first_seen":"2026-03-20T18:58:23.075377Z","last_seen":"2026-06-01T15:17:12.262062Z","times_seen":11,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/how-we-work3.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/how-we-work3.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-3312a\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 209194\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxK%2F34r09mqQVIY%2BASU082YYxOJXBfYHnwcy7%2FtuwyNOJDAj2%2F%2FWQba4WObaCqf6wnIHgH1VfKMS4AkE8eLsKoX46Iq49Dh70bkX1ztFJcsIyypZvxy%2BUuaFawWn4EM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d200b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209194,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x486, components 3","md5":"d6c5503381b86a5faad1a1a0636da940","sha1":"412835a3e39960a87f42c05f88750b626ea558ad","sha256":"edb094489aa79aa757be71da7b3e1b0e706cf39ad01239aa873a7c61966d553b","sha512":"48e29407cb1468554246c70f6d0df943895f24e224e7b0802c57570f822851d5c27559f40e65783d472fb52d8469c5776056354182d12d1b3d06e324bc4288e5","ssdeep":"3072:ZIAgG4MwQcZFq0FAa1Vzwq3Rng1rdwT2yLKA1LTxOGJVwcAmzfX6RrZ3ZtLw:14MWZFq0FJVzwq3xg/o2yl13zfgZJtLw","tlshash":"a214224a1f1552226b624e32f0da2f50d6eb8eef16d0c39f153ab047cd958df499b0ac","first_seen":"2026-03-20T18:58:23.074541Z","last_seen":"2026-06-01T15:17:12.235964Z","times_seen":11,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 24471\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T00:50:40.699247Z","times_seen":256866,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":206,"dns":1,"connect":21,"send":0,"wait":10,"receive":4,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/favicon.ico","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670; pixel=1393315299147888; token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD; subid=1sjos4f9nmat\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: text/html\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpxeIrMI5YRyVipETir96%2FxH%2FI6NRvIPW5k8bF08tAfqt70QmYeZcaHQQ1ZNqks7FSHsNbV5KKV1b%2Flhspm%2FHV51m%2FTiPUcNrLIUmL3BX4Yj%2BDTTtZdfugSnZglBpTk%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e60c77afd930b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-12T00:55:10.82218Z","times_seen":549420,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/envelope-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/envelope-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-283\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrX4hS4gxQ0yYE3Qs31nBgdvl9j1PCaiTaTNuE9Q9HoiNpIc%2B5NZhIPayW8dy67fZOVwA9tbzrpHw7GfBe%2B8CXkW8PQlxglKbpZCtzHmcN%2BDGaMBm4FiovsSXM%2FEvrM%3D\"}]}\r\ncf-ray: 9e60c772bd380b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"008ff307806792222eeb137e2f5ec4d0","sha1":"5deb53c867edaca335777fd6f7636a6342c3bb79","sha256":"6df31e3dd76ce77d61e6a4921402e9354d22487d3acf1f1210e4075e354bbc66","sha512":"ef2380be0dc0a7f4e532bd989ada2e7dd1da510f22f3c252917bc21d00a218e8248c6aafc02509ae03915eb463f3e72fdfa23cccf4b7dc1d15a737ac988c502d","ssdeep":"","tlshash":"ddf078ea84f877a0e0259342d2e4907db25fb09403b98cb0d75112d0e1830a57e3494c","first_seen":"2026-04-02T14:58:27.690787Z","last_seen":"2026-04-02T15:14:12.160325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/point-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/point-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-370\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IhFSLGH4e6OohJeoLO1JQYsjtaMCTDijtAG%2BnTtQHHt6D8lKU%2BBuLWnf8mN6il3nlqcUzoFnpJQpaD8RqSTzgsxEJymzX8zbnu83XYqKtdIg4vM2Mx2y99y1GtK7q2U%3D\"}]}\r\ncf-ray: 9e60c772cd3d0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"044c62794d93fbf3eec4bcbb221f43d7","sha1":"bb316b4eb523d30c85e7dad07ca8c8345e82966e","sha256":"a27772dde0f490ed19111fbbb1898a3f7d95b833fbf837754574909c1ab4bd0c","sha512":"3e547e43f5c9ce6554ab83e51ba8ad067d844ab8d23d657b6c54a25976ba501f4273c963d0190169b792165c1a5f7f6105d9c8c5d6f55865f1e16e60e1627b79","ssdeep":"","tlshash":"571163c842c5833de800b3e2c27024e4e60ae8df42259a28c3d61c3a92520dc9e640c3","first_seen":"2026-04-02T14:58:27.697612Z","last_seen":"2026-04-02T15:14:12.160973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/index.php","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/index.php HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670; pixel=1393315299147888; token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD; subid=1sjos4f9nmat\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/flags.webp","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/flags.webp HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/lander/fcs-new-breath-top-form/css/intlTelInput.min.css\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670; pixel=1393315299147888; token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD; subid=1sjos4f9nmat\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/webp\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\netag: \"69931706-6e1a\"\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 28186\r\nage: 950\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbYp1c6EGzC1bSeNDz4goDtIpaFEagds5ZnR46yhRzJ23n0gRCjup5V4NpfWpmTMDt8sC92rKn%2F7TDrRGVRlSJeTOBgj0FhFestzlrBN1rBEGYT07r5Z6B%2FyuonlmME%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c77add900b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-08-11T20:57:51.143494Z","times_seen":3370,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/eu-logo.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/eu-logo.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-be1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWlCmm9WTIwFysTUYw2DtJlOuoZqCiclgj4NseaGrHhASWRjnfoIY5aQIB%2F%2FAGaB2Wq4cnY7MUMSBULE46a%2B%2FpZAdsKigyB5vMzuFMrRdvUQKvKVEShxX%2Ftv%2FJ0Guec%3D\"}]}\r\ncf-ray: 9e60c772bd360b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3041,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30e7adb0249b12917669f0e073e784ed","sha1":"b2f5114822540fed313247fc30b334039c9dfc2c","sha256":"188c0b4c0660ceba95f3bd721c8fb66cfce2de50fefc1d5574af34266be334c1","sha512":"75c4af773b888a8c0bdd99e85c934ea40ccb18cdcae41a0d1771e3967a72659b4d98745bb6d1c425fd94c7190c7fa5cabee3310d64f48e18bfa2e9e99003546c","ssdeep":"","tlshash":"785156d0373ca3f8a809a7fc8957343521a620edd96d12c0eed10a01a1d574deeadad0","first_seen":"2026-03-20T18:58:23.056792Z","last_seen":"2026-06-01T15:17:12.296091Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/utils.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/utils.js HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/lander/fcs-new-breath-top-form/js/form.js\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670; pixel=1393315299147888; token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD; subid=1sjos4f9nmat\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: application/javascript\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\netag: W/\"69931706-41804\"\r\nexpires: Sun, 12 Apr 2026 14:57:54 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUycVTObpX5p%2FAuOyByh4p4SD5thNIQjOOVOx3UYUFwipToXmcSuVcUrHrO7indd4h4UWB1BmKsNjexKJH9MB6cjVmeDiGkEhXf%2FkVA8Vt1Y61rsiSxdDUS6rPn4Ro0%3D\"}]}\r\ncf-ray: 9e60c77c3d9e0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e246c225307caeca49f1cb46a36ce6c5","sha1":"9974dbf66f7a248e2343c99c198bdf1f5ef8d466","sha256":"3f1a91ff16ff00df67ee21c1d517dd901e74bf49ce6f8b1f06e9dd8365a533be","sha512":"562192b652002f43db904592b9a5de3bf710015c271bd740770e20170a4efad2b3b60a7a14d57d0acfdb50ce58d8885d085b2457e6e67d11bb16ba0e38476c4c","ssdeep":"3072:9klM0tDKjFs3OwPss3MwPkGeLHtI33lMfMGahvU4sUiZ5S3mLtjo/QQWVkmAmVEB:9klMmDOwew3lMfMGaoIoM","tlshash":"5c44f0ebd63c9737a1d87b35968eb3cd5a8cbca3c858567826c3b54f52788e0706c205","first_seen":"2026-04-02T14:58:27.665469Z","last_seen":"2026-06-25T11:52:15.716018Z","times_seen":9,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img1.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img1.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-a1e2\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 41442\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gQcOjB%2BxrSHyH0Io%2B9HWtVdtunu4boZuSv%2BQa9EtfeVxF9iaJI7YVLk83O0rf8oUoeQpItTof%2F2ietrlbQI3c1uO0eMVPDd9tFna%2Fybs1fhB0hf%2FTMhUj%2FUM8ky%2FPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d240b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 562x1000, components 3","md5":"09db4fb60c618884d68926e85d476047","sha1":"4fae8e373eff6e1971fbdd1d059c2be15d2671a2","sha256":"4cc27836c768af9165921dc3e504327594a7a969d048e272f022838d761b7cc5","sha512":"40cc7aa9eaa57cb0a843cacf9f19f0473ccfe41cc8e2aa96a77d6f3c65690797b3fe09a4504bf7958b487b7234077040ec2de3b5b7c7e023339021d8de20fc04","ssdeep":"768:67f6ZTFeEHiQMH78bTI+4vFqp2IVou9KitX4VD6hJXLBMu8m0PeL2uWE4Ob+HTdw:q2hAx+OFi/umyl6fXLBMu8w2i0Zw","tlshash":"8f13e11237ea5ec9dac46d34def66074be9b8935e08fc2766de140573220db4aacd980","first_seen":"2026-04-02T14:58:27.684206Z","last_seen":"2026-04-02T15:14:12.164468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:21:25 GMT\r\nexpires: Fri, 02 Apr 2027 08:21:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nage: 24738\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-11T23:34:53.868113Z","times_seen":11477,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":161,"dns":10,"connect":11,"send":0,"wait":9,"receive":4,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fco-mains.cc/\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, HEAD, OPTIONS, GET, POST\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://fco-mains.cc\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cgpn6wGKABqowNlqI8G1XA8C78FfoT%2FQJ4fplBgev4xzpIkeYwtMRJUZ9Y%2Bh5ImusHKK%2FchnWVSRE%2BidptBvj2H9SccNfi6e0KRVQLrqueBdhd5rdDNC7FfQ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e60c778c88e56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8215cbff3bb6e3f77b55f4f0f961749d","sha1":"d0c2a5a1be293236326a4c5a59b5172fba74d19b","sha256":"2bc635d44b5ca6c38b73aa6021eaccf71239109e9cb17b2c11d16d1fc1020308","sha512":"1d64ba84e769e0e5105bb0a51b90978a8bc52b3cbd30f03cddf95933de6ede8eec31b677a44c517a801ae7a293b479def7c6a4d933b936b8878eaa27dea76bb0","ssdeep":"","tlshash":"7f01df68e4680e7bacb9135cb42869071274220b5e56758e7bd09b8d0f8e9bf30b534e","first_seen":"2026-03-29T01:09:24.875702Z","last_seen":"2026-04-08T08:47:27.106595Z","times_seen":464,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":240,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vz-e5648023-981.b-cdn.net/696f7ef2-6e65-45bf-bef3-7465ec6b7b47/360p/video0.ts","fqdn":"vz-e5648023-981.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /696f7ef2-6e65-45bf-bef3-7465ec6b7b47/360p/video0.ts HTTP/1.1\r\nHost: vz-e5648023-981.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 427136\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 4927836\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 06 Jan 2026 11:10:25 GMT\r\ncdn-storageserver: DE-1143\r\ncdn-fileserver: 592\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 02/10/2026 13:57:35\r\ncdn-edgestorageid: 864\r\ncdn-requestid: 544d0f2680fce2c4420b272083750563\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":427136,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"533f9d2942cce7e9f40b67d296f67c5a","sha1":"a9101f109fefdb7e006af46c6554f0808543128e","sha256":"785b88e8f729fa0cc49a0f6ece751a2e10a9eb94ac6ad984991b10774a267778","sha512":"9d0871c518044fd96b0241ba436fd2b1035e63602c3254e8a08a010f34f97c7424f7c076575ba1d647e30471b98f5230421c636e2124dcf35e9bd05241b0b316","ssdeep":"6144:G8HjptHDF1NV1gKKSFqXxsYIPaqr47L489cVu+zgqMRIwPrBpBatFEMW:/ptjNVeKKSFUqYQaUKc89cGqWbrXBa4","tlshash":"299423a0cf0ccd7b8d1d1109674917d7a36a5e094ad4af8b4c5af34ef8f62b9c0906b9","first_seen":"2026-04-02T14:58:27.656146Z","last_seen":"2026-04-02T15:14:12.165735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/form.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/form.js HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: application/javascript\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69a1c723-1737\"\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Fri, 27 Feb 2026 16:32:35 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BzfkAFcc2TaJ5XWDsWt8XJ9QpvLvMp4i%2FBuYLw%2BGzDbpnGJlyCMGvMGDz6qBuG3IgNFsdqM%2FDqTdzr8E38rrkCd%2Fyw5MW2kz1RF6BdEDWZWbs8kf795seMKd1puMRI%3D\"}]}\r\ncf-ray: 9e60c772cd3f0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5943,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1c153dd579df6eddd1a59d4789fa0ccd","sha1":"6c289f619a67e1830cff5110396365657e9781b1","sha256":"dc4ac8f52cc9f3a5e4be692be11f6b2adb4b61f6f78d8857ec42c99eeec369c2","sha512":"7afc41a1ac2fdc9f30eb7f391fab0a151a916e9e72fe92f71a652425beed6da372ddfbb9c77f39b842db61e6c06f047b4374a82b2401b71b523148ca2d840fde","ssdeep":"96:LBVDebfpYjDC5ERU5FwVf3NfrxNhJ/TlJ6NnrUSKWZoTQY:dVDS6CSRMwlBrDH63u","tlshash":"26c19456146008b78e76a669fb8a6108f2ca057f7a80c3523dbc57141ff10d49be0fed","first_seen":"2026-04-02T14:58:27.701983Z","last_seen":"2026-04-02T15:14:12.166321Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/review-img5.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/review-img5.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-ee2d\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 60973\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSKAIIok3PiIQK9yHJdEWnr0CsHnDV3P5nQ0PEooD6EKqCy0gD7Nda5f4yFc%2FxV74Er7lXSf9DUkkhY6%2F4rm7OB15nD4DxpnaevoPtpjiG2YnQus0IUXydxYGzsOJ5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd340b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 229x229, components 3","md5":"87d835b131b196e044bc59f1ebbdfc0d","sha1":"c02620cfd2c61bdf9e0a6c8b54884aa8d982bc17","sha256":"5a383dbc509ab2d9d140cd3f05e6ae00a2c5f497781e7e31241bcde7a6df38bc","sha512":"3a928240fd422f3fdbca43d1f1ca4c4c2ba62a586f4b6f8b2106b60ba00a7ba45302616d02838df9d246c9fc2f1e54da94026e18e6b0bd0fd74a66bff1f3a118","ssdeep":"1536:Ba/v2UZZQLi1GVUF14CmtaqEo8iem2UjaOCRPkbW:6KOzFkaUUxUKRcbW","tlshash":"575302b764357a207f671929ebda450f31aa1bd802abf79421186307c51f7a13e2c2ec","first_seen":"2026-04-02T14:58:27.689951Z","last_seen":"2026-06-01T15:17:12.295594Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/review-img3.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/review-img3.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-9885\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 39045\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTXO3gI3CuXf2cTs8Hn410qTqkHeLYCSiQKPq6GPz7kbUtpcDunxiImpQ4pEv9Cz2TSXl%2BjYGElGxSKXKTIpQv71P9VC191fIbBh5YtVoRTqncTykek3B%2BJobkMjeco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd320b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39045,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 229x229, components 3","md5":"d72a7512d7b472b0251a1414c4a81e82","sha1":"ead2061248093852d47f3398e20102cb2c5a5781","sha256":"f236e56025b7743175f02a2bc93b45046219d4b3811c846132a28e14272ecd58","sha512":"32e8ec048f6be405024cb2d64595c62ce46dfa1d07921891edab9cf03cb02219b2f8a791445d24d299cc468e7ddb9157edc612f5eb62a25aa94dfaa5ca96b615","ssdeep":"768:BUerL5Y5U9gWyEGK6S4WaIo3KEVLsq8fcgNVNtzpY27HQLWkz1Zwuq5Wu/g:BFLmUyx1Y4a/EdM1Ltlv7HQW8Z7","tlshash":"5103f180f48a3ad4c06495506e792988b35f77924c9dd3bfbfc9ae2ed834d8641c948b","first_seen":"2026-04-02T14:58:27.660111Z","last_seen":"2026-06-01T15:17:12.237174Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/hls.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/hls.js HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 164149\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nage: 949\r\naccept-ranges: bytes\r\nlast-modified: Thu, 02 Apr 2026 14:57:52 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gN%2FGUj%2FPohnVng322jxzwnbhiukwt8ZFuLXUxulKYQN9xP5F%2FbcluviQo8xWorWVLGPH3X%2Fv3undTOMmEZB%2FM6fAylLChW4beZ%2Bm7ig8L6SpvXEZg9o9XYsboRtAxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9e60c772dd400b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541833,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"668b3935d8ac1385a1ce1a5454cdec26","sha1":"5178a4fbfd1ba38abaf52a211c0e1092ccf73946","sha256":"3b6849e7c23100166c513c2888ccb6f1932b1d0b492fbd07bc1a4ff8318fffee","sha512":"9c3d26a260f0d965f7df2eb64fc1617ff8525ce4211d0934a7a189579811f9a41901a21b09fb50cb9a3a7cf53f8486f79177659b5c61cd2e745c481851c10f59","ssdeep":"6144:ax52zYCo5VplapfQn4RzVt2tFPR5Szfmm6faVqKxh7U4StP1BHTO1OMAt2TMQxI0:a959aB7RzT2tF4lVqKxKld24QZ","tlshash":"c2b429ee3695a01643c2b169903f5507633a7d0a284cc12cfa2be9db2d7994db13bf74","first_seen":"2026-01-17T07:24:35.921712Z","last_seen":"2026-07-21T08:21:05.340158Z","times_seen":47,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img7.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img7.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-27e20\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 163360\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzkvHQQTxubVXY9%2BEFFI7XFZ3qYw9IcVlFJ1wf0Y7XcqKw62nFWt8Pl1oAKjgqJGG7IeM67JdUuF5SB1C%2FHmTrmjq6KKGlGR7igvAFKMbFJPlDosobP9SC6mpaM8b8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772ad2a0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 507x573, components 3","md5":"9ebdb23876475be815d0157c7e0aefbc","sha1":"ab3bcd39090a8763768ec09c97ba08bf3d9ae60c","sha256":"c6c437c16e2e8b68f796946e93b1cdd95326ab64bab4d8528f36f62f7ff207bd","sha512":"4d0994b2b786b57dbd41588f82ceffb411c9dad19c35fd6dea06278930d113ebadbf24d36d0e25a68a605b31f1a7f275ef54af358108b1a5f9ed96a6f1843fd6","ssdeep":"3072:JllftsOW8C8jlGSnSqYv5+OB56ul02uXU8CN4rI4grOMqfl2:Llw8C8j/nxYBT6ulSU8nSOhc","tlshash":"18f3dffa328584e06f5772bcf1b0bb1767674762d2a47db0e0086277a4c82ef865d183","first_seen":"2026-04-02T14:58:27.659208Z","last_seen":"2026-04-02T15:14:12.169425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/slide4.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/slide4.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-28fe7\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 167911\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bu6rwtuL9YhiOpQ53CA0L7sJMnK4GJ8UIOwWtXwbrL6%2Ftf5V8hAJr8KxxOKfmsAJb3VUXQllci3OsguzAej3l4hFoV73S81mhghbc7gGnSQeD80%2BXYnoF7NHYcplBls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d160b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 572 x 572, 8-bit/color RGBA, non-interlaced","md5":"ace8399ab0dcd33416c23d5835df43d8","sha1":"a51023cb315ef294bfc178aef2064677e60738ca","sha256":"a849f75efb45d17cca8adb33ca452dae27e1e7b0889022062e7fcb5008f51750","sha512":"143badb929d94dc728eccb33edc67844276a354bb29441c131541efd5e638ff5f52151f908d1b05100a2188b862f2ae5f75734c7ffdbdb402b33822393f38016","ssdeep":"3072:cpk/CXZjwqegOi9vQAF9g4cS4+TtWxcAU3K9bOtf3kwKWK+N3Ocq:cpICXZKy9vRVR4+aNWUsvnFcp","tlshash":"18f312d69fe462b80e14d0b5a7cbcff69e9378d52de0068b143088655f48fa78726b03","first_seen":"2025-05-20T09:12:45.962826Z","last_seen":"2026-04-02T15:14:12.170094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Playfair+Display:wght@700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Playfair+Display:wght@700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Apr 2026 15:13:43 GMT\r\ndate: Thu, 02 Apr 2026 15:13:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11818,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d27755e45c0c5f4c637b6e9c7d96c05d","sha1":"6764e0c515b408b1518782dcf51b0c5233f36753","sha256":"3650d68462d70cac907b14ebe46fd5ce9cdf215e2e56da40b382bd560e9ca97c","sha512":"21127bbcb64ca51470523b8aed4af5721b5480dccc20026aee83389f5db2a78ae0e4302765f1073790341ae08403bdf1ddc8cc74d2b85e91e78c8000e8df09ec","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGPqu22du2Au2Qsu2e:vXuM0p2+wt22I2X2s2e","tlshash":"a732aa92002ba500ab871dc223cf7f3aaece50856085d1796ffd0dc99ceed66436875d","first_seen":"2025-10-10T12:02:21.394822Z","last_seen":"2026-08-05T18:39:34.371633Z","times_seen":45,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":410,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":422},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:21:25 GMT\r\nexpires: Fri, 02 Apr 2027 08:21:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nage: 24738\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-11T23:34:53.868113Z","times_seen":11477,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/procedure-icon1.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/procedure-icon1.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-165c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyaXQMih6zikmzSYL5eP5CFCeqwuIEmDRnBxda7H%2BeBvbbB1aH2P%2F6dSSOsQVbHN4nWtjdHb%2BPteyO8MmTeJ0aEczosXfV5JMVA%2B1QRViMxiI0wjghZ%2FYKosxapLhAk%3D\"}]}\r\ncf-ray: 9e60c7729d220b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"253adf489939182391c01f5c0a5e8f4e","sha1":"d1f80dc15f654edfd20030d05134dfc7a998f42c","sha256":"829116e4c93c79ebdf18a431ae43415292d4d586cba243a43cc85fe53c429842","sha512":"f8294a1651b2106d58649a5a8887e0ebc8d2c2b8641ecca7479a431fe6af76322b81378373d2910abe3076f4aff0e9aac52dd8ac54944673160ae817a71aedbc","ssdeep":"48:c3LRb1L/uub8tFL0mL5Oyq9L2XDGzL/7oVLIVgHOuzsntnXjMMahKLN6JHjtLatL:sp0zr9HOug9MMaf/SNAEqKvkh2LQ9CSG","tlshash":"56c110d8c17d52bff228e29ede87122a529f70efe5c083b0d5949f0e78b54e34a09418","first_seen":"2026-04-02T14:58:27.689099Z","last_seen":"2026-04-02T15:14:12.171431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/official-img.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/official-img.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-148f2\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 84210\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0aqS60R3y9dxxdhxS3ohMR61rgpIV7sAxSUoI3KEc6ubymJ7ka%2BEaR1p7yaVv1oU1mDAL2bshtjamDAXv2W%2BpOFpcR%2FNqoVFWW7Gu4MZp%2BkuqpKOAiFxg6%2FvrY0p1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd370b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1146x1616, components 3","md5":"ced89f82d00f2e5a0ee4bc871c84baa4","sha1":"3367e94c7ad953e7965b0f25c4704360613d3baf","sha256":"c4991be8ddcbe6e8c7bf4555da4e6ba502bf98ff978193d6fc4454733ea67757","sha512":"d64e077305adf6a65dac1515f93b09c7c2ffb53615b862bfcfcb3516e6413ac7256c54fd2ca8a9c6268ee779ed4febcc1c075c5189accbcf2ae5d376109d0970","ssdeep":"1536:GvAttQREtttttttttttttB8usFqr4dsnuARMQW4yu0hBPr0eIR70fdepbotXO/:GvAt38uG2PHWbPrtobotXE","tlshash":"c583d072a8df2c69cb5c04393a5f725896fcbd3d10ab6b61a6e711cde40bac118d2731","first_seen":"2026-04-02T14:58:27.65327Z","last_seen":"2026-04-02T15:14:12.17227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/earth-img.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/earth-img.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/lander/fcs-new-breath-top-form/css/style.css?v=1.5\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 308513\r\ndate: Thu, 02 Apr 2026 15:13:43 GMT\r\nage: 950\r\naccept-ranges: bytes\r\nlast-modified: Thu, 02 Apr 2026 14:57:53 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=no2HTTv%2BoTyN949HbqWq4GSFLYUHxvjIKYVyZ0DKqCway3WY2st91jdtnzq%2Bgtnm%2BejclZl4i%2FSRW2hL17GZVf7dGpVnjNW0m970DXko2mWA%2BPOdJP2cm3p6tDYRx3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7765d4e0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1037982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f15b4e44d4f519b62633698e1c7b60b3","sha1":"0d16ca5396ee77327a873cb70484e6c583140c62","sha256":"84a79c5f77054069e9cd9a2bf1f8f22dd5d50817817af16b99b84a6cf2974747","sha512":"5d39b190730f376e80b6011d7f5efb564e0981f660598b7397c0e8a0be6a18e829e79b574c1f22bf6a28075d9294b6ecb82923c04e18273c2ef8d08e77909d87","ssdeep":"3072:8DhnOII0hY1uQawEW2CMDWKnqrI3mKWx+hIVw:8NOIZ07KDWKna2rdcw","tlshash":"c1250fd9a0246743e88ce27ecbaeddd40129a0cff4a181c59bafd75c640a7c5bf1c5a4","first_seen":"2026-04-02T14:58:27.657248Z","last_seen":"2026-04-02T15:14:12.172968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/css/style.css?v=1.5","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/css/style.css?v=1.5 HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: text/css\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: W/\"69931706-7a44\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 949\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybkb7%2FkiItENzDyPlmDlvNKQerBH13AraczP6oFk45ry6sqaxNiDlahCdJnewJaqgU5cBig3Pt7BtLEu8tpLJm0AuemCoevHPsjfY631EB6uB4%2B8uZdpvfUgVbBhfcs%3D\"}]}\r\ncf-ray: 9e60c7729d140b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0fd848505936d3189ff2064072177dde","sha1":"933759a82d42ffa07bc722db7903eaf104e7bf48","sha256":"9fbb8eec04d008a3c0544b39ad704ec0d64ef682ade92646954ff38ff80075b0","sha512":"505ded3bce76715195cd81284ef64a98efe54c423cf665cac612d846168722736b90406e33d39f0da353878db3e08f5e25063a0ea781e19abbccef16e8f8b800","ssdeep":"768:8YP6r/aNdgbtvgmwFx+eXTFYBeav+TF02hNZ/Nqz+ddHif+dtCRtK39IfggHgPtL:zP6r/aXgbtImwr+ejvav+TdhNZ/Nqz+z","tlshash":"d9e2115966b41508355fd4643896ab88736dc041de4fcefd26f2206caecc3ea64b3bc9","first_seen":"2026-04-02T14:58:27.681594Z","last_seen":"2026-04-02T15:14:12.173649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23224\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:46:48 GMT\r\nexpires: Fri, 02 Apr 2027 08:46:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 23215\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23224,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23224, version 1.0","md5":"9401d0214a9375f173f72cc417f6fa06","sha1":"e90a941885a5c6851fe6ca752e5b7a1cc186289f","sha256":"28453852ea165c47b5a941be00e418402e1407002ed87507f062a1e316328fe6","sha512":"8cf427deb06d8440cc0f20e4d783946c689c2cc6bb36db566bdf96898819d63c7b4f468e285bb31446d592a56fb1ba03d12d238b6ac6f1a6dd5d2a2e4437224f","ssdeep":"384:XjWBgfEyvhQi76WoZqn7XdrrTTgBOfdvZhCCKwsrsjxiZxG5juBCu/f3gg4:z1JQi1pfrXwgSA5juIuXw7","tlshash":"9ea2d148097543e5c57213a84b5e9d80dee414b07c2bc1aec8ed8e24edfe9526e8bf5c","first_seen":"2025-09-15T13:37:59.974647Z","last_seen":"2026-08-11T17:04:09.707267Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":85,"dns":1,"connect":7,"send":0,"wait":10,"receive":2,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/js/params.js","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/js/params.js HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: application/javascript\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-ecc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlVvjeO6eFtL2bq3XFnueBlsNjDbKvlnRjeB3xE09dKRJ8S%2BcwI4p5Gwz0jYueiUi9nxCMirFSQcbZXKfijawc6s7s0YXVcyTDgP9BmCHlH49dwg387MCf7qA35OLbQ%3D\"}]}\r\ncf-ray: 9e60c7729d120b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bec592964d64f61af47986b9d3ef1fbc","sha1":"c6ccbe6caa51f766d302fb56cd77f273ba88457c","sha256":"888b439d1330112af058b1384d429dceaf6fb8a895b1ade5727b3abdc99343a3","sha512":"eacc822a66f3193ef3d3ccbe4b8cf264b93909652612eabab87e799ce71e5a958a2f1d8577ce03524b8f6a7f8b9ba754e9a84b789b21b025bafb4a05a5c6e9b2","ssdeep":"","tlshash":"f2710f1d2c56f4a612b327b9e7979204f8365426224282417cbcda952fb0c1b1babec9","first_seen":"2026-04-02T14:58:27.682513Z","last_seen":"2026-04-02T15:14:12.175003Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/slide3.png","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/slide3.png HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/png\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-1f373\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 127859\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwI%2FF0cg7YPOmDAHDtw0uQQeUQNaNku0%2BbCp5j3oBYmv1ILGvPZ4QqdS65HbSWBtdduH0bfEkORWeNTvSdUoUez6lYfL4hHjpFzaL49TrzmpOBnFX5SV4p6EACk9xkU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c7729d180b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 572 x 572, 8-bit/color RGBA, non-interlaced","md5":"583a3eeb6897e5345af2a8f3798f2313","sha1":"73920b5238a5fc77eeb92323884e64c387c0a851","sha256":"d657ac7840940682734c6852425b9ec0a4d3f731e3feb7806be66659767f7199","sha512":"d776952d137c3af85716d67771dd5eb63a3712c53ca61ac2f89577fc5402a580c7a50a70c58f262555424a9d106155aaec9bf61db13fa32704dada1554647d9a","ssdeep":"3072:VG9evOy/YEZQG4/hro3HvKHet/d6taWu+TsB:k9evd/VyGI/+90EWpsB","tlshash":"a0c312da3e9cd58ddb6410061e67f50de90f01386825fbabf613d286c6982df2f80d22","first_seen":"2025-05-20T09:12:45.986288Z","last_seen":"2026-04-02T15:14:12.175958Z","times_seen":4,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img8.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img8.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-35426\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 218150\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n94bGIoBhcEvXVEJWJ8gfvYABwu0aWkUpbTPGH3TiqHgcEhwXFEs2Hi0kfOOTfVy5U%2FABQuyDFf89wKpGqxFM3kl8klemJgkOm%2Be53vo0k4zA5L%2BVSx9a2D8Oycuzr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772bd2d0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218150,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 555x985, components 3","md5":"95186519f61b2c3ce1c4bb96336f513f","sha1":"5332c742f05d5ca1cf277c6fed17f0daf812d5f2","sha256":"6a5cc01323412659b54c9304cda87d603679e107b8681091203c0356af1a208a","sha512":"08d575ab07bb074e93c6f107fa5b957afacd3b873b1decbcc2aa1798c5c159d6411af6cde70b466acb8b4434b6123b6358f0be58287fcda312781c1cb43ef77c","ssdeep":"6144:x1EHChJ+CzotdWsUXG4092SVNv0fRxotCky3NFj1KFS:x1EH2zUWsaZEFNvaR2tCk4NFjsFS","tlshash":"bc24f1b0f7d3cb1457ab4a1c59bdbc775b1822c899c8e26b44834ca8b20df32665363d","first_seen":"2026-04-02T14:58:27.661959Z","last_seen":"2026-04-02T15:14:12.176641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/whats-up-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/whats-up-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-109f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9DmiBp0xABfyyBFxwbuKUEnr8aXfZIP3mCdHcwZlkW9s30KOWftuxQdOlrDq60is4cjmnuuL%2BByjFFBApKeK8g%2F6kiIq%2FR%2FDze2hnulG94zb8F5eRATGck2IPNhC20%3D\"}]}\r\ncf-ray: 9e60c772cd3a0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1a0c864a75b96186b33cf3bfafb7363","sha1":"d3d6b74d55e0b1f579c3b7f37796c9258c98bbfe","sha256":"1d8142e5dab56e660a22c1c5fda76ed921c59694ecf95f94ec810e0bcd8ebe4b","sha512":"2d1a9cbeace4ea6e554010f5b17841909090ac56f75d928a4c38465119bc9f6283cc83eab726deff1ebd704cecf323bdbeeaf1685b3e97b24d2b06579e8ef0dd","ssdeep":"96:tQzsRz6j8abiNwddZkUS19ewMj/1vZn0J/wxDM4GjXhsXUZ4:tWtj8klRoZMj/1vMoDMlhh4","tlshash":"c29185ed5b702cde8ec887c77e2055a82a6bd23f6998c318c37cdb793450c99d915a83","first_seen":"2026-03-20T18:58:23.101768Z","last_seen":"2026-04-30T05:40:17.582222Z","times_seen":9,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/result-img6.jpg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/result-img6.jpg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/jpeg\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\netag: \"69931706-8055\"\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-length: 32853\r\nage: 949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k04OxcMfHMdf6C%2F9I74349N4gizWMZAqNg5tJ3Jj3zGHS6vpk95IjSrwOJP8ipc1%2Bwi9QQQHhofpbLk5AwLNKC9S0qZEMaH%2BbMxWdfs8DWBZAbK%2BqQ%2BbNLmDN7gwSbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60c772ad2b0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 593x670, components 3","md5":"edff6bd06657cd8092c1672d2926ba46","sha1":"3636751aa56585f841875280beb31529b0402eb4","sha256":"db3b06f15d12ab1684b677364bd144d163e875225e0472bb4f305e7b41e8c8bf","sha512":"85dbf097ac443f4ebf56b540449f72b560189e2bdc3b14ecc447c8bfa077ec9a5dec8e8cb190f3ec5d7dfb66c7a1cf71fa5b5cb2b6a4237f499f9399a90abad4","ssdeep":"768:8VVm8naDd6P61amZB56o77Wrg1CuHT6H12c:CVFaDd6P2f4Uhv2d","tlshash":"79e2cf074647cc93f8eae8300ab676157507509481cb83b6086c3b7ff3be1576d9e988","first_seen":"2026-03-20T18:58:23.0915Z","last_seen":"2026-06-01T15:17:12.257683Z","times_seen":11,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/stars-img.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/stars-img.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-2ac9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABL5tBHf5pjV69XB1seMdkBnRj4cCzztOqhRt4H4tlFNrIGI1p%2FQK0FppTXZ3MzMLkbhweURoPkCmjfK1kp%2BhIBANddt03MwBVwprB7kp9VjF6TcwOAqZ00trs66eN0%3D\"}]}\r\ncf-ray: 9e60c772bd2f0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"095cbbc8c0c78fa89f6165772645a483","sha1":"75a371b7394ae8d5fc00090b21a446d13b4f9eb6","sha256":"18b1cf0a6e3a8aa6a45cf76e5c2398b68390dfb3fcffa599a0ea19fb265ab1d9","sha512":"7422e70f8270e5b3d575d4404eefd2ce8a08f4a526dbb335f57e8f292ac2bac2732ba5ae83a514743c08d6cc64ae4c35adee5c8b36b04882a2be6520d9e47dd1","ssdeep":"192:njT1BZ1U69AQsU2eWx49Cf2DiC3BZq7MxXvI3GuKpN:jBAQsUz9Cf2DiAZq7M9I2Xn","tlshash":"673274f29299f2f9f31bebddce028470da5e10fbbbea43a585a59b4614506d44c1ccb0","first_seen":"2026-03-20T18:58:23.095702Z","last_seen":"2026-04-30T05:40:17.591398Z","times_seen":9,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vz-e5648023-981.b-cdn.net/696f7ef2-6e65-45bf-bef3-7465ec6b7b47/720p/video1.ts","fqdn":"vz-e5648023-981.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:44.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /696f7ef2-6e65-45bf-bef3-7465ec6b7b47/720p/video1.ts HTTP/1.1\r\nHost: vz-e5648023-981.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:13:44 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 1498736\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 4927836\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 06 Jan 2026 11:10:34 GMT\r\ncdn-storageserver: DE-755\r\ncdn-fileserver: 1138\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 02/10/2026 13:57:35\r\ncdn-edgestorageid: 863\r\ncdn-requestid: 4c558e14a9e58d5ca4ffc122163a3b90\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1498736,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"39365bcba9c42aa892fab13f3d34aa5f","sha1":"61a85003fefc7eaf87a59fe0fc052230791d1a31","sha256":"0f6d22d84f2ea37f1ef986c15e2d808e5e7cf327d6d17565e8df3d6bcdf52513","sha512":"2543cb42c26bb1a3c0d4a966e3314d75fa4388d03cf4a05d30140725c6dea84ff4b7d302529f6c3d23a124af7842988cd6d1be917480c44b628fead9e0db599a","ssdeep":"24576:B5Ijy7lIfpbjU49tv1raV0tUDcdxENWxOapBmVX18vo:BB7sV99tv1rUDqxUapBmVXuw","tlshash":"3925230eff408f219c414d424a19d5b7b1f48e5727942b6096a8b24db2fe9f4d86a73c","first_seen":"2026-04-02T14:58:27.664506Z","last_seen":"2026-04-02T15:14:12.179042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/phone-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/phone-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:53 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-592\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzKeQXKoPavbeWol3F4CTWZrWlBKcQ7c5%2FAa4C6q7PROf7DRHMBvGoQ0FPM%2FCYO4E4jF%2FpS%2FXjUixFeUSdpp%2FcbXPMOFF61%2FZv%2FEP3Xu6nlTb1Nx%2BHd1rM7gJrSd2ts%3D\"}]}\r\ncf-ray: 9e60c772bd390b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcb9f802c9df5f8aad9e0cb2322ca348","sha1":"c9efcf418180e82e5234dbbdacafed6a9bd06003","sha256":"c2f32cf925887f76c7f5cfa3b1f6b48595bebf07b03d83d71339da81ba69f5ab","sha512":"12c13413d147b5412e92b0e28bd735c8efd61628005e0e9db13048f4fbf4c39297aa4557b8991e534f241501960dd084a4317a3a975cc04db634cd5efb063939","ssdeep":"","tlshash":"b22194da3371c330e402e7f9c31070a676a629f41c50467cc6e24ca2f1538ec5c65c83","first_seen":"2026-04-02T14:58:27.69166Z","last_seen":"2026-04-02T15:14:12.179803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fco-mains.cc/lander/fcs-new-breath-top-form/images/telegram-icon.svg","fqdn":"fco-mains.cc","domain":"fco-mains.cc","tld":"cc"},"ip":{"addr":"104.21.62.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:42.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fco-mains.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:12:36 GMT","end":"Sun, 21 Jun 2026 09:12:35 GMT"},"fingerprint":{"sha1":"46:6B:2B:1B:C6:B9:06:07:10:F8:15:B6:E2:F5:B2:82:14:18:F7:9C","sha256":"7C:53:25:E7:C4:91:A9:3E:66:37:BD:86:D7:DB:5C:4E:BC:4D:E6:34:83:77:B0:99:FF:A7:4E:E3:A7:B7:66:DB"}}},"request":{"raw":"GET /lander/fcs-new-breath-top-form/images/telegram-icon.svg HTTP/1.1\r\nHost: fco-mains.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu\r\nCookie: 9ebb1b4f=17410733bfca31f4c7db9f8db56b184f6dcd7ec9ae6a09f521a151445473a551|1775142822; _subid=1sjos4f9nmat; 07e01=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyMTBcIjoxNzc1MTQyODIyfSxcImNhbXBhaWduc1wiOntcIjU1NVwiOjE3NzUxNDI4MjJ9LFwidGltZVwiOjE3NzUxNDI4MjJ9In0.ydjCqcjsgCd_g0QCWpx8mZCp1kxN_BVePm2AtXKfyAA; _token=uuid_1sjos4f9nmat_1sjos4f9nmat69ce87a678d5e9.22132670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=864000\r\ncontent-type: image/svg+xml\r\ndate: Thu, 02 Apr 2026 15:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 14:57:52 GMT\r\nlast-modified: Mon, 16 Feb 2026 13:09:26 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 949\r\ncf-cache-status: HIT\r\netag: W/\"69931706-53f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2B4ilk%2BLwPTReR7ynRJHKIhrVtu3LuYR5zGVByu5Ggz7T6cYn6e7IKP5LUoOh%2FKIScPr%2BVvf7jyEuc1SwytUv6swOU51oJKmqsTM4vV8cFmLF5roeV8EQLVrmKb5SK4%3D\"}]}\r\ncf-ray: 9e60c772cd3c0b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50f42bdfca38741d6fbc2883dcda06ed","sha1":"12e07745fbd69d3d9b417b43d7977d391a89ba1b","sha256":"7b334e82227e604160cde78caee83e39273845baf4937a905299ae0bab1621aa","sha512":"61f12a2aef717756332f3fce30f96143a2266a6030ecabaf5ef6901c4b3ffa798226f3ffbe3020bbfb51d71f777b542a71bb12d78a9596bd9f923b845096d9bc","ssdeep":"","tlshash":"f12123c7a578e0fec390c7ce9e1df848126d9099b689c469f294af2e20988511d0db47","first_seen":"2026-03-20T18:58:23.121474Z","last_seen":"2026-04-30T05:40:17.602399Z","times_seen":9,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"fco-mains.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fco-mains.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fco-mains.cc/SGFr2C2k?fbclid={fbclid}\u0026utm_campaign=RuEU-1\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id=RuEU-1\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026ad_name={{ad.name}}\u0026pixel=1393315299147888\u0026token=EAAIh3gH2XC8BRFFyhEsZBwG7SlGy6sNS8wC0r2rZCzrNaIyiu4904C8MIoLAKXLTjZCdZAZCRH1tf9iWZA3XhOmfaZAZCKD0eBlCotBzd7KzTHKd8ZCZBXnMCD8ZBGZCRKFCbuEC4wOCBV45eVWFTesZBoUOToFCR6lOkkBRjaJ7EHCZCXChlkdvaJNZARZCg6A5Su2WZCOuWDwZDZD\u0026utm_medium=Kashtan\u0026utm_term=ru_eu","date":"2026-04-02T15:13:43.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fco-mains.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 24471\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T00:50:40.699247Z","times_seen":256866,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}