{"report_id":"09553c1d-b069-4d7a-9050-7cb285a1754f","version":6,"status":"done","tags":[],"date":"2026-01-24T13:55:31Z","url":{"schema":"https","addr":"fihsolana.com","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"104.21.8.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fihsolana.com/","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"title":"$FIH Is Calling | on BONK","dom":{"size":33922,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2003)","md5":"090a0d2e4741563f222812c2dffc5a9c","sha1":"6692f9100504f4866736cbcbc2c8ee6f298864d5","sha256":"8bf27eec152552c51538c79241f1095c9ba72f8901a528c9d3e4355461a31889","sha512":"5ada620adc2380c7f835ebcc415bd2f3f1341a0697ad311152885d4ea2b45418d8ecda7595a7f0dbfc7959a07b8e4ed3bd3950dd19c74ed43f8bb7106a9fad1f","ssdeep":"384:+gN9aejs+wH+wAJqFI9xK5eoNry29AVs+wHz:+UL2IbbV8","tlshash":"61e2b6b3d5f644bb404283d2d7b7ba6829e9a117ee0904b1b2bd0fc49fe7d45d60b01a","dom_hash":"domhashac0ea1871ced563b3ed5cf5bcdecea11","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fihsolana.com","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"104.21.8.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:55:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fihsolana.com","ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-24","domain_rank":0,"first_seen":"2026-01-24T13:55:33.446206Z","last_seen":"2026-01-24T13:55:33.446206Z","alert_count":52,"request_count":26,"received_data":13870810,"sent_data":11913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fih.money","ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:55:33.444656Z","last_seen":"2026-01-24T13:55:33.444656Z","alert_count":0,"request_count":1,"received_data":4432,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fihsolana.com/meow.theme.umd.js","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19147749a615c57b05dfc1cfd8dc4119","sha1":"79e32e14ffa8f077ad79929b2334e5d7c15435b0","sha256":"61e5d393950e6e9e383bf8b469c6c30a0e7e71f05e3efe91fc62240efcbbfba9","sha512":"24a5fdb699a8c5065cbf706f1a28516f6996341a3f60c4d88365f6e28c4f9dac7813a6e58514984f735d006e178b3a0e366ae76ebbeae97f1f32204c418a5c5d","ssdeep":"12288:abBnTQa4VZnVPCPdsQyc+70QHwRFltDhfS7XRsNSs3JQwfl8veSUp4OAMDiK2uI6:aUVZVqPdsQyc+70QHwRFltDhfS7XRsNb","tlshash":"e68485ea3faa2568c210e343d53d6dffe874494c0f54d887f67c628591e8aa361c329d","size":395268,"data":"","first_seen":"2026-01-24T13:45:50.234802Z","last_seen":"2026-01-28T09:53:21.656026Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab6b54711a5d1086250fb97ea5ad6e04","sha1":"764e01546e3728e550a8f1a3dc856039a28e10bf","sha256":"b965e39b6a431d685daa1cf10be0c66245006eea03d54dfa31cc1a3b943763e2","sha512":"6302e0d3dcdf689c9241e38086416bb5fd297a9873410c51d23ad1da82da81472c6d6f6370954cce0780f9d4ccb5101e62865821e41a5616e5211dd666cb0afb","ssdeep":"6144:sF2QE7Q/MVfgRKB3d7GPdsQyc+70QHwnFltBh1S7XRsNSs3JQwflYteSUb4OAMt4:sMQ4QkVfHld7GPdsQyc+70QHwnFltBh4","tlshash":"fc8465ea3fab2568c210e343d53d6effe974494c0f14d897b67c6240a5e86a361c329d","size":387856,"data":"","first_seen":"2026-01-24T13:45:50.239993Z","last_seen":"2026-01-28T09:53:21.660563Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpassport-github2.cjs.min.js%3Ft%3D29487715%26u%3D2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-13T15:05:21.535419Z","times_seen":2568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fihsolana.com/fihshirt.jpg","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fihshirt.jpg HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23658\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-5c6a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KwSWSla5lSYavw7E0v%2BIAZRd0RToa%2B8vcMGH8uewXAIC1OsotliSePzfabM8zsVjZY4DUAuVzfXKqzql3IM2j3xtyK0ohWearKu6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da6f35b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 716x891, components 3","md5":"9bb34eb550d92b2d8fc2bf6468d5aec6","sha1":"17afdd8223febb4cea46a76488d3c25100a780bd","sha256":"a034dcdaceefe50a6ef95e85cb02b44b63ac816d1f250074885929487b457d3b","sha512":"a4f1faeb0aaea980b9b57dca4ad7e7d6cb2156c6ec788b6246368a9c0b0c2ccd03679c4268663316aac0b48812460aedd46b39d281b597af3b86f417c577c19c","ssdeep":"384:NxckfYr1ldKZI+7L+iRQECyKxu3Cm/aeEgAG21GLVVVz7fgKkP89vTlB4J6mdprq:NxPYrfdKZxv+7ECJxoCmi0A9GLFfjG8R","tlshash":"3cb2e1233a325d6adb180376ec316921d1e68c116bc899b7e5a10f42193e6b388cf3f0","first_seen":"2026-01-24T13:55:39.229385Z","last_seen":"2026-03-21T05:52:10.612374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/fihcat2.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fihcat2.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 924660\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-e1bf4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVgpvq23o6OvOrKwx5mXdKiofe2pQhoHxMfI%2BiXfw1uBq%2BLIKUFJ3FjO06fXttUKxDK4F2MK33K2Mf5ZUoHNH5%2BH5RDBbvj8IaZ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da6f38b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":924660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 716 x 716, 8-bit/color RGBA, interlaced","md5":"7747b6fcc81d3b6eac81e21219ba7e81","sha1":"7d0cde8f03b2ec067203fbcd02db9f53b1002a7e","sha256":"bc9431f95327a1cbec56f91bd9d3bdba3d8b488512f29a7578662c2f6fce0577","sha512":"94baa36604cec5bf35b21ba9799bc84a998b68b9204fba15c982f3db6c679c15dfa438094115f68d9f7bf5b5fcba7220da41da6c84798f703e819fa659883d7f","ssdeep":"24576:x6jlnCeTTSRejlGuFceYiBhuV13SiO/ii8mE63ApJVd0py:x6hnZqOdcPiBMV1dO/cj+Ap7dMy","tlshash":"7b1533e0d7475023358268cc7a32c5483a8e9a4798fca63168a0e40fd673ed2ff657e5","first_seen":"2026-01-24T13:55:39.231881Z","last_seen":"2026-03-21T05:52:10.632526Z","times_seen":3,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/FIH-00007.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /FIH-00007.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 401359\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-61fcf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMO%2FR5YojODPtLhZgaFPsftUGEkRt4%2FA7c4%2BZEKSuJASfeJYkHA2qRL0nFdqfyJ4Jq1dcO7lu21KMdLFUiWHqSS0uNEdvNnvI2KS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da6f3ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 357, 8-bit/color RGBA, non-interlaced","md5":"3d99f4f22c8d31c55f4caf0377385db2","sha1":"53997252a75aa340bdc4e57ef8a1820cf0703ff6","sha256":"b0a39f3191b6040ffa7d8ddfc51e5261f24578b6506d22e29f2c706897e9c6b3","sha512":"aede7cd3618df7689c8e6725760fb7d24b1705bfe17d88edf2a936578b6586e0b26e8bb6c584840a6249d222b0dc2c94292d676ad6fdea4f99dd60b1d3e4702c","ssdeep":"12288:LtKfP40CIEH1p/OyRiQdscApLdjSnolV4ORASNYgTd:k4xIEHD/dRiQycadOnmBJNf","tlshash":"04842302a63cfbad4359163c6e6478740e02b17dfa07fc79f2be68a560c17c8505ed6a","first_seen":"2026-01-24T13:55:39.234154Z","last_seen":"2026-03-21T05:52:10.634767Z","times_seen":3,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fih.money/assets/favicon.png","fqdn":"fih.money","domain":"fih.money","tld":"money"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:10.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fih.money","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 00:21:35 GMT","end":"Fri, 06 Mar 2026 00:21:34 GMT"},"fingerprint":{"sha1":"83:E8:8E:19:3B:CA:0F:CD:B5:E8:9F:54:C3:60:25:D3:21:E4:2C:86","sha256":"73:5A:5F:09:AF:34:5E:3D:50:52:52:F1:4C:FE:C6:1A:B8:0C:69:79:A9:98:0F:45:01:28:C2:1F:E2:47:47:59"}}},"request":{"raw":"GET /assets/favicon.png HTTP/1.1\r\nHost: fih.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Sat, 24 Jan 2026 13:55:10 GMT\r\netag: \"8c7a7d6d8e4d4766884304f530af7d5c-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KFR4K2ZNHAKYP6VDRCM8033D\r\ncontent-length: 4039\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5b6ce34f8eb4c0b018002dec870f83a7","sha1":"c69c05ab3a94f03d91576022a7281b5ff3f7ff2f","sha256":"58fb03fc724bea9271689975e2664fdf1b9e8b86013f9606aa41bb2722303b1a","sha512":"aafa0728e3132c50c8627aff7abdcccd43669572b38ae1b9a3f32927c14783c298ce8bfe3e81d9bc212e1da38b8173cffddd70733aaa11c1dc20cff4aa1389d4","ssdeep":"","tlshash":"e5815dd89e69f95b740cc882b814690059a3cf75a2ee878d75451e6875cfa33b0b0b19","first_seen":"2026-01-24T13:55:39.236693Z","last_seen":"2026-03-21T05:52:10.589139Z","times_seen":3,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":49,"connect":1,"send":0,"wait":319,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/secureproxy?e=ping_proxy","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fihsolana.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 24 Jan 2026 13:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6C4EhAwcvgI8PUFy3obgEuXGjkcTEsGL4MpuhaqhY3orpACsUlh3%2B3e2lwacPF%2FtoUqAaXYr0rK%2BNYk7Nh7DV%2BjQdb6vP6%2Bk8aFF\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3006deff5eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-13T19:14:19.86072Z","times_seen":8816,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22288\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-5710\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yp3iXCltFrgs1YcW%2FzrzpvWnwQtelp55T%2BL0uU7sprpmyHIOuL9BnlcYxGOcyAnTSko6f8KRaQxGRHGY%2BcaTfl543XJIzIRoROkE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df8ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-14T00:38:19.959724Z","times_seen":19457,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":489,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpassport-github2.cjs.min.js%3Ft%3D29487715%26u%3D2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:10.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpassport-github2.cjs.min.js%3Ft%3D29487715%26u%3D2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=passport-github2.cjs.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:55:10\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: b21e4b2f17b6c19413365cfd9051507e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7%2FYdWjReWyb8SB653WZ0vfw9yPoIDVolL4V%2BbasJ2UWHTME%2Bd32SL8%2B1sxAM9S7L5w5nJFhhkRr0eM6Fv6AcWUO3c618ONmN0Iy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3006e54fc1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-13T15:05:21.535419Z","times_seen":2568,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:55:08.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwjVMlT058lyArWOPTTUPXudbzMu4MDvzBdue6O3O0BfIVVFDJ2WB%2FRaroiLrnaexCnEO4ri0%2FLSO31gHDGyRosqHr1XhyGv1ceAek4%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c3006d74d3b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33581,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2003)","md5":"ae8c83f04f109e30bbe2661d68255ddb","sha1":"15fc6893188b60bcdab38f18465332166e9dec19","sha256":"f4e1e9cde6e64018e80b16311449e36cc0c4e5fb5f8892efd7644ec7f98861ba","sha512":"3430717113c96a1e377b8db5e9ae736fe18b87837ca11c45ffd58a2d8437cb81709c81c4ceec9dd088e9f47380777403c9352af708d83d32059297525dde4df5","ssdeep":"384:iN9aejs+wH+wAJqFI9xK5eoNry29AVs+wF:mL2IbbVU","tlshash":"58e2a6b3d5f644bb404283d2e777ba6829e9a117ee0904b1b2bd0fc49fe7d45d60b01a","first_seen":"2026-01-24T13:55:39.241723Z","last_seen":"2026-01-24T13:55:40.299494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":36,"dns":15,"connect":6,"send":0,"wait":278,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/css2-1.css","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: W/\"694c5f83-311\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QcIQL3wxp79LCeDWj7d6MojQct69it37q%2FCFbyHgadnPD8f8t0VD04kc1WYsj6yfmwSzdHiAf0OutwFCfKvXxFLeVIQD8qQ9ii1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f2fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":785,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3aef6200d09925047a8fa16b3a72bd5e","sha1":"04316d6e718e35824dc98deafccac5bc69e119fe","sha256":"6870c6c1fa0bbd48296853dd2b204fde323b2e9ddcb932b9d47f57560bdcdf84","sha512":"7fd9273fea349741d541d74b8c46c457cc6ffe68e96650808a46788b8cba1022ce81414c7ee492aa6e13d64a06767da7a8df01d636372515372e086d8a0f74ef","ssdeep":"","tlshash":"3e01b18104776a00eb930dc527cd7e33de2d72416444ad29aefd04887c5fc59936770d","first_seen":"2025-09-17T08:05:11.216158Z","last_seen":"2026-03-21T05:52:10.609353Z","times_seen":5,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/top.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /top.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 589196\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-8fd8c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UztHkiSXnQt%2FKJDY%2Fd8OHDj9R8U2hDk1%2F%2FmLWqzpuL6cig3B2SxNjsXELLBOFNw%2Fs45ZPj6uiVCAlDzN1j9Gj13OYZflWRkCZVEm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df86b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"4acf2ca66aaa905188588edcf0b3ac59","sha1":"668224ad294778b3815a59a19b4e6354843be44e","sha256":"ea92bdbf50592e05b86281002aa4673e4c709648ad6dc4b3fa83b019e8dd486a","sha512":"eaebe1f8fbf5f5f3988e76e2db20e57920e42055e9852ea9991b9324560dd65e63e26353779edd7bcd90a6e9e61d0fc3db636b15fb3e4eea612aefa2b6d6805d","ssdeep":"12288:CcK1dpVn8JVSIbHvanoKt51PoD5f2igOWhPGypk/r/WUYRa7UbqCYU:CFHT8JMEpM145f4OWhppk/r/WUoiUbNJ","tlshash":"81c423b3cbf42954cf2388e2906f411b5e45473a4e4e22d23d8e261d5f6d1a276b42ef","first_seen":"2026-01-24T13:55:39.246533Z","last_seen":"2026-03-21T05:52:10.644965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":491,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/fih.m4a","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fih.m4a HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: audio/x-m4a\r\ncontent-length: 2692305\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-2914d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-range: bytes 0-2692304/2692305\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k629zhV4S4uwLp8fQQU6jnbl3toJOYU%2BheDGdRYQGfjATkhMP28L3flezAxbTC%2FNrjQezwmPJ44darfbRjh%2BR%2B6TjsyvNQuPdeFt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df89b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":579338,"size_decoded":0,"mime_type":"audio/mp4","magic":"ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio","md5":"30347d4c254d3a9510f7d062c6a4ac57","sha1":"9cea38f6007a7acdcb10c1c818cc033643e67f1e","sha256":"e0cce0bb0f04a136d210cd9015dee8d188ff3b96b3b0a181c4674ee72b33f935","sha512":"2009d8108f10ccd06eabf487e31effb03a18fc578ba9939385e3788832cd0f98ef6883d8d8137e228c22e3f486ea913616f6df9559140d3e376d6522c9347083","ssdeep":"12288:aq687oaS/45m5CbE3JM7kDNWDJZngFxCCtNpBbvMUQR:N7oJ/45m5CkM7kDNWTngFxrH7bK","tlshash":"0ac42332f02cc44d6a0f93fc849dce1a4a679c54664a530ed633bfb027d6a4ee5a07b4","first_seen":"2026-01-24T13:55:39.248678Z","last_seen":"2026-01-24T13:55:39.248678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":491,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22288\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-5710\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IA%2Fn8G5onkOeUSu4zyhi%2B94N5jsUwr%2BJwl9sz0isMvvCLa0vCwMVTOyVKVdIXQrGUCt1jJkaFRXpOCVOhANK7hBlN95HwtYvQ3EM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df8cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-14T00:38:19.959724Z","times_seen":19457,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/fihcat.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fihcat.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 893774\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-da34e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lH%2BROdUZfnZ%2BH3kv1pO6rtuuOv131JUFmozsBeAqvF7XREyZxndRdJj7q1JMW3q6FrSVy%2Bcf2huacZyuvRHuXF0zYcsbtC8YcglJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da6f37b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893774,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 716 x 608, 8-bit/color RGBA, interlaced","md5":"512f135281f6a3c4d5641e0776faac0d","sha1":"b24b369cd91b0f619aa706bb8e6d5f5650d3a85c","sha256":"a0ead675212960c99aa66238239e27fe1257b34c59082c1ee78ac7368f3eb610","sha512":"17692da0cc367e1b3ebcc30f30e2b2149ad22e4f6e3c31acfd8fe3b427b132d04ad715d684df0f33675b722536f1c7d67af9929c5d202ed4bd89b262f63d8051","ssdeep":"24576:bYLq182g1F0H6hKOi7ptwoR9OnK7i4G+r8VyibkQ+4qUCJrh:8LP2gXkOtu/OnK+4wVVCzz","tlshash":"5c153333a7624c71f4c92bf25978695d21db00e385ad8127267544f2bce79cf27c688e","first_seen":"2026-01-24T13:55:39.250484Z","last_seen":"2026-03-21T05:52:10.630113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":422,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/fihshoes.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fihshoes.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 450131\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-6de53\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEJHy4orBMSotCZDEd%2BUAmDvsdsPMr3LhcgzCTuUYlfvT6wcmqVPNqnqK60q0naL6OPJ%2Fbcbc9K2Mir9eyZmmzyAnwlA0Yx%2BWUHT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da6f39b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 716 x 713, 8-bit/color RGBA, interlaced","md5":"c31c2a015da202f0431165500d7dcecc","sha1":"5da4eb1fac2a0e06ba7485a3e7432071f85f57a3","sha256":"f544d6a0d206cb8cfdeecd76fc269f45ce8bb5522efe6b0959ca2568ba04bec9","sha512":"3f6665e8e24ad032c1578cfc4a91d6b3b13166f9d1c1ea1515c23f41f727a58c62b1c9b355279f433ed3432a8d2d1cec1b28838dfe8d997bc0325ce3ee853eed","ssdeep":"12288:fXuF6wbHsQo1thFJ0DBWp4UbGpRFp7Yg4dV8nWS/yBoFuQ+la:fshynwy4aiH8FBG+la","tlshash":"26a4231118743a3c78353512e67aacac913f42d9887e8032971afdc7d79b46e3dac2d6","first_seen":"2026-01-24T13:55:39.25255Z","last_seen":"2026-03-21T05:52:10.637153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/bottom2.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /bottom2.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1026016\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-fa7e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3LBkKNMtB1oqeD8%2BHEDzNIB83FcJIpgHIsPh%2Bg073DY%2BURKqOLvASB%2B8ST8l%2BXkD2VpbxbFJm8dMnipar7biA3MtBztxkpgAMii\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df85b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 1075, 8-bit colormap, non-interlaced","md5":"0d6d6f6e0974389672fbf5c26acc8356","sha1":"595c86a4cc37b6e87be9cc95b658cd6507de2d19","sha256":"2217741bca1687a1f14c1aea3dcedb6fa5ef945860ef5357208b323947ae96d7","sha512":"ded1b920b8ae7d7460091f13f32544fabfe728f2533e350760fe6d0ff06f5efe5e2de1aa3412a2a74899e70ebcd86636bb5962f826a9567e476c5ff851143bbf","ssdeep":"24576:iREdPPr3/UyzRcvHQBznDLBioZ4bKwftZ0isDhoI1ckl4q:wEdnr3MauvHaRi3hJsDhoYOq","tlshash":"812533ac2c9da22dfd5b307225923115050e2fe5f8e94cf956087d901ebaf09e5ee339","first_seen":"2026-01-24T13:55:39.25431Z","last_seen":"2026-03-21T05:52:10.624123Z","times_seen":3,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":484,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/css2.css","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: W/\"694c5f83-18c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgQp9ku9orelSfdcFlxBre6aRcpER5DOAlfLaY%2BJYDPrDLnGcWZGaW2V4YwVfqErdq3ONNNfIs12ooiujlUvXx7NDpQZH8lqifD5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f2eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fe218e1ea0b3ce4bde6260329cd5ce07","sha1":"da448bf966caa474f2fdba10dbda6103efd815bc","sha256":"870b5f3e81d0d6afb00dd7c866145b8435f31fe524d461b52bf663045559f297","sha512":"3343749f7a212416a720b242a5eea010663429ea2bfa69b8beab052257f8299a7417b5e6a9704adb3f2b134d3c7ab1769a201f30cb3bde34ff617648f5a4a8f8","ssdeep":"96:qOXaZ0OXakOXa4Jc+uIOXa7NHOxMaZ0OxMakOxMa4Jc+uIOxMa7NDNQOEaaQOEa3:OZ0k8HMZ9t8qlxijiUCRjRUf4j4P","tlshash":"3cd1de50046b6200e79b5cc16bce3e32ae9db281b051db397ffe0498ad9bc746321b5d","first_seen":"2026-01-24T13:55:39.25601Z","last_seen":"2026-03-21T05:52:10.594245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/_gP_1RrxsjcxVyin9l9n_j2hTd52.woff2","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /_gP_1RrxsjcxVyin9l9n_j2hTd52.woff2 HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17360\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-43d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZXztC9k2bfwAPZkwEf%2FB9CGhUb7zfYfHFxTFA5k6IRhTsjfAb498RL6Rk2fEj1OHNshKqK7VxDPuo3IEl6ycguMXUrsM%2BfiwFj3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df87b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17360, version 1.0","md5":"70322c317b1f4e2e17dbc6b672f95f5f","sha1":"f3dff7c50e1aea33814c6aeeca177ae3ff900bfc","sha256":"3877b522181765adf66ba89bd68d288ecb9f2483b441baab3424646b0c7aaa0a","sha512":"83048e60c06b142d87fc1c236e4c1c025953bb9fc3ac9913f04660738679607c3dde4cbe7c3fd563e09b4609d284420ebcabc0637da58c48cb0db208087803f1","ssdeep":"384:WfC2S+GObRDijMwcY6tE+ICzuxdyMAngwp:W1S+RTDxICzPvp","tlshash":"1972e1edcab11465de8510ee2f1a3d89a941fba8c31043f19dc7fe56c0a4e34c798ea0","first_seen":"2023-05-03T01:37:24Z","last_seen":"2026-06-13T07:13:03.745607Z","times_seen":876,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":491,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/fih.m4a","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:10.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fih.m4a HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2654208-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:10 GMT\r\ncontent-type: audio/x-m4a\r\ncontent-length: 38097\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-2914d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncontent-range: bytes 2654208-2692304/2692305\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsr%2FK0vqsiPiFbiVhDDXudQXTgHlal0CjDnogXKrA8tLNL%2B0i6VvHrFp9o7liBtpOQyUp9%2F3rfJXrk7z92pU8HuVbHtIwoxxwoSb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e48fbab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38097,"size_decoded":0,"mime_type":"audio/x-m4a","magic":"data","md5":"948afe4413ce6c0c96e60d81135d365d","sha1":"85bb255403c4528b890eb84bf8d9bad37e55bb7d","sha256":"92bd9b54d3138e4945982c22984062d90e78688a115a6d5cec242bb2f6cb98a3","sha512":"f751409f657d2a0886cff6f85cb81960daafa05658bc38a4c1ecf7ccc3461596948d9a3e1c4af07bdc8df6c032376fa2224218a6d08755a6c9cd052b449ea734","ssdeep":"768:71Em5zeY+d9NhNfrpVjrkFfzsBI/M1xnfcqs1mhoCh:/xetLzpqFrYI/M1xq19Ch","tlshash":"5f0309f0d3380445fea3653986eb3b55af90bb6e70c645e691a5fa1f80750d2cb078e2","first_seen":"2026-01-24T13:55:39.258527Z","last_seen":"2026-03-21T05:52:10.585747Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com//secureproxy?s=%2Fjmpd%2F","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:11.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fihsolana.com/\r\ncontent-type: application/json\r\nContent-Length: 2196\r\nOrigin: https://fihsolana.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2196,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"d5-W137NgQzxQelWCjiebdeZ5tdap0\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9947\r\nx-ratelimit-reset: 1769262971885\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:55:12\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 7d56ea689923a7772d33c2e210286829\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9YYGs0Jdwgb9O%2Bq8Ca90rozZ6ryum8vanRm9uvdDJLFVItlFVV0CJHEM5WkvHwSkZy0Lt%2BX04PjIu6fY3PyXHXgDruW0QhhOYFU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3006edb85eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e96b2b4f17c0f0ca441912306759d2bf","sha1":"5b5dfb360433c507a55828e279b75e679b5d6a9d","sha256":"97f837185ea1f2d88e419117a7faa842a6fadacecdd0e698abb319444496a709","sha512":"60d8b7085609996fca1f9e3edc4ed0b927beacbe19ffd6005a3b7234809ae4232f17e976ac50a6eabd2d4bb3b3488d6e3603626bf26e4c3bb9a62cd394a654e3","ssdeep":"","tlshash":"98d023805292c3fb7cb58c4f07dd5ff2060e811167701d3ecd04222c4d386b84481896","first_seen":"2026-01-24T13:55:39.260441Z","last_seen":"2026-01-24T13:55:39.260441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/styles.css","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: W/\"694c5f83-7e68\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PN9oGfVeyb%2B5vaePn5ol7Ks0GzZG2cm0eLId4LmEDbcX7I0ouRyCbyC5pswEORFAvU6%2BQIOyUWJrY83dnvCcNGIVvaFylPjPgrAU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f30b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32360,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f3d61e7df98f52b073f6a20d0e5fd15b","sha1":"206562751b991da67680ec93295ef78583eea929","sha256":"c0d8087a04e4354cff40e928355fda9622af46a061887f223b5b9036ef8d16eb","sha512":"5cb64fbd6523b976c9eebe297c75e2918cd0f771b0a95f279a60f96ceac55e4a0c097f28791f888597b93828fba58546e31c22e942181a09141d8a6c938a5bfc","ssdeep":"384:0Tft9C1X07fO+frfafXidaf3lwtNaZzzfW4C1erDQfRSfDmUzpAe:ytIp07fvfrfafX4aflPfzafRSfOe","tlshash":"bde2979867e51214792bd0997ae39f88637cc002c50ecd3d77f3245caf8a3dd56a2b86","first_seen":"2026-01-24T13:55:39.262256Z","last_seen":"2026-03-21T05:52:10.615073Z","times_seen":3,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/meow.theme.umd.js","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /meow.theme.umd.js HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: W/\"694c5f83-60804\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcoJcMvnFz8nMCjssOwaDn%2BXcWY6aK93UCAAzPbUbZ6irDW4WjDDD1QpeoWW0ESQplsP%2Fu0AmsrNkwBGfcmutGmx3w99nzhU3T4r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f2cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"19147749a615c57b05dfc1cfd8dc4119","sha1":"79e32e14ffa8f077ad79929b2334e5d7c15435b0","sha256":"61e5d393950e6e9e383bf8b469c6c30a0e7e71f05e3efe91fc62240efcbbfba9","sha512":"24a5fdb699a8c5065cbf706f1a28516f6996341a3f60c4d88365f6e28c4f9dac7813a6e58514984f735d006e178b3a0e366ae76ebbeae97f1f32204c418a5c5d","ssdeep":"12288:abBnTQa4VZnVPCPdsQyc+70QHwRFltDhfS7XRsNSs3JQwfl8veSUp4OAMDiK2uI6:aUVZVqPdsQyc+70QHwRFltDhfS7XRsNb","tlshash":"e68485ea3faa2568c210e343d53d6dffe874494c0f54d887f67c628591e8aa361c329d","first_seen":"2026-01-24T13:45:50.234802Z","last_seen":"2026-01-28T09:53:21.656026Z","times_seen":5,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/fih-is-calling.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /fih-is-calling.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5426849\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-52cea1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3hWi1WtIGUGIBBSovgrk%2FKXCecxuEkBqse%2FRE7nNPqXRlTUvHjpMqfv1ouzsQQ2DLI7HGi9nS7UhwAljNszIM8cKDnbr0%2FmEbuG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f31b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5426849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 2752, 8-bit/color RGB, non-interlaced","md5":"b807e77ac4cba44747b2d900a3056eef","sha1":"e92f34ad7f003dc1ff4e621e9ca0316b19da92d7","sha256":"999ff66e1b5ec386b1b4763c10955260e30d9d910a326e082b37d7932024526b","sha512":"ec54610645fa9a1986b9ce4716f0039ca7e754952aff7835a8c14e8b4194a76ae432a745cad76c07a753e5479280bf15c75cf26be8def4304d5f0ba734fd531b","ssdeep":"24576:WMUtLER2jBm/8hXk9mjA/DJVvnmRXYOIIOfyc1VQ:WLtLERwm0hXk8jsn/mRIkIc","tlshash":"bf2533f6125ec3ebb598ddbeb02704894861a714ef3a7119a50fdb451cbf06c5d134ca","first_seen":"2026-01-24T13:55:39.264846Z","last_seen":"2026-03-21T05:52:10.639572Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":1235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/FIHIPHONE.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /FIHIPHONE.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2070593\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-1f9841\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdapI8tWzsY%2Bdf2GvdqAwZ4twCb1s0r5Jpdge0sHRY%2FJPhnXfI3aeHO7RAwqIo6EZ71THQu1r8o94YafJER7WL9RyCP3zfAh%2BkSk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f34b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2070593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"d64b20a2b766bceecac208046a648d36","sha1":"99054084f248505c4e66bbd00dff0c37baeda4cf","sha256":"3690b4735557a7a02f7d34cb17386af744dc52790062763ba97e85d67cedfad9","sha512":"deca7f64747cac78db9ba3b396a1a8e2af837ab575bb7da25830b8ce1dc175d04d4c79024a4c78644462615228ecebe93d1a049c1537290ad2b71f837cf0aeee","ssdeep":"24576:qgo3kOReqvQkh+UPy6SHJASC+bNUq6875M8h7s2:QUO81kh+UP3M8+pUqbu8D","tlshash":"75251243cd407eaf8a6722469b1739d2d63240537b254b9f8fa199f91c1b6c2f4f8e81","first_seen":"2026-01-24T13:55:39.266488Z","last_seen":"2026-03-21T05:52:10.591685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":748,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/FIH.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:08.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /FIH.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 175220\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-2ac74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZ9hAashK%2FtERka2anG%2BOOiGNvVJXP6qy6GIx8%2Bbn9pKC%2FTssgSg0ZKxef%2FYpeo3ZgieBvZpUeTm6nvLv%2FlL%2BFM9qrpnnWEgBn9Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006da5f32b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 886 x 886, 8-bit/color RGBA, non-interlaced","md5":"ff9d98ccbc5eb7246a27a90a6d0fb8e7","sha1":"06b97d5f2659f5f110b78021d424c50d8dbc8b19","sha256":"837c1b0382e0ee7e56ce891dcd9ba6d0e49fd83bf5179a1a6c743256c55992b5","sha512":"f38787705cb63d283bea480499dfbb7cdccae242e4059d2facab8f965726b328534b0a292600426a915ecd2bd4a33eda397084f9fb5e103ceaeb7db2ef4639b3","ssdeep":"3072:2g3d0rfYb/fWKaOv27UAYKaz51svd9r8+bjAngs489DPYhZ5/SyHyaCI:Pdyk7p6a1Gl9RAR9k/VJCI","tlshash":"a3041248b063e99efd0e6441bad04429e78ce66522cae03fe1b6444dc175daf3e7436e","first_seen":"2026-01-24T13:55:39.268785Z","last_seen":"2026-03-21T05:52:10.627677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22288\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-5710\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqnsxF6y1YfC0tK18VNzM3KR1V6zBS3PiupO2HZ37I6wXDF%2Bg%2FlbMKs%2FqelYt%2FKTT%2BUN9hYYypWEXagjY04OhibtMgLmtcuWVvF8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df88b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-14T00:38:19.959724Z","times_seen":19457,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":484,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/wXKrE3kTposypRyd51jcAA.woff2","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:09.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /wXKrE3kTposypRyd51jcAA.woff2 HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33188\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-81a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lBtbJTxn3GU2KErk05xOOBF9%2B7L3UeIciDUp510brlnAU9h0EzGUwtdU%2F4OAbeLKD53btWgvsSfiqRVHUqcevmR%2FYY2BQzFo9w%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e0df8bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33188, version 1.0","md5":"a70aa8d7a22a2de72d6ce5cc8255db6a","sha1":"ae196042c8b3b608c8e188b1d9fd2826f37d4956","sha256":"26fb4610d4bc976d2584ca15e66c11465dbc1f267a10dca668fcb3080dfe59c1","sha512":"4b9f457275e3bbe617ab8848b0c36d1108af41edb1cff05a1fcdfa120229576b63e1f60fb5245e57e318c1cb926d09f65f90a45a831c197b5eb76c717d375459","ssdeep":"768:AhWDoMF8Pqa3PngkLzOo6l8tAUvh98/hMzDCMUq3vZG7GwTO:AhWEMwqa3hziK94MyM1fkGwTO","tlshash":"b0e2f1678cb159c2d03dc6752b479ab8875c824842a1db1632cb42a37cdd9bf1a1ad61","first_seen":"2025-06-04T03:29:54.790491Z","last_seen":"2026-06-11T23:01:58.554046Z","times_seen":883,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":492,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fihsolana.com/favicon.png","fqdn":"fihsolana.com","domain":"fihsolana.com","tld":"com"},"ip":{"addr":"172.67.156.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fihsolana.com/","date":"2026-01-24T13:55:10.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fihsolana.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 20:26:30 GMT","end":"Tue, 24 Mar 2026 21:26:25 GMT"},"fingerprint":{"sha1":"77:4E:0D:C0:11:76:7B:2E:F8:83:86:55:30:FF:61:B2:6F:D7:F9:23","sha256":"21:09:69:06:F4:B5:0F:DB:FA:22:52:70:7E:AB:10:84:57:BC:08:04:D5:64:93:21:D6:C4:3B:41:DB:C8:7E:7D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: fihsolana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fihsolana.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:55:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4039\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 21:47:47 GMT\r\netag: \"694c5f83-fc7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQfxzDs%2F4gE4MZQV2Wx%2BZ1SYT2Z3ivejSWB2OptA0JCBKeabK0QBosfo0hKyc4DiBcCq5u1NfuUiOjdwDPb%2FDRFKRgKYqy3q%2Batm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3006e4efbfb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5b6ce34f8eb4c0b018002dec870f83a7","sha1":"c69c05ab3a94f03d91576022a7281b5ff3f7ff2f","sha256":"58fb03fc724bea9271689975e2664fdf1b9e8b86013f9606aa41bb2722303b1a","sha512":"aafa0728e3132c50c8627aff7abdcccd43669572b38ae1b9a3f32927c14783c298ce8bfe3e81d9bc212e1da38b8173cffddd70733aaa11c1dc20cff4aa1389d4","ssdeep":"","tlshash":"e5815dd89e69f95b740cc882b814690059a3cf75a2ee878d75451e6875cfa33b0b0b19","first_seen":"2026-01-24T13:55:39.236693Z","last_seen":"2026-03-21T05:52:10.589139Z","times_seen":3,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"fihsolana.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}