{"report_id":"09c90a3e-9dec-402d-b66c-c00680aba007","version":0,"status":"done","tags":[],"date":"2026-08-25T13:05:22Z","url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"title":"Inventory Check | Fortnite","dom":{"size":193866,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28639)","md5":"41dea2079ce45def2aff3eab5f0cdc89","sha1":"173dd02e045814a453550b197ce547ad41edda92","sha256":"e6e155d8a2cf4ae665bd894134da7587fa3356636e8dfa2ffb09c1038f60e82b","sha512":"e02bbb1ac92a31d3633c5f7aff2d3a93e9e685a9c1932b7045a078838048eb3099326e3af0d31197e704f8936e4f3c6060a909a159a92c95709ce310da190a50","ssdeep":"1536:b7WftQGsh7hmLVD6XFvuNgKZADbCAryuNgKJAzbCAr/fk6wNbLygzHq96nHBxWiC:MUh7hmx3xlgzK91zjoxR3nZur","tlshash":"3d14fa7521e0047a248346e9b7d1fb49b52db547cf1ba4e8bbdd41022fcd8db88b3668","dom_hash":"domhash6d2f3b4237a2fc606aa2118693b20bcb","first_seen":"2026-08-25T13:05:29.532684Z","last_seen":"2026-08-25T13:05:29.532684Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T13:05:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static-hub.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-28","domain_rank":0,"first_seen":"2026-06-01T16:10:34.619627Z","last_seen":"2026-08-25T13:03:41.640524Z","alert_count":12,"request_count":4,"received_data":0,"sent_data":2182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fortbid.com","ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-08-25T13:03:40.952772Z","last_seen":"2026-08-25T13:03:40.952772Z","alert_count":12,"request_count":6,"received_data":182206,"sent_data":2872,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-24T09:02:09.710604Z","alert_count":0,"request_count":2,"received_data":408703,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-08-21T04:39:48.057872Z","alert_count":0,"request_count":23,"received_data":1967907,"sent_data":12328,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2280,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"202e26c10a1c485f546d20590d7e6a5e","sha1":"e2d4d0cad3da1cdef0cd4fae7a52b0ef8652d046","sha256":"1c67252b0357e8bd7e40194e51ffab1cb182c6d6be66dafa6918497b95170dc5","sha512":"2c5bc03fecb277c10fd678998b3837fd618e17e3314db75d07566f705d7a6e56790b2f0523412786a19488bda7e5f530d689f3c1f3997c8db331c1905384a230","ssdeep":"","tlshash":"eee02b78ddb41b63130324a848ef0212b615514b1e2c3cbf7fcc10441f0d00c9a393ad","size":407,"data":"","first_seen":"2026-06-08T02:19:47.180395Z","last_seen":"2026-08-25T14:53:26.325731Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"855c27782663cd125e09dbebdcc92000","sha1":"ad7c73221b629490b77483c7abf49b2ecd56fa6e","sha256":"5561155a875db20879cd57156204b9611cf55235c36740a27b551529b2581a26","sha512":"652b240b8cfb2db68ff209e7434d71cc7b85f01b1bf9c87435829153aeb790506b32128d4f6e22b07f6a23e13605be773a5813313fa673025f43377caee4c010","ssdeep":"","tlshash":"478004731003c0314f7cd14410513105431d5f47c5c3cd144cc04004113574404101d0","size":35,"data":"","first_seen":"2026-04-04T15:35:16.192782Z","last_seen":"2026-08-25T13:05:29.565528Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a550d7f5ae46e8d72f833684cc789c70","sha1":"078a4788793906d0d3d8db205ddaa0e99bc9d113","sha256":"5e5bf04812c52f311df70d9f8f10c232e7f630dda4498899a98a0bac86af2ef4","sha512":"1c7b77011e23a0ffb53f229a206af1f4399cab0adad325d6d9837f58b2b99bccb7c65e364dd1c456472a6d9599cf9fdf6e04acae5b8bd48474731ce4d1834d2d","ssdeep":"","tlshash":"e01125683caa3c28936996ea377fc3cc517924277461cc80d40ec8341a67d871483aad","size":1002,"data":"","first_seen":"2026-04-04T15:35:16.195645Z","last_seen":"2026-08-25T15:35:35.036219Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfd8ccfee74746cd26a124747302f8f","sha1":"f76d62cd48d7abd863f92469f79fe77421eb23c7","sha256":"2ee50a99b61b4e9f8f4d582c1266adc8bc8c9d5aef73d909a1c865f37168ec81","sha512":"7cb83dce1207cc8455d93c143916b7ff98ce9f1bfce2ba40b70bb9b4d7b82e466002f81a1b72b6e3a37dd6b75d9cb5dcf35d3be8febe4c7afb8763945b9c58d2","ssdeep":"","tlshash":"54f00e5c0c0fb97103365aac73be89c83656010c25414944ca66c13065a08db6896b4c","size":504,"data":"","first_seen":"2026-04-04T15:35:16.198644Z","last_seen":"2026-08-25T15:35:35.036754Z","times_seen":608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e7505fe892d48d65a9fcbc15e53081","sha1":"de9a2a1617665aa3375bf6fd1aaa58dbacd20dda","sha256":"728b0006af24f92a8909559fed79bc2e862735c676979ab3443ff81f40abdc97","sha512":"aacc10a7a0cae58db3387f0194836cc3e15306b748ee8492c279136efa5abe3e977bdd58d7763faa12f02aada33c39183a11a0884517dbfb2ae3ac71c6b45e52","ssdeep":"","tlshash":"19e068ab3885093912bab9be32b7660430131118b40c4618db55b370e574cc68b4580d","size":379,"data":"","first_seen":"2026-04-14T13:27:05.580507Z","last_seen":"2026-08-25T16:02:32.945961Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"974642c004c40e16d09958edcdc27a3e","sha1":"86ad2de13d44af25a9f93e8eb3345f833155be54","sha256":"197002897291d025a477a099e712091260142bec103c8ba0f237c0c0ca2a53c9","sha512":"e085c3102f4b5d44a8653d116f0a8169bf833da2cc95d77764e8f25ee25c4c5ca5efefb6381faf3940e03413329788be3439dafb905e24faf6f1cf48a64444d5","ssdeep":"1536:VgzHq96nHBxWi1aEZ87fjoxS23nZCr8fx1YlhODSo/:VgzK91zjoxR3nZuo","tlshash":"6e83d67a51b0191401935a2ab2e6b641a11cbc03ee02f4f87f8d96091fdda5f90f6efd","size":81391,"data":"","first_seen":"2026-08-25T13:03:46.740166Z","last_seen":"2026-08-25T13:05:29.56836Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/api.js","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e093ec4b2882bb3dcc1a1170c1c22738","sha1":"5ccf73ab6d655edee73f7f36a55688ab94f7460e","sha256":"e992f884ae6182a0d4a147d321f4f5d1f5783a676a597943b251087b8777d99b","sha512":"06447204df2a185673dff35bb7aae43f2b89767f031f63c493544bc651b0de346b68aa36903391a3b944a2dee0ff18f0d54749f1c8997a6a09a5382c489e5b44","ssdeep":"","tlshash":"f141439a89f231a92653209a6613d20472375407754bf4a0f98e16042fddf3f73779ec","size":2039,"data":"","first_seen":"2026-02-09T11:23:58.171196Z","last_seen":"2026-08-25T13:05:29.542147Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-25T15:59:30.245112Z","times_seen":50697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"i.ibb.co/QFGwjs1r/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.155Z","timestamp":1787663090155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /QFGwjs1r/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4109\r\nlast-modified: Mon, 18 May 2026 18:39:22 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4109,"size_decoded":4473,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"ac16f725a064f633753ebb1a2c8cf194","sha1":"f7b3a6b2ea231bd5ae5e8c8e02ecb4ddea22e2dd","sha256":"dd82feca02beb0bd2ea2cd65f6ad6da81c5e33a4837aa30ff5f7faf205456849","sha512":"513014e54926f58f8599728b5ea911cf791601c190db2ec6de4912a3f0fc5fae700880cbd48ce6c7a718d0b3f68005b539400c2e6d9648369b456270cb057dc8","ssdeep":"96:TtXb8r0531LrqctNBp89XNOra7IxLEoXlB+RXFVYguM:TtoraFvtNw9X/KlXP+9DYa","tlshash":"63817f7fb21b9f9ca727f98f165017740c01e15c753b193c58dc32e85ba7918ca24665","first_seen":"2026-08-25T13:03:46.725037Z","last_seen":"2026-08-25T13:05:29.535269Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":122,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/GQS2h4dS/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.156Z","timestamp":1787663090156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /GQS2h4dS/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4397\r\nlast-modified: Mon, 18 May 2026 18:33:27 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4397,"size_decoded":4761,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"363f6a38aa6d6630ae2ff4ef2815187a","sha1":"84c495a17de9ee27b81b5988a8e4a196ad772c2c","sha256":"daed670945c000f7cf643d171fd7d7e994f8f32e09ea3a5b5763e6abe0c19253","sha512":"ef6194c4e52ba382208775434b8fe005e49cb8596553ec60f6b520bef8be75bdd79a228da0acca16c55e5ddb6d752794ed80c0b82a38ce030183c9750c7b3e75","ssdeep":"96:KpO68P3LZl+kLmZsq2M2fEM5CAsSZpqX9Arsa/GmlxHI:KcZLik6qRhceGersa/zLI","tlshash":"76917c9146569154dbf2fe0690d08b111f07c72c81efd1b4b8c25ce02af715f66e4fa9","first_seen":"2026-08-25T13:03:46.694264Z","last_seen":"2026-08-25T13:05:29.536513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":122,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/C5yf9KLb/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.159Z","timestamp":1787663090159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /C5yf9KLb/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4295\r\nlast-modified: Mon, 18 May 2026 18:35:47 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4295,"size_decoded":4659,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"7f2cd16d6d504854078e39970fa7695a","sha1":"825ede573fa37c57fcbe1ccdc683e1732a46f5d7","sha256":"fc74c0ced6db2e7da840b7598a0cb20641c2fd41888bccca5b4453d8008e8f62","sha512":"5871ca3638a6a75c024b1e482a724e40826699336445a797c122e407a4a6fc9d8a6046b85fd0fec2579284c1ab0d01eb77d022911cdf6dfc594ce59f60feb2cc","ssdeep":"96:0iEGf27mcGQeyP/giftKujua+5YrBlV0Vm/n2H9f:hukQeyweNQgfVF/g","tlshash":"d2915c8bb8960572c23ab726597d128aee7ab54528cc3d28a2cecc23f045d1cc56c59f","first_seen":"2026-08-25T13:03:46.717177Z","last_seen":"2026-08-25T13:05:29.537793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":122,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/JWY2kZKD/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.150Z","timestamp":1787663090150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /JWY2kZKD/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 682\r\nlast-modified: Mon, 18 May 2026 18:20:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":682,"size_decoded":1045,"mime_type":"image/png","magic":"PNG image data, 55 x 28, 8-bit/color RGBA, non-interlaced","md5":"c37c99cb517e1ea689fcf81f578b163e","sha1":"d39532fa6a65d099060cd0018156fa16c26c6066","sha256":"19bc25db41196b8dd478eeb8fe03f7a6920fcb8de9b4f19a83e06f4842895684","sha512":"f49cadfa955c7ba74f8c97b604c731593bf4a69ea91b0998a87ae9cdedf0b9ccdda9fea7240e37e4545bd02b0b6fa42092365621adf3f05d05238edc0c339a40","ssdeep":"","tlshash":"2d019497fbcb45186f98b25a8c6044d662b2482c51323d04b870d1a2824c0e4b6691d7","first_seen":"2026-08-25T13:03:46.722229Z","last_seen":"2026-08-25T13:05:29.538929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.637Z","timestamp":1787663090637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortbid.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:41 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518049\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-25T15:43:57.362982Z","times_seen":266594,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":29,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-hub.xyz/assets/24/favicon.ico","fqdn":"static-hub.xyz","domain":"static-hub.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.837Z","timestamp":1787663090837,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/24/favicon.ico HTTP/1.1\r\nHost: static-hub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T15:40:44.827819Z","times_seen":18098303,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-hub.xyz/assets/24/favicon.ico","fqdn":"static-hub.xyz","domain":"static-hub.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.838Z","timestamp":1787663090838,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/24/favicon.ico HTTP/1.1\r\nHost: static-hub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T15:40:44.827819Z","times_seen":18098303,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.134Z","timestamp":1787663090134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 25 Aug 2026 13:04:50 GMT\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3ab199f8223217643ff93616c1cb4903","sha1":"c97bfbe8fa30266ebf44fde8d2b6378999257465","sha256":"2dffd7e092f459bd3364536e2e32526877b3abab30bfe46c2789ed2003375b28","sha512":"b0cf87fc359479f971dcab9c8f90c3d0adc2b7a3d172c68920dbac2f7fa606dc2be9c39e0032fc71eaca1ef1fcbd186d217113d7e76d27fca8b2aedc9e12e70d","ssdeep":"192:9NNIxO34OxDNNryfO3iExlfNx0NO3kCxHYNCbOO3Lxxgx:vXJpl7GQK","tlshash":"16228992002ba400ab971dc233cf7f3aaece50856085d1b95ffd0dc99cead66436876d","first_seen":"2025-09-24T14:36:36.037898Z","last_seen":"2026-08-25T14:53:26.322636Z","times_seen":198,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/api.js","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.141Z","timestamp":1787663090141,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortbid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 13:05:24 GMT","end":"Sat, 07 Nov 2026 13:05:23 GMT"},"fingerprint":{"sha1":"88:B6:18:4F:E1:8E:37:41:2A:39:59:BD:3B:30:6D:DD:91:2A:A4:E2","sha256":"BB:8A:C8:76:E2:7C:74:B6:B5:95:D3:00:86:4F:97:53:43:18:28:BC:F1:FA:48:D9:8A:D9:4D:9E:4F:98:CF:52"}}},"request":{"raw":"GET /api.js HTTP/1.1\r\nHost: fortbid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.3\r\nDate: Tue, 25 Aug 2026 13:04:50 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 07 Jan 2026 21:56:21 GMT\r\nETag: W/\"7f7-19b9a75f788\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2039,"size_decoded":1336,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"e093ec4b2882bb3dcc1a1170c1c22738","sha1":"5ccf73ab6d655edee73f7f36a55688ab94f7460e","sha256":"e992f884ae6182a0d4a147d321f4f5d1f5783a676a597943b251087b8777d99b","sha512":"06447204df2a185673dff35bb7aae43f2b89767f031f63c493544bc651b0de346b68aa36903391a3b944a2dee0ff18f0d54749f1c8997a6a09a5382c489e5b44","ssdeep":"","tlshash":"f141439a89f231a92653209a6613d20472375407754bf4a0f98e16042fddf3f73779ec","first_seen":"2026-02-09T11:23:58.171196Z","last_seen":"2026-08-25T13:05:29.542147Z","times_seen":25,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Xf0xZfks/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.147Z","timestamp":1787663090147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /Xf0xZfks/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1428\r\nlast-modified: Mon, 18 May 2026 18:19:33 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1428,"size_decoded":1792,"mime_type":"image/png","magic":"PNG image data, 39 x 39, 8-bit/color RGBA, non-interlaced","md5":"13c6532d33cc774879b22dc7dc7ccae1","sha1":"7647b1e36882b9bdd6cf451af13fe10e23e4d1c2","sha256":"3ed18176f121b78444ed5803b008710059353e57af71f0529a9198d9fff04321","sha512":"0f940025580c70dd14cadab926a74303e39243a1fe211652e040c8208684f07a1e63e07a5d36fdf7a951ec5301495ca4963482077b81e82a9e290b5f8c2631df","ssdeep":"","tlshash":"7e211be971301c17d1f8f22bfb501057b55c136eb1116ca66c596179f938998c290767","first_seen":"2026-05-19T16:48:02.9714Z","last_seen":"2026-08-25T13:05:29.54314Z","times_seen":3,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":81,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/gGhPgnm/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.161Z","timestamp":1787663090161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /gGhPgnm/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4236\r\nlast-modified: Mon, 18 May 2026 18:40:50 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4236,"size_decoded":4600,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"2e012d1d4212f0f8f8a33eeefaca7fbf","sha1":"0c9d23fb94056a39c14fcf5113f1e14a1f8adb25","sha256":"543ce3039b525666e333ed065b1d74ec14a905d1673a58ffd45d8eeab5467124","sha512":"45f6a5dafa36c5d23702fb17571736656dbdd75338c2d40726d7f7bbc0848e9397c499c8ad2e78bdd00390a2f934661d18639660e31c86e03a8a8d036cbf47c0","ssdeep":"96:AeKXRY9mO56KUyUSGYgFFSleL6ft2RDSGdyxzt:AtXO9m+MSEL6UBZ0t","tlshash":"39916dd93d96b13ae50329ee507ced565d712a03607b006d38e57912ab0faf843cb368","first_seen":"2026-08-25T13:03:46.650248Z","last_seen":"2026-08-25T13:05:29.543905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":45,"dns":0,"connect":20,"send":0,"wait":45,"receive":0,"ssl":509},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/992nK5Q8/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.164Z","timestamp":1787663090164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /992nK5Q8/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 117600\r\nlast-modified: Mon, 18 May 2026 18:17:20 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117600,"size_decoded":117966,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"79cab5b310159616cdd4fee622ea963f","sha1":"cac73b064451e71917c5141dc13eef66e14a2d23","sha256":"35f8e44dbc1fea67720d7b0b6af189b6295c16d543381bac688f7703360e2220","sha512":"281f90cdfcdc56492ad7f94ad68b6f15f9d10b43c7280568b3eb970e5d185018c30ebfad210a46d8a719a7e4dd3c92c05e6d6690f5c03e74aff5da852743f913","ssdeep":"3072:HTivnO+Z+meURqBI1sjMa8gzsrZIguvpy:zifO5Vw31sx8EsVIr0","tlshash":"afb313a95d010778ac5ead8347b0353af7c947cf292b9b7c0907e3a3d7d6a8443a088d","first_seen":"2026-08-25T13:03:46.697021Z","last_seen":"2026-08-25T13:05:29.545178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":122,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/N2xJ2f58/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.168Z","timestamp":1787663090168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /N2xJ2f58/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 118891\r\nlast-modified: Mon, 18 May 2026 18:18:38 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118891,"size_decoded":119257,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"25638d1da0f099b32a73a75338f31e0f","sha1":"d429df098c7107c002c326246b1f324bb649b4ce","sha256":"d9b8de07e154117fa30292f010be5f8aaee4180c1a88fd575dea7c09398b00db","sha512":"f4234237754c9d12cf9562c9b1682a837848f8145a9cf119308da8640e116d544ce893baee532972f5d06ff4f7d39761f0ff6a9db1ff7d780b38f4015cd40846","ssdeep":"3072:nfstQflu5PsUWduUBzsd2EIrxAqANogfvqawg:fsIuGUWduUydOioOCVg","tlshash":"56c31224f4c5f1f571ae2ea5de4680379ce9c1228f6246e68571f132ba3e518fa74c22","first_seen":"2026-08-25T13:03:46.672498Z","last_seen":"2026-08-25T13:05:29.545866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":122,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.639Z","timestamp":1787663090639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortbid.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:41 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518049\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-25T15:43:57.362982Z","times_seen":266594,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":35,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/MkBV89Rv/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.154Z","timestamp":1787663090154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /MkBV89Rv/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 523667\r\nlast-modified: Mon, 18 May 2026 18:10:18 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":523667,"size_decoded":524033,"mime_type":"image/png","magic":"PNG image data, 640 x 475, 8-bit/color RGBA, non-interlaced","md5":"0054bbf1304aec9f7274c55bc759a393","sha1":"0c59586f2d6fc967c54cc3578957296d720a4ad9","sha256":"0a66071cb1d926a749dc5dc1968de5047810e5de0d72d584b9c455b9f699dfd4","sha512":"48a70591971c3e975cfc773d60c4bdfad415469a0ee167e365c14d820ca230e0684cc65dbacf6097fe7ec10806610cceda60907dc4c28554efbda8bf72c25d9a","ssdeep":"12288:kJVoKsNtHgq65hCReOL1Lr+zcvE6+sgSmi+TTwX8h5G:kJVNq6OeO1c6oDE65G","tlshash":"99b4231901896cbfe72f606309d3b7c5782421aceb3d1d6587fac08675afb81d9a271c","first_seen":"2026-08-25T13:03:46.715322Z","last_seen":"2026-08-25T13:05:29.546961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":61,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/assets/24/Frame-55.png","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.576Z","timestamp":1787663090576,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortbid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 13:05:24 GMT","end":"Sat, 07 Nov 2026 13:05:23 GMT"},"fingerprint":{"sha1":"88:B6:18:4F:E1:8E:37:41:2A:39:59:BD:3B:30:6D:DD:91:2A:A4:E2","sha256":"BB:8A:C8:76:E2:7C:74:B6:B5:95:D3:00:86:4F:97:53:43:18:28:BC:F1:FA:48:D9:8A:D9:4D:9E:4F:98:CF:52"}}},"request":{"raw":"GET /assets/24/Frame-55.png HTTP/1.1\r\nHost: fortbid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.31.3\r\nDate: Tue, 25 Aug 2026 13:04:50 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 85\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"55-GfRlk+rdw2o2HNPi/vhdPDqi7EQ\"\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":85,"size_decoded":381,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2394d231c5ad0c401a00d55953bdd6ef","sha1":"19f46593eaddc36a361cd3e2fef85d3c3aa2ec44","sha256":"dc263ea15194a9faa2b9e2380089d9da09fddaefacdf5e932ced558d2cd87beb","sha512":"1fca8b88d9fa88cbc7eb15287046a2d7bc56b2ec47171b826570516abcef4403c8a4b675211ccd5ee7d4cd41582a096f6be5c8f9a93b0e9b2d7cf57024a92536","ssdeep":"","tlshash":"2ca0240c01073ddf0f13d5f434dd3d300053c7c011113c5d1044c43cd44055dc041150","first_seen":"2026-05-19T16:48:02.991636Z","last_seen":"2026-08-25T13:05:29.54775Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/1fmqzs5n/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.167Z","timestamp":1787663090167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /1fmqzs5n/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 119516\r\nlast-modified: Mon, 18 May 2026 18:18:22 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":119516,"size_decoded":119882,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"a9713877a656b8a4e47aff34d17fc8de","sha1":"629a031090725f394350cf647ab79500fb5b878b","sha256":"e6c996cea37d03d629a6cfc9b46eed877f303b3b3388510b367e34602f8f446c","sha512":"f8ed43ea30f70d68a2b818cf7dddf3e70b88a836e9e0006997692fd6cb66677d4ebb48ee91e16c2b3a9e206e82c97dc4a4b0caf0e1c3e44633fd0551461ce1d8","ssdeep":"3072:JqihUj1XjwmpduE496DNoj2bC7I6Y1KeE:4kUj1XjwmpdN4INoj2bXNE","tlshash":"27c312e6c81d29f0f433ed93d669cdb27475938a87fe8bac8ca4875e360ed19c540426","first_seen":"2026-05-19T16:48:02.969315Z","last_seen":"2026-08-25T13:05:29.54857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":81,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-hub.xyz/assets/24/skinslocker.png","fqdn":"static-hub.xyz","domain":"static-hub.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.171Z","timestamp":1787663090171,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/24/skinslocker.png HTTP/1.1\r\nHost: static-hub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T15:40:44.827819Z","times_seen":18098303,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Ng1PNWfM/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.172Z","timestamp":1787663090172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /Ng1PNWfM/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4502\r\nlast-modified: Mon, 18 May 2026 18:23:36 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4502,"size_decoded":4866,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"5ca8551e24a76cb22788184e6414770c","sha1":"2607cd63e661a9f43bfc4b574a29eb9a8d99c8fa","sha256":"03f73b132ae7066b66bedcc6c013c1e50153c87192d945d7a3c347760fbb4283","sha512":"9351ddb5c0eaa30bf730deac8765e0b9a0369c5f4e4ea3c00801c06814d1d12cceda4f3a086e62c095490d9d2edf4fcfad42aa725c72c1760b3a27bf56b7a432","ssdeep":"96:B/CDDqT370/zdJ2rMUFU0aW9bZCMP6v9Cgyf1XutVzr1:B/CDDqv8J2rfaW9dCMm9CgEuzzB","tlshash":"33916c7469193180f411c3e51c223a3eb7b108fb270eb148a1bdf96f26088ebe749992","first_seen":"2026-05-19T16:48:02.992469Z","last_seen":"2026-08-25T13:05:29.549556Z","times_seen":3,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":122,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/n8mG6vFJ/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.157Z","timestamp":1787663090157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /n8mG6vFJ/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4233\r\nlast-modified: Mon, 18 May 2026 18:33:56 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4233,"size_decoded":4597,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"354b8e61c7dc0c5080624af4b3705426","sha1":"84cf2cff555c63ab5f0ff8414bc0fbb41b7356b3","sha256":"dbc0284e642aeb3913d2630c2fe57d2b022ef067cf5d83ca9d1ad1fafd601d08","sha512":"b79a4699641058fbadd32f0573e9d05a3c5b22582cd1487d793df90e954df2dfab096cef68bd6db4ec3593d73dd6ef2418e1142fba687f4989e5220827f85f37","ssdeep":"96:msA0U720xlgL5YPMVVpFdKHk7bJjs61kCEoowfR1sZmCgPhee:XTFOlgWYz40PeCenXgPn","tlshash":"d8915bb13689f98c8c5703a6578626984656430e9fa4c38d79ea0f0e1385e443eba7e1","first_seen":"2026-08-25T13:03:46.711948Z","last_seen":"2026-08-25T13:05:29.550697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":81,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/5x2pjq9q/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.145Z","timestamp":1787663090145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /5x2pjq9q/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 295468\r\nlast-modified: Mon, 18 May 2026 18:08:16 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":295468,"size_decoded":295834,"mime_type":"image/png","magic":"PNG image data, 640 x 279, 8-bit/color RGBA, non-interlaced","md5":"f0113d377cf26bd7f01a79ccfbc40584","sha1":"e69a48b2112899d1b37effe733f7a156a6bb40b7","sha256":"8d0dcc3c69fbb579427bb114c8931c8f3ddffd69ebd10587aeb99c923d14696d","sha512":"8036ce160f9cf625f547d9d9275166fd98e1a55c23da84059b26445fb8b3d42fe87640b00157e4378a34a35242ee93ae958c2b57df17f03d314ff4b748cd6e09","ssdeep":"6144:x1HZ/L5l/AN2dbZuiOS+dZncEBkjodRgtBOvmzleipHhcXaTB2d:vZ/Nl/TgiOPZ/Buxtp5e2cXaTBs","tlshash":"a25423ba6eec4c31037681ee427d8cd32cd2655aa3314a61df8be9f4817565f8107b8e","first_seen":"2026-08-25T13:03:46.707483Z","last_seen":"2026-08-25T13:05:29.551791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":48,"dns":0,"connect":20,"send":0,"wait":61,"receive":208,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-hub.xyz/assets/24/skinslocker.png","fqdn":"static-hub.xyz","domain":"static-hub.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.324Z","timestamp":1787663090324,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/24/skinslocker.png HTTP/1.1\r\nHost: static-hub.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T15:40:44.827819Z","times_seen":18098303,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"static-hub.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.632Z","timestamp":1787663090632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortbid.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:41 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518049\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-25T15:43:57.362982Z","times_seen":266594,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":5,"connect":36,"send":0,"wait":19,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.131Z","timestamp":1787663090131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bptbt-1787662632602-1b94a94903a3\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZqIuy%2BhsT%2BmjdKIwRHo%2FD6Ly6IWegL8XUuHZTrmfVAtWfyvHvR1MCiMktoQb6j7Fs4k8o3accy1JGz4JKONQRB9bLkBz4bb72P4RD4dqwkTadjpb9XkCvDgK0EKhoZrIJjDN9Q%3D\"}]}\r\ncf-ray: a30ace096c7d2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T15:40:44.827819Z","times_seen":18098303,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/bg4SdNqt/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.163Z","timestamp":1787663090163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /bg4SdNqt/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4237\r\nlast-modified: Mon, 18 May 2026 18:37:08 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4237,"size_decoded":4601,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"9bcebfaba2041243eb4971beb041988e","sha1":"ec3dfca5e037962056c13aa2ce42a1a3acf450d0","sha256":"c1312dc5f3a41dc972a9a67a45ff0fdb287884e92a0fe2378f07dda15bc30114","sha512":"0d81242e540fcda5e21879d669a98322fa40561a7c870185804ef93ce20be6a61a2717f8bff245a8b811539ffd8868d895e57c3af86adc3cd85af477fe97b937","ssdeep":"96:nW3HFSifsSGTSDbOzCFFMhsbsgviZdyEd9Wm1tzNKmX9TWJd:26+HOYWsAgqZzjWcBKmtTc","tlshash":"cf916d9eadcf86f7ec9e15050e681129ebbc250d460324d107dafdaa6168457052cfde","first_seen":"2026-08-25T13:03:46.669116Z","last_seen":"2026-08-25T13:05:29.552826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":122,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/HTL5Z976/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.169Z","timestamp":1787663090169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /HTL5Z976/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 110632\r\nlast-modified: Mon, 18 May 2026 18:18:51 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":110632,"size_decoded":110998,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"998d663b9bf797f61b2088961494969b","sha1":"5f54102486d86074623169490c0293b8a3516e84","sha256":"9450077cf4ff52c642b1ab663d5b1ddaf1270609be3f2860f7b25db4062fd4a8","sha512":"dba36cf599285668d6d9fbea9f32678708be30aafe344b54f7ff15507115ad8c6a0dc7fbfe7a66e344aef69d645293463d722ca1d08a0a87d0f7d50c27e6522c","ssdeep":"3072:PqkG+JKqy9B7Q3ZPqnRUUBNSXCZyJNwUXueh5:PqqK3rMpPqnvKXCZyJ7+M","tlshash":"b8b312e2dbc36fd63d37e472b58629db3c0a63e6012c7096a757d92490c835ea6e1c43","first_seen":"2026-08-25T13:03:46.726456Z","last_seen":"2026-08-25T13:05:29.553744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":122,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/epic/counter","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:51.840Z","timestamp":1787663091840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortbid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 13:05:24 GMT","end":"Sat, 07 Nov 2026 13:05:23 GMT"},"fingerprint":{"sha1":"88:B6:18:4F:E1:8E:37:41:2A:39:59:BD:3B:30:6D:DD:91:2A:A4:E2","sha256":"BB:8A:C8:76:E2:7C:74:B6:B5:95:D3:00:86:4F:97:53:43:18:28:BC:F1:FA:48:D9:8A:D9:4D:9E:4F:98:CF:52"}}},"request":{"raw":"POST /epic/counter HTTP/1.1\r\nHost: fortbid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortbid.com/\r\nContent-Type: application/json\r\nContent-Length: 401\r\nOrigin: https://fortbid.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":401,"data":"{\"action\":\"visits\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"width\":1280,\"height\":1024,\"colorDepth\":24,\"timezone\":\"UTC\",\"hasLocalStorage\":true,\"hasSessionStorage\":true,\"hasWebGL\":true,\"gpuInfo\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe, or similar\"},\"hasTouch\":false,\"cpuCores\":8,\"deviceMemory\":\"Unknown\",\"doNotTrack\":\"unspecified\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.3\r\nDate: Tue, 25 Aug 2026 13:04:52 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 16\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":305,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-25T15:44:10.658569Z","times_seen":185620,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/7JtPXPqy/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.165Z","timestamp":1787663090165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /7JtPXPqy/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 121382\r\nlast-modified: Mon, 18 May 2026 18:17:45 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121382,"size_decoded":121748,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"846717bd42dd1a067968f555ace96b7d","sha1":"7a9cfbb14fac266b723f359ba1dfb054fe6e6e80","sha256":"2c3ea673a51d460267807558966fd5cef61e36d9f032d949095373ab092427cd","sha512":"124e79e54921ea665877ef5323ebada12d2882136be1f52c04a8d2b42b9f358efa38e674d400596ee8a69b558c0ca85657248313c754788e6f396adc154e99d0","ssdeep":"3072:wqKuGB1JCMWg73LnDyslN0tbBfETYPsQKXcEN/:vVGByFg73bmsl+tF6QVEx","tlshash":"1ec312e9c31e703a9be364db5229d33071c48e5ad2564b72b43785861d8ebec3bd1522","first_seen":"2026-08-25T13:03:46.699404Z","last_seen":"2026-08-25T13:05:29.555288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":122,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/jkCnS2G8/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.166Z","timestamp":1787663090166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /jkCnS2G8/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 120131\r\nlast-modified: Mon, 18 May 2026 18:18:06 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120131,"size_decoded":120497,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"4642eda9f0f3d185cab611cf88bccc82","sha1":"d49f378920ff58d369ecc4612eab05a578c813b1","sha256":"107d8946ac30726f2eca69bab20503c5d90c0e3f6356131d59f19093ebbe083a","sha512":"c9893d14ede8b71329221f022cdcdf5a6b36acd8332047b3bff692188d4781b867cd15c1d6f1aaddf8ab19a5157c3c8345f64fe69fccd481940e8dcc27b85da7","ssdeep":"3072:bFWh7dtLqvEFgre6gQazRfz+0IJ0dCpq7cw9xyKyo3k:47z6e6ghzRfzQJMC7+xyrj","tlshash":"13c312e3e3d5777ff9d4dc8370a15f0d2ee199269a1460e2a432e0fe20095bf2da0995","first_seen":"2026-08-25T13:03:46.719058Z","last_seen":"2026-08-25T13:05:29.556061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":122,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/svh15B2n/Frame48.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.575Z","timestamp":1787663090575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /svh15B2n/Frame48.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 262118\r\nlast-modified: Mon, 18 May 2026 18:23:03 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":262118,"size_decoded":262484,"mime_type":"image/png","magic":"PNG image data, 640 x 191, 8-bit/color RGBA, non-interlaced","md5":"68ab643b1651e0b8ff2e3c65a271ca79","sha1":"b7c68f0bfa3de7e35344c05408630780fee802f0","sha256":"513943c761a2e14ff0d75ec5bb235bbd2bf5e89b3550c5e1b2fc0b2a66c64737","sha512":"3bf627277aa4d47be4bc6f91122d614da156fe3c49a064f57a7299748667950d97c2f1d5f7aa42d2ac06d06d19417a854554785dbbef3ae0660555c5d83abc71","ssdeep":"6144:E4TXx8CX0NyNdcLylyUA5ztntohbncFv9zpWenLs0IVcAoj8xKIrMm0:E4dkNyNdhQ7mnyv9FWcLs0ecAoYA5b","tlshash":"514423a8e0ae213d44fb847f532225c172c12898e1e88c68f7fb2d5467da21b5dcf635","first_seen":"2026-08-25T13:03:46.685712Z","last_seen":"2026-08-25T13:05:29.556955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/fonts/Burbank.otf","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.636Z","timestamp":1787663090636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortbid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 13:05:24 GMT","end":"Sat, 07 Nov 2026 13:05:23 GMT"},"fingerprint":{"sha1":"88:B6:18:4F:E1:8E:37:41:2A:39:59:BD:3B:30:6D:DD:91:2A:A4:E2","sha256":"BB:8A:C8:76:E2:7C:74:B6:B5:95:D3:00:86:4F:97:53:43:18:28:BC:F1:FA:48:D9:8A:D9:4D:9E:4F:98:CF:52"}}},"request":{"raw":"GET /fonts/Burbank.otf HTTP/1.1\r\nHost: fortbid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.31.3\r\nDate: Tue, 25 Aug 2026 13:04:50 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 80\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"50-XFGP6xfbfzYyupU6XzvzbUFk4xk\"\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":80,"size_decoded":376,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1e3279e1e7c995eccbeac73798ed0f93","sha1":"5c518feb17db7f3632ba953a5f3bf36d4164e319","sha256":"473b756e015e3bfb3c60d15025d8a78c26c28f31316d9deee3da223734888838","sha512":"4c2861734c9e5ef06b6a89c984caa4971e21018ff869562bec6a3c764679326743778f06acffa79f8b3acf8b72164b9b0ff19a767ed8184cda184814cd28f3c4","ssdeep":"","tlshash":"9aa01108020a3ea88f228ea2308cba3088a20a802e220800000880b88aa00ea8280308","first_seen":"2026-05-19T16:48:02.989338Z","last_seen":"2026-08-25T13:05:29.557776Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/xKX0k9Bd/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.152Z","timestamp":1787663090152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /xKX0k9Bd/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1115\r\nlast-modified: Mon, 18 May 2026 18:20:17 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1115,"size_decoded":1479,"mime_type":"image/png","magic":"PNG image data, 39 x 39, 8-bit/color RGBA, non-interlaced","md5":"4d3105563a77d69935c6eeba1ea14131","sha1":"ba6c1a94506399b5cc39ca278f6e0a2d5fe84bed","sha256":"09eeb50cbd1e2ee8134148dd18c6ea1918a10e8c31a91846903c39c63a5af0fd","sha512":"6479ea4f1febfc84ed007e275d19d7a1045d1d74ddef6b856dce86813c3c4270da100f7d526f758eac6fb6a5105f6e8b41d9f2764edf3a0852e59609f593dd3b","ssdeep":"","tlshash":"572129c6dbff1df5eb2944e8a714f7247ef308482c13113c4c86c982e0816aa526d2e4","first_seen":"2026-05-19T16:48:02.9749Z","last_seen":"2026-08-25T13:05:29.558547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":122,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/9H3bm2r3/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.160Z","timestamp":1787663090160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /9H3bm2r3/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4142\r\nlast-modified: Mon, 18 May 2026 18:41:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4142,"size_decoded":4506,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"2a2eb078083b5d6d759369d17826ea3b","sha1":"285c0b5dfa27e28643c2654a184f845ff2f140f1","sha256":"8af3d81b25f174b9d30960fe6cfb59cccd5652535fe87faadd1c79ab7e7f5359","sha512":"6c59ebac013bba378a497ed8b796136d75869afb3d4d0fee2211c281c72d7de5468fb86c945f1912dbb25b9aa09b40373cb8da7176bf680fdc00759ed91e1967","ssdeep":"48:KSEUpYc9pwHdx+kREMzVOW2CHhhXpYsH4VPF1IuL319ZMxTdCNziXGuxznlMZAYW:KS1YKqvYowzIo1AEOXGao6bSLq","tlshash":"02816cb793c72a1793d500b982030ca6f4dd0ba465029d0a06c47e5a2b3dc1fe41b984","first_seen":"2026-08-25T13:03:46.645751Z","last_seen":"2026-08-25T13:05:29.559365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":122,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/yv1q17m/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.170Z","timestamp":1787663090170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /yv1q17m/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 127502\r\nlast-modified: Mon, 18 May 2026 18:19:05 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127502,"size_decoded":127868,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit/color RGBA, non-interlaced","md5":"a9c6e6fe934016d27f9e77c4aa531e93","sha1":"b2fce3dbd279dceecd3332181a34951bec6dc9b3","sha256":"ffff1ea99ba78a1e880341469afe9b39c91193e79be31f38855d001680d9c4a6","sha512":"821323d6dbe430d0d5eceda13a8b2392e40c67c815cf2ddd295dbafa0f55dbdd1d35178ffb4af5f306b59692463316bb70637e929db2b2d2a685195f73c9384a","ssdeep":"3072:06RwqqRAfIcvazXDJOk3VrptJ98TgOtK+ICYBeo9LIuHmYj0G8:bw2fIbtOk5V94ntWCYhF1boJ","tlshash":"39c31205d4902ebffac916251b3d85b333c588bc0124e228a2fd6566626773ff9b4379","first_seen":"2026-08-25T13:03:46.68869Z","last_seen":"2026-08-25T13:05:29.560173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":122,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/visit","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.304Z","timestamp":1787663090304,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortbid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 13:05:24 GMT","end":"Sat, 07 Nov 2026 13:05:23 GMT"},"fingerprint":{"sha1":"88:B6:18:4F:E1:8E:37:41:2A:39:59:BD:3B:30:6D:DD:91:2A:A4:E2","sha256":"BB:8A:C8:76:E2:7C:74:B6:B5:95:D3:00:86:4F:97:53:43:18:28:BC:F1:FA:48:D9:8A:D9:4D:9E:4F:98:CF:52"}}},"request":{"raw":"POST /visit HTTP/1.1\r\nHost: fortbid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortbid.com/\r\nOrigin: https://fortbid.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.31.3\r\nDate: Tue, 25 Aug 2026 13:04:50 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 69\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"45-i4Qy0vOskzd+uHj1oCcwAHMOxK0\"\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":365,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f608c4dc1fc0c7edbcc6d6ce2a8a48cf","sha1":"8b8432d2f3ac93377eb878f5a0273000730ec4ad","sha256":"c0dfa994ffd4774e4cabf0786ae4d37a8763c2ebd05fde3902c450b4feeeb378","sha512":"e3817396829cc77d259dc5f31455748a00bb167b9c696f1e6e46f0e5d2265ddfc32750fbcd954e6b97d666e804dbb7db2b40ffdc768998801b96bac6e0d82a61","ssdeep":"","tlshash":"41a0220c000b3cac0f2ac8e8308e2a3000e3b8c000a30c20c008c0300302a0ec080000","first_seen":"2026-05-19T16:48:02.966728Z","last_seen":"2026-08-25T13:05:29.560935Z","times_seen":3,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":48,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.633Z","timestamp":1787663090633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortbid.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:41 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518049\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-25T15:43:57.362982Z","times_seen":266594,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.186Z","timestamp":1787663090186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2503349\r\nlast-modified: Thu, 30 Jul 2026 09:47:27 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NaIKjSbJLvevzzMc%2BI%2BssxCzGaa%2FVJl0IzXTqNl0x4XeCYfjq4YKrf%2B9yIj5EaSHQiZ72E49GyXFB5u7vHwmlEFk6hpKVgla9vx0nVWB5emsuNtdkOfbvVcLep8sUXPxj8UBFH8%3D\"}]}\r\ncf-ray: a30ace09ad562efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127122,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-25T15:59:30.245112Z","times_seen":50697,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/dshSM9Dv/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.158Z","timestamp":1787663090158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /dshSM9Dv/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4200\r\nlast-modified: Mon, 18 May 2026 18:41:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4200,"size_decoded":4564,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"e55078f34d4257f7b5490755b22786ff","sha1":"989572695acac0fcbc26aa94bf8d8eccafb5dcf9","sha256":"2a82292215927ce81ad6c973ae70f63dae4e061cf0e3dda1c759208443b95fed","sha512":"6c8a2cfac4e49040e1b1edcebc94c881cbd473ce19c642c14293f6ad53c2ffc0a3c761b15e11f47d3878a0cc7944c6030abb329cfca41f082ee724fa633694e6","ssdeep":"96:GjsMj8jnhxIozq9o5zlUhoaT+hB3v7954NQGnuptL725:dDhxIfo5aT+hBxPFXs","tlshash":"15818fb9b12b4fa4b3573911f0b36c6018aac0c1428755e0fd7fec756ca4a22a4e1bd3","first_seen":"2026-08-25T13:03:46.654324Z","last_seen":"2026-08-25T13:05:29.562354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":61,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortbid.com/","fqdn":"fortbid.com","domain":"fortbid.com","tld":"com"},"ip":{"addr":"83.97.20.217","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T13:04:49.318Z","timestamp":1787663089318,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortbid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 13:05:24 GMT","end":"Sat, 07 Nov 2026 13:05:23 GMT"},"fingerprint":{"sha1":"88:B6:18:4F:E1:8E:37:41:2A:39:59:BD:3B:30:6D:DD:91:2A:A4:E2","sha256":"BB:8A:C8:76:E2:7C:74:B6:B5:95:D3:00:86:4F:97:53:43:18:28:BC:F1:FA:48:D9:8A:D9:4D:9E:4F:98:CF:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortbid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.3\r\nDate: Tue, 25 Aug 2026 13:04:49 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"2b759-pFFxsEgyCiVkZcwYu1sh6pu0fUc\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Nginx:1.31.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178009,"size_decoded":34141,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1997), with CRLF line terminators","md5":"99269ac3617586c28d3e64a0d75b1565","sha1":"a45171b048320a256465cc18bb5b21ea9bb47d47","sha256":"aec9154e59c0cbd0df2742694a4aa6a6e770af39fc8870c2d2e87877da86d146","sha512":"e347f268c370a1e14c85274473724bd779170ea0bc1f4afd5aa1c8cd1ef03311c9095350b286ea79482dc84da441d9269c0d01723e5f9cca48fce7311c510154","ssdeep":"1536:2Joc4QGtFZYY0cHmi9y1tEUh6cHmi9SltEUhEfwQodNbLH9tilpVegI9W7uB75H7:CswR4t+pK2j3IwPZRu","tlshash":"8204e873259104a611738769fb91fb49f669b35fc60780dabafc52033fb4c86c493aa4","first_seen":"2026-08-25T13:03:46.659164Z","last_seen":"2026-08-25T13:05:29.563181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":5,"connect":49,"send":0,"wait":326,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"fortbid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"fortbid.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/fY7HXbpb/image.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortbid.com/","date":"2026-08-25T13:04:50.151Z","timestamp":1787663090151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /fY7HXbpb/image.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortbid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 25 Aug 2026 13:04:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1033\r\nlast-modified: Mon, 18 May 2026 18:19:58 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1033,"size_decoded":1397,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"a16362e8c9905c6ee774808b2270f377","sha1":"04d737dca775927090bb0d3cf41f695fa2afac33","sha256":"a2cef1d52e58ff37b5e5b9c3cc3e39dad7d43e08bdc07f29e8faf04a40ace96e","sha512":"a20b1a3a33f194633fa1aff6dd769782fd210b46d6966335acc93257885f5cc71ef834adb1d84d0cd7e4f465ed83f9d09a4c314f96cdb56b52869dc1d4405626","ssdeep":"","tlshash":"d311d88dd42ed428e2bd331bd47909fd0de900ea9d8853279404a9bd88b90c610473ac","first_seen":"2026-05-19T16:48:02.96832Z","last_seen":"2026-08-25T13:05:29.563985Z","times_seen":3,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":139,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
