{"report_id":"0ec3883a-b0ce-47f0-a41b-71840c9e18ce","version":6,"status":"done","tags":[],"date":"2026-04-28T14:44:37Z","url":{"schema":"http","addr":"ffsend.com","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"ip":{"addr":"172.67.187.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ffsend.com/","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"title":"Fast File Send - Home","dom":{"size":5817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"3885f1ecbf571516a08d848a2d030251","sha1":"7cda380d547ac9200e91d988662ce5c0794bb4eb","sha256":"7c7e85187a292b48e6876da5c18c67b0ff58b13d1a34aefb799fac93290b2fd3","sha512":"88a84a59af4f15df543e9f92670315e5b5e827b1facf251cd9d3bdfc6dd6b3c93b46e04177baea3ab42ad574afc1afeca08a27784177efa89ea7245e3135686b","ssdeep":"96:nTuQF8TkAylyRUIlTtUOfVu/vKNOPqfWyJ5pAefQefYw8g314:yw8iyRUIVOEQ8HfWyJS7g314","tlshash":"8bc1202a60d2000e7143a4b62b55276a6b58b40bec07fd603a5e02dccfae67cc2f374d","dom_hash":"domhash58cdbd8d1788857ec89eeba1fbdf7b73","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ffsend.com","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"ip":{"addr":"172.67.187.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T14:44:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ffsend.com","ip":{"addr":"104.21.92.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":11324,"sent_data":1753,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":3,"received_data":5338,"sent_data":1374,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":2,"received_data":43994,"sent_data":1052,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ffsend.com/","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"ip":{"addr":"104.21.92.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T14:44:16.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ffsend.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 05:26:54 GMT","end":"Sat, 04 Jul 2026 05:26:53 GMT"},"fingerprint":{"sha1":"D0:76:59:9E:EF:D5:A0:18:55:41:59:C2:21:32:B3:10:E6:F7:E6:A6","sha256":"DB:23:66:F4:23:B6:DE:A1:19:10:7A:E5:77:92:90:08:E0:F3:96:96:04:4D:67:BE:40:44:FF:1F:FA:CF:7F:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ffsend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Dec 2025 18:06:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVreTaQMgSyHepXV1Fn3PRQKuW1zuU0gC9cbYQtUuNaFJiLa8DMm%2FOl5GaId9SGtZXkO53UYgmiIEbzID2c9mTaLgdu17CfNe1IPp0S1c1%2FAZECIu9X3eq9PtNy2\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f36d810fdee2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5819,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"23629a6198b518288c847db58e55482f","sha1":"a8d9894df22e62e46b7dc651bfcd375263fa54ba","sha256":"e10160a63e7c8fa5579c2b98acb7f8061802226e2397ada76f668a891167a2db","sha512":"b4b545e7ccc425db171353d708c0ff6903f9002529d65a26bb5bb35dd4b1b70677ee8cd230c4ff5cdeed259e2bccf091020f2559716ac35ba5b09ba1d5deed61","ssdeep":"96:DxQp7TkAylyRUIlTtUOfVu/vKNOPqfWyJ5pAefQefYw8g31HM:Nk7iyRUIVOEQ8HfWyJS7g31HM","tlshash":"a7c1001a60d2000e7152a4b62b55272a6b58a407ed07fd643a5e11dccfee67cc2f374d","first_seen":"2026-04-28T14:44:41.855178Z","last_seen":"2026-04-28T14:44:47.081849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":135,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Dosis:wght@200..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Dosis:wght@200..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ffsend.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Apr 2026 14:44:16 GMT\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"015c5c11f719d72e47de164a6805f4c7","sha1":"33b067bee15a5ff64d50ed086aba55c317636162","sha256":"d54de72c7d6bf97f6f8e86226bf656c71de0e83ef88455fc8f0728435b6393f4","sha512":"b189409ef9f64fb7e3222ebe49ca420b181d60684e73ba51181653a4a2cf5f7517bf1751716126a01e592be0a73677632ea214099dba2ee567530cec3680ad3c","ssdeep":"","tlshash":"0e21dc90446aa440ea870dc123ce7e32ee5e616464548abdaffd088cec9ac266356b0d","first_seen":"2025-09-30T05:04:10.869759Z","last_seen":"2026-06-10T04:19:33.146943Z","times_seen":48,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":92,"dns":0,"connect":24,"send":0,"wait":35,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Megrim\u0026family=Pompiere\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Megrim\u0026family=Pompiere\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ffsend.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Apr 2026 14:44:16 GMT\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbb13226df35d9340d3bbe9df6e8b20f","sha1":"ec26c047db2ae85c4b68ce885a1ea74d68b0e596","sha256":"0f0c9610d4c589fc28e44e82f08aa7505ae7bb93ffee1912e847f122309270c9","sha512":"666a7f84fe26c65a0998e6a15e2e48fd7ceb25298f49c7cef80be921f1f551ba7c9f746681af8078521ae2b1abc057eac96075688309a2388290c922d05cca54","ssdeep":"","tlshash":"a521af81086bb500eb935cc112ce7e32ee0fa1506845a975affe58d8bc96c565362f1d","first_seen":"2026-04-28T14:44:41.857218Z","last_seen":"2026-04-28T14:44:47.089934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":97,"dns":0,"connect":24,"send":0,"wait":41,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ffsend.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 11:02:25 GMT\r\nexpires: Fri, 23 Apr 2027 11:02:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445311\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-06-13T09:19:16.177487Z","times_seen":3395,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":60,"dns":1,"connect":22,"send":0,"wait":14,"receive":5,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ffsend.com/_style.css","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"ip":{"addr":"104.21.92.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ffsend.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 05:26:54 GMT","end":"Sat, 04 Jul 2026 05:26:53 GMT"},"fingerprint":{"sha1":"D0:76:59:9E:EF:D5:A0:18:55:41:59:C2:21:32:B3:10:E6:F7:E6:A6","sha256":"DB:23:66:F4:23:B6:DE:A1:19:10:7A:E5:77:92:90:08:E0:F3:96:96:04:4D:67:BE:40:44:FF:1F:FA:CF:7F:D2"}}},"request":{"raw":"GET /_style.css HTTP/1.1\r\nHost: ffsend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ffsend.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoFrkmtU3m5KgSsKW6%2FhIGqy74ua03QPP80x0c94ibctq9fHOavLTkoEIXt0JwOuHFIwrZV7CWaBc1Ou6bUKhEW2Ny2wHvR%2BZR5eRGtNPRj%2B%2FwaThUGbiungqkTU\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36d8133825b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-06-13T08:39:09.488106Z","times_seen":17844,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Lato\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ffsend.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Apr 2026 14:44:16 GMT\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":818,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"865f3a35d6595dbcba51302b78e308fe","sha1":"f0e3142cc81d8baa44e03cf12f342c0e4d23325a","sha256":"6a8d638c251dcb0772527e914f642d1b80f85fa7c1dff46253bcb45378ca2267","sha512":"eb8221fb16627675fbed77f7fbc81573d765c04af3b39f74ab0aad62733fe664fa44725e1a672c170d4e0978a055dd24e6b918df767ddc4e130f803cdaacfcba","ssdeep":"","tlshash":"9401ce91056ba108db870cc213cd7e32ff1e625064499934eefe14d8bca7c698351b0d","first_seen":"2025-09-17T02:19:04.265486Z","last_seen":"2026-06-13T06:25:33.348697Z","times_seen":4755,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":98,"dns":0,"connect":22,"send":0,"wait":38,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ffsend.com/favicon.ico","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"ip":{"addr":"104.21.92.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ffsend.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 05:26:54 GMT","end":"Sat, 04 Jul 2026 05:26:53 GMT"},"fingerprint":{"sha1":"D0:76:59:9E:EF:D5:A0:18:55:41:59:C2:21:32:B3:10:E6:F7:E6:A6","sha256":"DB:23:66:F4:23:B6:DE:A1:19:10:7A:E5:77:92:90:08:E0:F3:96:96:04:4D:67:BE:40:44:FF:1F:FA:CF:7F:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ffsend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ffsend.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJNC%2F%2BlhXbBH%2BRrOSF%2F3jV%2FOKYszuVr7ka41DX0eEUhrYPk%2BViDjKmjx7K85Rpc%2F5807GdXoSgBkJUcXVPZZZ%2BT6p8BRxkJyAP48lvuI2nNYS%2FQjyDtqk6Tu%2Fihv\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36d814e84db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-06-13T08:39:09.488106Z","times_seen":17844,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ffsend.com/3px-tile.png","fqdn":"ffsend.com","domain":"ffsend.com","tld":"com"},"ip":{"addr":"104.21.92.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ffsend.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 05:26:54 GMT","end":"Sat, 04 Jul 2026 05:26:53 GMT"},"fingerprint":{"sha1":"D0:76:59:9E:EF:D5:A0:18:55:41:59:C2:21:32:B3:10:E6:F7:E6:A6","sha256":"DB:23:66:F4:23:B6:DE:A1:19:10:7A:E5:77:92:90:08:E0:F3:96:96:04:4D:67:BE:40:44:FF:1F:FA:CF:7F:D2"}}},"request":{"raw":"GET /3px-tile.png HTTP/1.1\r\nHost: ffsend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ffsend.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 14:44:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2650\r\nlast-modified: Sun, 21 Dec 2025 15:14:13 GMT\r\npriority: u=4,i=?0\r\netag: \"69480ec5-a5a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3%2Bt%2BYwH9S7EAMlbOOGKeF5ruE9Sr3ljppHgBCmMbUD1z7H6LAgxq%2B5fwmQ3sd9fwqVMdVzTMFr57VTe22MnoZoysrcWMjgV6U8Pw20XkFW74UFYTR2wgPiBWUMg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36d814e84eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"19eebdb2d63fbe199c75bfdd5b17ce5b","sha1":"9e0edb051b8944b0d1cf2e53f4e0a27b08f23570","sha256":"db0a16ab6426de5cddeae4a4ee1fd3581482497fb94a658e5fdd5e443e570879","sha512":"7d4a25d272b6b0e66333f771159b7d65467c99900b5f3cd131995451af5a5a6b26dd424f054ae825a943f42d0234ae10ad58aaeeaa0df963a3114d0391b5523f","ssdeep":"","tlshash":"16515c5781512cf0f73d8a77f800faa3af363a09495912efb06eb19a87975714f14211","first_seen":"2023-05-22T16:11:41Z","last_seen":"2026-06-01T09:08:06.150924Z","times_seen":22,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/megrim/v18/46kulbz5WjvLqJZVam_h.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ffsend.com/","date":"2026-04-28T14:44:16.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/megrim/v18/46kulbz5WjvLqJZVam_h.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ffsend.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 15:47:39 GMT\r\nexpires: Fri, 23 Apr 2027 15:47:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 428197\r\nlast-modified: Tue, 09 Sep 2025 18:57:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11580, version 1.0","md5":"0c970dd50b1233ab38eabb5785e629a9","sha1":"9e643f2a8744b7e989d2993aae7d4f79cb32da13","sha256":"c161cb25627927f4d686d2b2fff1686101c2719edcfb9d77830fe15c59620bfe","sha512":"706a059505ac48a1084c0a0a21544088cff41cf6db2c66c26df5cad40ca797fb238a61144dda85c4aeb8d244e9caf094cb730f5e3557ffab0d38b011a65c683d","ssdeep":"192:9OgVvEc9uK4OAIV+fZt6rBmEYNeZyYkHL2bbVFbBXmvw5vFr3yRDd22L7zz7RDaZ:9rVvJqtJxol2eMYbVpBsmNryrPL7XYVh","tlshash":"ad32ae0cd79da82ecc00a7b2497a38d633ac193f53d78a4d549ad4fc5686407b3bc99a","first_seen":"2023-05-06T01:49:34Z","last_seen":"2026-06-13T00:38:10.627692Z","times_seen":50,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":64,"dns":1,"connect":10,"send":0,"wait":10,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}