{"report_id":"2388ad71-2226-43d1-b4e3-e63905a4f372","version":0,"status":"done","tags":[],"date":"2026-08-28T19:51:52Z","url":{"schema":"http","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":0,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"title":"abertodepositian-pt.fyi - contact with domain owner | Epik.com","dom":{"size":15286,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3796)","md5":"1cff73c15ca7cb256e44f63a0aa93cac","sha1":"3ba2a83ade9072976afd9e95f9f0e1e1392de499","sha256":"abb36d619105cebe503e5d5a41bcefedd9d8de097d9902704e8a1d36aa7f22b5","sha512":"e46ed1bb158fd9b1105d3534f6feb521ce6da78ea8a24cfae4b4f38812d6f23603498849ad254fdf284ae2df5bd659ffd2ecd6db9966a569ee0a058ce27b755c","ssdeep":"192:/+r96tQKdQUueFJdR1BetDpQ+NcAngiiAi+4mfG+Gwr+:JfsttZyyB2+Pr+","tlshash":"1d62fb1169e1d89100db88cca933a9295af84347c60741d8f9bc8bf45fafd7eca73249","dom_hash":"domhash6358526798c28da81ad08fcd04365976","first_seen":"2026-08-28T19:51:57.577746Z","last_seen":"2026-08-28T19:51:57.577746Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":0,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T19:51:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.epik.com","ip":{"addr":"104.18.3.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-04-16","domain_rank":0,"first_seen":"2012-08-03T00:26:01Z","last_seen":"2026-08-22T09:04:56.947207Z","alert_count":0,"request_count":1,"received_data":154295,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"abertodepositian-pt.fyi","ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T19:51:52.754523Z","last_seen":"2026-08-28T19:51:52.754523Z","alert_count":65,"request_count":13,"received_data":196318,"sent_data":6730,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":4,"received_data":186184,"sent_data":2320,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":2,"received_data":24546,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71b2bf44abe3e44130421b899301410f","sha1":"47fe0c8662e3d17de3e4cbcad294f7ee22e9630f","sha256":"51d85909e170a55eca97382374d8b7fd90b37599eb78c86434239298fee81aad","sha512":"a5ec8bd8adb91694b3a72131ce7451eb8178ab461d6a71f30d97919a6adebfe1d7b5e0f626f1b9b737ff49f431a8f729f53eb682013408a4a0d487ce59d2c084","ssdeep":"","tlshash":"19f092ca44a2825c13e35669cb5f720ce27718ef6841e6723a5d82403f6433e4b6e6e9","size":489,"data":"","first_seen":"2026-06-07T04:33:49.678068Z","last_seen":"2026-08-28T19:51:57.613892Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d35d6403b9378c7d9272d34e3f063c8a","sha1":"c62db84663fdbdbce383291dff46dbd9101f5894","sha256":"7f47d02bf9cbc5126add5e4680239b7c8944c3e05e7807ae00a674c2c30ff0f2","sha512":"af7f8b44dd546cea8df8771f23214e39aee59e40f649cb6e35c3bee9869919abff2fcdc9ebcd1dec7c57def1fe440b149b2ac4e9b92a5d23e84c5e6e61c8a455","ssdeep":"","tlshash":"549002495015d89484424259629091921911995c901ca81096055091520051c9016ab1","size":49,"data":"","first_seen":"2026-06-07T04:33:49.679547Z","last_seen":"2026-08-28T19:51:57.614845Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2055336566db311240c9456cf96d7b6","sha1":"1ddb3c31117103eb0e03c64f9e7f3a9a8a4574e8","sha256":"bcb0c8bf57997332a02d74c496868a55b79e9fdf41a02d7a4c5479b671fa0be4","sha512":"a083fc43a537662a1bb1f435e8da161527327de572845e782e74c6586760f6a2352f28929a3158c372ae5f59ccbca78ff8f1726802dd9d9f9642f01173fa9267","ssdeep":"","tlshash":"d1019761be6b7ce880a088b00dbb977fba0a025d238d8cb9844424c45087033a5e72bc","size":747,"data":"","first_seen":"2026-06-07T04:33:49.680968Z","last_seen":"2026-08-28T19:51:57.615743Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/js/global.js?v=1","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b08992307bf75cff71e268fe1bec7b7","sha1":"6518204f41cec36228d2c19c2d138cf1c4d972ee","sha256":"24704d232f9937d71f8aec02c4308ed0b1e4fa237e144fc373fd520b6d935076","sha512":"720592d8067acfa2ab3b2a9269258d24a89d35184e9883ab062929146b6e66264cc6fb38fa8f0f29008d3d26323468fa80d22de702c51df4ae692874399c9aa4","ssdeep":"","tlshash":"f241bb1bbca6ad94fe2360bf6c3f610c50377507ba45d2d8765c02814f34ba9981ad78","size":1979,"data":"","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-08-28T19:51:57.601957Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-28T23:33:30.722292Z","times_seen":196761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/js/lab.min.js","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bae8f54eb5be64b131e498e2c233bbc","sha1":"25aa4807d5d07f1dbd9705866fbe6540ad0fd1d5","sha256":"565169484eb0f13570db78742dcf091e83129a2a0471ae485aa13a890f378258","sha512":"3b860cffd6626d791a4d8ee54e3082146b4b1a1566d593dac063e1b31bffd83ea4c1da16d940eb72706198e5db40fa5dae9643189bbe9b70fd9cd409261384c1","ssdeep":"96:BPkpR9+K2AquLFozlqP+rX+MTBhlLs6ANPHPMXIKw/5V6:BORI5AqDzlqKXNhWrhHPM8q","tlshash":"1b91b96a7f94b2b146d1047ed57f514bb4f16963e988c0b05184f4e46cb8fa8016bf5c","size":4493,"data":"","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-08-28T19:51:57.612964Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/css/parking2.min.css?v=6","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.234Z","timestamp":1787946676234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /css/parking2.min.css?v=6 HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 3636\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"509c-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20636,"size_decoded":3996,"mime_type":"text/css","magic":"ASCII text, with very long lines (20636), with no line terminators","md5":"953a5fc295df6ead7ad17cd8018a4cbe","sha1":"0a93266984d59715aab18dad3c90c8d151dd5b73","sha256":"e06c04a93ef8fe0e24751ca000492cfb41ff8ef335bf7a24e77b474a8248a4b0","sha512":"058cf5c91fa51881de7ececf86cc4ad121ec908eb1954319fb67bb6491a009fb8b2d3fcc96ffc8a4ca75edd9fea68c2b0244726f3c0d479c15327ae1390035c5","ssdeep":"384:hIaxiGWMdUBwqMHoxfsHsasirWTOIfeyp+YBQXHUeNfU1CPoIi:hIAWFosLTJ1C4","tlshash":"06929525aaa430a8e07fcc63798dfe893234493591164efed563d879cac716f13a3349","first_seen":"2023-04-05T16:57:25Z","last_seen":"2026-08-28T19:51:57.58208Z","times_seen":867,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/opt/css_sprites.png","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.376Z","timestamp":1787946676376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/opt/css_sprites.png HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/css/parking2.min.css?v=6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 14784\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"39c0-610cd313cdbde\"\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14784,"size_decoded":15094,"mime_type":"image/png","magic":"PNG image data, 180 x 150, 8-bit/color RGBA, non-interlaced","md5":"b0315122446d6025e63cd553c7fe065c","sha1":"85d8fa7450c94cc70ca28ad07fc31a9b12280199","sha256":"f9fbc88487b65700e274cd9554e3e270e18b5c0085d75403ca079d4010bbfc29","sha512":"7cc5d6519ed6aa7f29235b7d4dcc3aa5e287df2024898353ef4db218aad2e912bba71472d4498726bb1548f31acc8c8967608750c09471f2304a7a5b8e3b05db","ssdeep":"384:y4rABvM3WtDiqXG8e4my4ILPBTbgGSDehg/iwlEOX7Uxoilhq2:y4GsqNhmjIZSDehjp8UxJlhq2","tlshash":"0462d0edc0ede66e963673d356b64bfbc14099f11aa88fa30c23081c5937710476a2c4","first_seen":"2023-05-02T01:47:14Z","last_seen":"2026-08-28T19:51:57.584125Z","times_seen":853,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/parking2/payments/ach.svg","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.257Z","timestamp":1787946676257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/parking2/payments/ach.svg HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4088\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"26c2-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9922,"size_decoded":4453,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aeeeca9efd19cf90482d9a4e4010ac9","sha1":"e8086fe685ba0d5907aed7e9fb9d6a152f2401d7","sha256":"efcb8731964b2d071021c8d243ed3b435c88464a717cb395024f6cb84c254773","sha512":"470a22d1e9be30c1145ff2f26833085dd1e1690042e0aeff08389e9de170c8bc43741aa226b40dec6ff418e9fc7605b78f1bc02704262c15d2ed0bb6994df7c5","ssdeep":"192:4WNgcvTbpQPK00socldqsBbd+pTxaw/5hr8nA:0cv3pQPKAbq6bSL5wA","tlshash":"b722b650b3f9f2f0b100d7e5536af4707b6339f65a22c2a48ba62e54da4142e0db88d3","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-08-28T19:51:57.586241Z","times_seen":806,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/css/bootstrap-custom.min.css","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.232Z","timestamp":1787946676232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /css/bootstrap-custom.min.css HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 5219\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"61b3-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25011,"size_decoded":5579,"mime_type":"text/css","magic":"ASCII text, with very long lines (25011), with no line terminators","md5":"a0dfdea43ec9daffdbcb4a983ae3b37c","sha1":"0c12475628fc7739fbad4b06d6c05ef56f0c2644","sha256":"c3b57a79ad7f506aab3ebe6521d7d3c9020f69dea6eb56f43f4afd0edb57cb54","sha512":"b7bd41382dbcd8e7346b69a41eb2aa641144ea5cdfab90dfa9a7b8c07c6771573b7eb1a6b7cccf0f8e447a2a2de265d01320bd4b93a754cfce6464eceec24e34","ssdeep":"192:rm1IHSH8wEoyHJSDkJ6kX6BZSYpnL8ET7gQhMpq94ZWsHHbEHEd6iHid7I12sTGm:rzMvEoyHJxhXStLPTsZwMWsuExVX","tlshash":"87b294b6b83035ac61bbc7be35c0ddc9190e91a5ff718ae6f4270c54488a5534eb3c5a","first_seen":"2023-04-05T16:57:25Z","last_seen":"2026-08-28T19:51:57.588228Z","times_seen":867,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/epik-domain-names-dark.svg?v=1","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.250Z","timestamp":1787946676250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/epik-domain-names-dark.svg?v=1 HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1717\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"df4-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3572,"size_decoded":2081,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54a79e9ebbd158a93f4c156f64dddf22","sha1":"7fcd435dbd3d10a4c3fdfe8266767c8511909be0","sha256":"ba545882b3d3f5283281e96f148b824a413378050d017aa6957f658856f32abe","sha512":"e9f642a52d7d4462179df469c1b936a1b5343c162f05402e05f9abcc9e666a2daa90cc21486ad9e6e48a593f805829b7e74da899a39e442c592bd1af52a54100","ssdeep":"","tlshash":"587143ed3f644de199cc97dabf0150ac20ab60f2fa850a4cc1595a1c78c4aafde15dd3","first_seen":"2023-05-08T01:43:41Z","last_seen":"2026-08-28T19:51:57.590216Z","times_seen":856,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/parking2/payments/cc.svg","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.252Z","timestamp":1787946676252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/parking2/payments/cc.svg HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3605\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"25ec-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9708,"size_decoded":3970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95e6b0f9239493a0002f7b6402b291f","sha1":"f056c91179ea2f78a3008d167b065a27dec34d31","sha256":"5a7e3b9b95cbd9c6aab1ff1d97802322e0528aac98556430e80ca53b9720a4ff","sha512":"6f1ff6713f127767f120cf26baae1b1cdb0dbd9898ebe64b9db3f0133207052d3aa153f2cef85c1a5b554c2b7a3f9a90768402175ff0a46dd8457f6ab10da73d","ssdeep":"192:2k9FjDmbBHxVBo0NKDbi3fHdAb3arU01XKgFjgU8esT5iTftAt4dBAhjN0l:2QBKBM2R9/1Ee8jN0l","tlshash":"7b1232a06734827cb6909abcc23b6474be412ce87e10d519d7ed0c17e45540d4ea7eef","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-08-28T19:51:57.592295Z","times_seen":805,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/parking2/payments/paypal.svg","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.255Z","timestamp":1787946676255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/parking2/payments/paypal.svg HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2984\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"1a65-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6757,"size_decoded":3349,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e63bcdaec263e75aa9670af5124057de","sha1":"e8c8736067b21039eedb9f76e457a0d97eda7e1a","sha256":"8f11f3455df73bf6d18b6dd9d3e0d9812300e92ed985621e02a4c0c9121528ed","sha512":"9b67d82fe6c3641b5514fbabf3af9f99160900342a9111067063e3ab5abc5d9544932f918864477874f5209f5a63f366d6bd1afdf91fe5b775a0864fc83082e2","ssdeep":"96:36a2nnH9M+AzOv1psXxw78h5N+enpOwovPZcspPpJ3UXrQt5uu4Yq:36ZnnH9VAqvzyhb+eMxvyspPpFUblufq","tlshash":"21d193c6677593acf142a3f8c117a8b432826ee67712c444e7e51c1be92106e0e79deb","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-08-28T19:51:57.594541Z","times_seen":805,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/parking2/payments/in_store_credit.svg","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.256Z","timestamp":1787946676256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/parking2/payments/in_store_credit.svg HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4567\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"2f4c-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12108,"size_decoded":4932,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a6952d1ab89a0ee0a2bab97097f884b","sha1":"c72f92fc267c2fe61d1ceb764e23f691e478741c","sha256":"120204bbbae24282d9fbd493f82f5ce183314bf4a2aec1374c133f8c368bc9b9","sha512":"5e671ed20dfd450c5413be962fea8725603596a52c32d49b2b853e1ff0cf71f79c0274d794c559f3b11a1a454b9b975885fb8f4219d631d41c7488c7a19ed060","ssdeep":"192:Z+i+MWIhTGsTVb6Kt0tf9Ow6Z14/uCiZUV9mL3Hs/hmL9WvMisC0YgjtS75YxQz:Z+i+EhTZt6ntfcD1WVsUYL3TRS75Yi","tlshash":"c44262812736427cb18447fcc2a76c3cbe16ade83910d45ae3e81847d69490c6daadef","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-08-28T19:51:57.596234Z","times_seen":813,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.387Z","timestamp":1787946676387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://abertodepositian-pt.fyi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120818\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-28T23:35:19.744971Z","times_seen":277359,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":121,"dns":0,"connect":28,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.564Z","timestamp":1787946676564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://abertodepositian-pt.fyi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:22 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 206394\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-28T23:36:22.45217Z","times_seen":334946,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?display=swap\u0026family=Roboto:400,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.231Z","timestamp":1787946676231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?display=swap\u0026family=Roboto:400,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 19:51:16 GMT\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":2283,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4e32070abc078348e9e5e9b9988c9f8a","sha1":"f6a4221b9d88c9640738f370ba6a512efdb9578a","sha256":"d5ad03bcc92672ee24ef497848c0dbae3ef6c6e4fa553e3a8618c8f2be4223b4","sha512":"3ae5a4af3df48fad3611d4d1084b7bc743bd6ed1601a7271cd92cf4e66008b7f16bfdacda980e09dfb9c96760f314a7eb922ec7ba161ca2f794bb71bb4cf5c13","ssdeep":"192:2N9fmN9fN94N9fkN9/qbN9DbqGIwV4BN9nN9uwN9wN9fxN9UN9LN9fvN9/qIN9Ds:89fM919W969yh9/qY4X9N9t9+9fn9y9U","tlshash":"1a321fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T18:28:50.407696Z","last_seen":"2026-08-28T19:51:57.600531Z","times_seen":676,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/js/global.js?v=1","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.242Z","timestamp":1787946676242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /js/global.js?v=1 HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 815\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"7bb-610cd313d1a5e-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1979,"size_decoded":1180,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7b08992307bf75cff71e268fe1bec7b7","sha1":"6518204f41cec36228d2c19c2d138cf1c4d972ee","sha256":"24704d232f9937d71f8aec02c4308ed0b1e4fa237e144fc373fd520b6d935076","sha512":"720592d8067acfa2ab3b2a9269258d24a89d35184e9883ab062929146b6e66264cc6fb38fa8f0f29008d3d26323468fa80d22de702c51df4ae692874399c9aa4","ssdeep":"","tlshash":"f241bb1bbca6ad94fe2360bf6c3f610c50377507ba45d2d8765c02814f34ba9981ad78","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-08-28T19:51:57.601957Z","times_seen":867,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/images/parking2/bg/a18.jpg","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.247Z","timestamp":1787946676247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /images/parking2/bg/a18.jpg HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69830\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"110c6-610cd313ceb7e\"\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69830,"size_decoded":70142,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x850, components 3","md5":"b42d146949ba703bd24eccfb2fd77952","sha1":"01c50ae233e5c5a54c4e64b0943f5bac2a0671df","sha256":"d3c707d2faf0b09856b1868a625bb1f6535f9ababa1d041ada9e25ed2909d2a9","sha512":"aa2b3b8463cad2ddcb1cdeea70f82966f23ef1685ed9b9c217b1ee5687cc5d20b6c4ea0632d4d1912f6391e359a0ba6b218365896f8dccf5b8c022e3f1caedc4","ssdeep":"1536:/8/eNBiVgwLt5STQOwDlIrP9fPk+1Vlw11VKAp:Twj5gvklIrP5PkOVlw11V/","tlshash":"ef6302cc22c4cf286fc0ab19726bb4d195dd3714d75a063a1e427adbe86167407ed23b","first_seen":"2023-05-02T01:47:14Z","last_seen":"2026-08-28T19:51:57.603071Z","times_seen":853,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.386Z","timestamp":1787946676386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://abertodepositian-pt.fyi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120818\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-28T23:35:19.744971Z","times_seen":277359,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":97,"dns":0,"connect":15,"send":0,"wait":15,"receive":18,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.562Z","timestamp":1787946676562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://abertodepositian-pt.fyi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:22 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 206394\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-28T23:36:22.45217Z","times_seen":334946,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/favicon.ico","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.693Z","timestamp":1787946676693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 371\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"47e-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":745,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b1108e0d70db20c8606e1a8016caeb81","sha1":"e2fc2a3593c7e8378af9a0ac0e709f2f1c09fc56","sha256":"c5e2b9c7c4a22ec143291554b29883670c6746294588e6a7ef1e7db0565bad8f","sha512":"382f2eb2a9e23e7bcaea3a34f8ddb0907cb54a650dafde6494cd8febbbe518918f49dc6918bc0f3e97dc5a6b340d77893973a409390800f74d412384d2516492","ssdeep":"","tlshash":"3c219e77542f0602ca8d0a7f0fa4c5f45adf6c104af2440788e57e073c71b2c26321b1","first_seen":"2023-05-02T18:37:47Z","last_seen":"2026-08-28T19:51:57.604197Z","times_seen":874,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.epik.com/wp-content/themes/epik-redesign/src/img/icann-accredited-thumb-350x352-332.png","fqdn":"www.epik.com","domain":"epik.com","tld":"com"},"ip":{"addr":"104.18.3.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.259Z","timestamp":1787946676259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:32:14 GMT","end":"Mon, 23 Nov 2026 18:32:10 GMT"},"fingerprint":{"sha1":"B2:72:6B:40:7F:3D:BA:2C:BC:7E:22:10:E4:26:27:E0:30:4D:5E:63","sha256":"7D:4A:23:8F:9D:6B:8C:36:B7:23:C9:5E:14:9C:EC:C2:B0:5F:C4:71:E6:E6:64:A3:71:56:CD:9D:55:1A:D9:3A"}}},"request":{"raw":"GET /wp-content/themes/epik-redesign/src/img/icann-accredited-thumb-350x352-332.png HTTP/1.1\r\nHost: www.epik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 153278\r\ncf-ray: a325d98709c823eb-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\netag: \"6a86371a-256be\"\r\nexpires: Fri, 28 Aug 2026 23:51:16 GMT\r\nlast-modified: Wed, 19 Aug 2026 23:07:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload, max-age=63072000\r\ncontent-security-policy: default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; connect-src 'self' https: wss://app.livehelpnow.net wss://v2-workflows-public.corporatetools.com wss://v2-chat.corporatetools.com/cable; frame-ancestors 'self' https://corporatetools.zeroheight.com https://global-components.corptools.io\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153278,"size_decoded":154295,"mime_type":"image/png","magic":"PNG image data, 349 x 352, 16-bit/color RGBA, non-interlaced","md5":"56a9612b982ea70bfd24026df0e2fa74","sha1":"2827d4670469021293baca9f6f258c11aa4dba19","sha256":"23d23396709114fed95f782811c00ba9d2ce144e9eba9bb60d1611a162d92325","sha512":"d0ca278bd759f06197d0369095f41f8346f28f9a063761aa26d1221dbefe35fcb6479d3f092c63338f67d9b95c1ec9fcc14bc30d3a89d29df11b2e622f3da78c","ssdeep":"3072:8jfTUI59xS6Vp+aA18H3rdSSMAbr8vV9lYrBAXSmjuCcvS/7FG7:uLUIZS6XhXkNAcvV96rBR+MSjM","tlshash":"39e312f7045beaa9883e5fdf7402a504d31c3b601e02e16d4b75be223988793fa6bc10","first_seen":"2024-06-06T21:40:29Z","last_seen":"2026-08-28T19:51:57.605105Z","times_seen":801,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":67,"dns":0,"connect":1,"send":0,"wait":271,"receive":86,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T19:51:15.211Z","timestamp":1787946675211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.1.33-64+ubuntu22.04.1+deb.sury.org+1\r\naccess-control-allow-origin: http://abertodepositian-pt.fyi\r\nvary: Accept-Encoding\r\nexpires: Fri, 28 Aug 2026 20:06:15 GMT\r\ncache-control: max-age=900\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]}],"data":{"size":11730,"size_decoded":3195,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (706)","md5":"df20695a7a5776f729c084673b0195ca","sha1":"b43c357298f534ce53602c0f285ac57210743a14","sha256":"b4b1c7d827ad11783f3e965186d95b2272a96b77bf5bc7fc9cd4997ae47812f8","sha512":"02c4eaafe521457e83c46e93d5e7b3f21217f26ab8d4803718a32f7bb6a98b7d1a35af9575e8f6201d0d7d7a8c0ebc39f2cf6cb988faf4ea6920df6b15d83b96","ssdeep":"96:V+as/AtQGdQUG3eFJd2hB1oipcnhEdKtUAPNAin4k5Jf7tw+B4wrVSzT:V+a8AtQGdQUG3eFJda1IAin4mfG+GwrW","tlshash":"2032a72145f154a701e2d1d5bd62be0eaf818247ca0585d4f6ac4bc86fd6e73cca334d","first_seen":"2026-08-28T19:51:57.609227Z","last_seen":"2026-08-28T19:51:57.609227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":308,"connect":127,"send":0,"wait":132,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?display=swap\u0026family=Open+Sans:400,600","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.229Z","timestamp":1787946676229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?display=swap\u0026family=Open+Sans:400,600 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 19:51:16 GMT\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12028,"size_decoded":2330,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"392ff0c3c55b5c9ea904a0b5bf9792ba","sha1":"22eff5429915379978501ee27adcd419276e6d1b","sha256":"b16e27d0a6fc5cce1be1e217f40c037271ccf9f9bc29f106adf91e11ace794f3","sha512":"f396a52935a2438498e0249f5c23cc5d69a01bd0f67789b7d5d8846a23b56b183bf9e5ac61097d10af599a3f37bb0fe7c3e0981b33a395ca8d6bbe6c8101a75a","ssdeep":"192:aCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIwV4pWzGY:Jt5qY4yf/qY4g","tlshash":"d2420b9000171850ab435de673ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T08:42:41.093329Z","last_seen":"2026-08-28T21:55:54.682497Z","times_seen":4674,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":36,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abertodepositian-pt.fyi/js/lab.min.js","fqdn":"abertodepositian-pt.fyi","domain":"abertodepositian-pt.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://abertodepositian-pt.fyi/","date":"2026-08-28T19:51:16.241Z","timestamp":1787946676241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abertodepositian-pt.fyi","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 11:44:03 GMT","end":"Tue, 15 Sep 2026 11:44:02 GMT"},"fingerprint":{"sha1":"A4:ED:62:67:5F:A8:26:17:A5:0C:58:76:81:AB:86:4D:C6:E2:F3:A2","sha256":"D9:60:96:5D:DD:08:69:17:91:42:A6:96:64:C2:A2:DE:7F:08:C3:AB:D5:C6:31:8E:AE:42:F9:CE:43:13:A0:F1"}}},"request":{"raw":"GET /js/lab.min.js HTTP/1.1\r\nHost: abertodepositian-pt.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://abertodepositian-pt.fyi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Fri, 28 Aug 2026 19:51:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1742\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"118d-610cd313d399e-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 12 Sep 2026 19:51:16 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4493,"size_decoded":2109,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4493), with no line terminators","md5":"5bae8f54eb5be64b131e498e2c233bbc","sha1":"25aa4807d5d07f1dbd9705866fbe6540ad0fd1d5","sha256":"565169484eb0f13570db78742dcf091e83129a2a0471ae485aa13a890f378258","sha512":"3b860cffd6626d791a4d8ee54e3082146b4b1a1566d593dac063e1b31bffd83ea4c1da16d940eb72706198e5db40fa5dae9643189bbe9b70fd9cd409261384c1","ssdeep":"96:BPkpR9+K2AquLFozlqP+rX+MTBhlLs6ANPHPMXIKw/5V6:BORI5AqDzlqKXNhWrhHPM8q","tlshash":"1b91b96a7f94b2b146d1047ed57f514bb4f16963e988c0b05184f4e46cb8fa8016bf5c","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-08-28T19:51:57.612964Z","times_seen":867,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"abertodepositian-pt.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"abertodepositian-pt.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}