{"report_id":"2afa4c2e-95a9-4437-8beb-9ab699d29def","version":6,"status":"done","tags":["id.me","phishing","authentication"],"date":"2026-02-06T07:10:00Z","url":{"schema":"https","addr":"florina.digital/ires/hidme26/","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"title":"Sign in to ID.me - ID.me","dom":{"size":8365,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fdbff6c5709f01816d1d8e0caac839bd","sha1":"05f6426f04b47bf6fd57d0cf2344c8c9f65d91aa","sha256":"f2c590c02d64ec8fa282a674efee2738a25920e1f0b0e45e6295d9847b5aa192","sha512":"a16ba79f14c3c6651102125c41c30ca719925c5f694e3ef80c114e9262feaf4197277a23f888837c0b0eb2085b3e7f177bab634489bf12af8326a798a1a381f9","ssdeep":"96:nTetGy6katVYOENcmBnIEmZOVobb5PkAz4Ph+v0cg1Op5xsrNF5d:T1LkuVRaOE7oPsJV/1wspF5d","tlshash":"5202432174f00567129381987abb6a193fd2e51bca46680076ac87dd5ff7e83cd4328e","dom_hash":"domhashdafccad2812975fb60d9583799e562d0","first_seen":"2026-02-05T14:51:31.529893Z","last_seen":"2026-02-06T07:10:02.587411Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T07:10:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]},"summary":[{"fqdn":"florina.digital","ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-06T01:57:20.678037Z","last_seen":"2026-02-06T01:57:20.678037Z","alert_count":102,"request_count":17,"received_data":464991,"sent_data":9909,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Zendesk","description":"Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.","website":"https://zendesk.com","common_platform_enumeration":"","icon":"Zendesk.svg","categories":["Documentation","Issue trackers","Live chat"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-02-02T04:56:44.175625Z","alert_count":0,"request_count":2,"received_data":323206,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-01T22:20:39.584991Z","alert_count":0,"request_count":1,"received_data":440804,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":1,"received_data":88557,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-684ZXW8HVT\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6445c2d329a967aaa8fcdc0d8f568f41","sha1":"222c2dd0a851c81c4148f14f7c79845581dff814","sha256":"fe8b08679a24a6ff92557f2e34706bf0cda67be73562f9d61a8c121326e9b81c","sha512":"474d3c6e427ec38dfe0e1c5fb31e50b51bd7c94a88a4eb44daad213ebf4c13c8b5c812640e378f4252e2d0906feb82db29a56480b4c377d77dc495a189b0694b","ssdeep":"6144:KZb3hD/zzfR681qbOqR51/48BjM3cp81Qj3AEFyBv10p4B:qb3hDLz56nbD/48BzFyNB","tlshash":"779419de73c674265396e478502f018ba57b28a2f48cc89af1c9cce02d7499a4277f7d","size":440200,"data":"","first_seen":"2026-02-06T01:57:24.82039Z","last_seen":"2026-02-06T07:10:02.595165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9d1ed957f33288a6f399268f44172ac","sha1":"d78a51af5888961fa593a57b3b0e598f9ea5818c","sha256":"13e725ee150c260ae415cd277108d9fe8f3a38a53d7142179389a011be4d7a4f","sha512":"49169b61dd3cd3bc751425ced7ffba22d17f7ba4129ca5fcf7276f527928cedd48be2c8f79df5fc4686e52cf7e5f5c988884640ae9d3a5494e5b57cc2433e1d8","ssdeep":"","tlshash":"3a41e20970ea13d50133a039562b99003b76a58f2650fc40be9e8bc46f0dd69ada33d7","size":2060,"data":"","first_seen":"2025-06-11T11:47:09.414478Z","last_seen":"2026-02-06T07:10:02.601371Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-09T10:42:03.837213Z","times_seen":184652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/asset_composer.js?key=22fb9205-0748-40d7-8eb1-c964afe88d06","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","size":10134,"data":"","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/sentry-browser.min.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"009e2ec783d164b8a7dc355fc5f62931","sha1":"f2dd2ac75d674931e1c633644dcffc346d23ac00","sha256":"9aaa648382c720fad67e129008d4c15a7cba8ee3f2395f7857b575fb9a76dc5b","sha512":"2713776cf25257273fd62dfe59967e4d8928199f777d29e784ec2cee3a55172048db16df28949c112ef94168c0a223f79f0855d96d498d6b5bd5301e64f2b5f2","ssdeep":"3072:g+Z3pp4xfhSZKVuDWrG215rivWPtRwvl6/RO66Ga5y+yPRhQw2praYF+q1rHjr:gid3DWrG21hztim6GaYPRyPpraYF+O","tlshash":"736408d971a2703247d709a550ba0202f7395a50740b81e8f66cddef2db948ab2b7f3d","size":310819,"data":"","first_seen":"2026-01-27T14:56:03.896472Z","last_seen":"2026-03-09T06:22:45.228701Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/IRS-Logo.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/IRS-Logo.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:38 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7338\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7338,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e397010a7019312bf2fe516cdb9700c","sha1":"58b62087b25f8535c7de9320c39e35d0e91691a1","sha256":"68188a21c8654348677e2bdb6c4a0b6b5c7ebf71cc6b5280ebb5b47eb03a032e","sha512":"a8de573479ec465b641582e35d44455cf39ee7b993818f1de7c358391bf7af8793a1f8afb5415695a5ca41a5b548cf934e0618ae2385751f36ff9f1515fbd8c5","ssdeep":"192:BIqMpcg0QFjchsO8i5HYipWeG/K50CfmHcUkFDz4Yl:JMXjNObYoo/KagMTi4Yl","tlshash":"f2e1c8bb037083fde3d2d7491d905a9a37beb4d9f121929897a7365aad428f3043cc21","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.588181Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":449,"dns":29,"connect":119,"send":0,"wait":122,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/icon-addition-1c60f492657aa091463f6ac2e15f0f5123425f314e60383dbba0b06b3bbae0ed.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/icon-addition-1c60f492657aa091463f6ac2e15f0f5123425f314e60383dbba0b06b3bbae0ed.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:38 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 714\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffc060d8da5dcbdfe9847824840e07df","sha1":"9800ebea4ce995ed6eb3d1634460e7ee3975d8b4","sha256":"c47576302ee3e3045e7ab79fc4343b5316cd180d0ef46f1ce3a55d328bd7f5c3","sha512":"f701ace7b47a2b069630beeceff9e3713360810d4621c3ac9b7c9c0c54eddffc105bbd6b926d5755696a1a05b99fc70b48eb73314764db2dc7ad939ce5f3c659","ssdeep":"","tlshash":"e501d3ee12f44424f414c722f7f8b895593970cb82c84494b98d1a756b180e719fb3fd","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-06-09T17:35:16.242397Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":450,"dns":28,"connect":114,"send":0,"wait":114,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/sentry-browser.min.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/sentry-browser.min.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 07:09:38 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: p1OWOMQ9GMJcRXkcaISwAPW++sGTC4Z/QQmXSE9ZusfuBhNmec5yPEPp8oxbga/tCzTb39g7bZQ=\r\nx-amz-request-id: JCNVB2XKH0CFQ8NZ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 27 Jan 2026 13:59:43 GMT\r\netag: W/\"009e2ec783d164b8a7dc355fc5f62931\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600\r\nx-amz-version-id: tj_WWAiqDAgzzjzubd4f97ixfuWz4cn.\r\nage: 2293\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0g%2BP6fw4hJxSGQcf%2F5MmLTUEegIstQDiXSAaNH3SAcW98lLpGafng1jqrHYDuifCoTT6Gsho7BtCXjw00znJb6Cfo5Ae11ki7mfLB5CE49MU6ezY6mC5CkzLSG%2By6DS9%2BAevxO4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c98d2bc0eac5697-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":310819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"009e2ec783d164b8a7dc355fc5f62931","sha1":"f2dd2ac75d674931e1c633644dcffc346d23ac00","sha256":"9aaa648382c720fad67e129008d4c15a7cba8ee3f2395f7857b575fb9a76dc5b","sha512":"2713776cf25257273fd62dfe59967e4d8928199f777d29e784ec2cee3a55172048db16df28949c112ef94168c0a223f79f0855d96d498d6b5bd5301e64f2b5f2","ssdeep":"3072:g+Z3pp4xfhSZKVuDWrG215rivWPtRwvl6/RO66Ga5y+yPRhQw2praYF+q1rHjr:gid3DWrG21hztim6GaYPRyPpraYF+O","tlshash":"736408d971a2703247d709a550ba0202f7395a50740b81e8f66cddef2db948ab2b7f3d","first_seen":"2026-01-27T14:56:03.896472Z","last_seen":"2026-03-09T06:22:45.228701Z","times_seen":27,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/linkedin-da38d5cac6618d9aad720407d94fbe0b1275531502044ed173de95da2ee3ce3c.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/linkedin-da38d5cac6618d9aad720407d94fbe0b1275531502044ed173de95da2ee3ce3c.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1839\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43893aa6b0522f222e8e5471b5e2b69c","sha1":"0016e1ede45275dea0888b05e79c773f34d3c6b6","sha256":"a229e323ff491babb44e0a4bfde9dded15f70886c84b2e09e606552631cd71fa","sha512":"f92a26189c829d5953cd37c3a46c88f83429c4c12627f3ca29f6e4805d363e14edc6151c4e4844f22967c7b026877d15be08cbbe17bbb8cab22b3ab607b90529","ssdeep":"","tlshash":"5d3133819ae44c789209c651f3f66916792834e731d58e68f8df28452f218de1406397","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.590655Z","times_seen":279,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":409,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/asset_composer.js?key=22fb9205-0748-40d7-8eb1-c964afe88d06","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/asset_composer.js?key=22fb9205-0748-40d7-8eb1-c964afe88d06 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 07:09:38 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: wXWm6vnulUZ9ZFAjjDEyG6xftpCaK0UoqrjRuP4XgOZ6am55wbg8mivwjwZBf62q3VIKMphrHbs=\r\nx-amz-request-id: 6E8A8SXJ9HE9XWN1\r\nx-amz-replication-status: PENDING\r\nlast-modified: Tue, 27 Jan 2026 13:59:42 GMT\r\netag: W/\"d096b5b24105931fc508ee2125de32fb\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: .PXjLZ73lJdJcdl_tgok2UMYdNPy3hi9\r\ncf-cache-status: HIT\r\nage: 56\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mUcwZtbdWxUBm2PMS%2FUwmNWAjL29Tx7hzkY2Qtr2UAYcCkiEDnlobvlfnANaoLwvW1%2F5tIB8d0TGI%2Fk9cfqCKtlwmEqVOUrRkXSTU%2FOFUcrXtS9p6CxjO0gKqNw2xdEdvMdsUww%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c98d2bb8e075697-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10134), with no line terminators","md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":63,"dns":31,"connect":6,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/Poppins-SemiBold-15cea7fedab57408d132253bd4663008d2627476be29759d00c67d716ee0570b.woff","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/Poppins-SemiBold-15cea7fedab57408d132253bd4663008d2627476be29759d00c67d716ee0570b.woff HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 67932\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":67932,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67932, version 3.10","md5":"83d1a3fce7d8008c68d09317c8ef4c16","sha1":"b29b122d8239cdc82ce751aeda028eea7024d844","sha256":"937c7bd392e945cd2e1ee86cf47b357af016af281c2062d3249132c023f65f39","sha512":"b69412ae0b47a16a95f048460968d658552c8859f6ab4f2a7aa75d00f2ad158c1251f44861c8037c236adcd6229fef5c4f14dd6975a4834b2e0ad3c3fc819d54","ssdeep":"1536:Vlcu0weFWAvf92JRdqHSqrBrLqt1JQn86khljP9:Vlj6WEfUJ6HSqrBr41K8tv","tlshash":"496302a7e471a590684bc633c50c9e293cd77c3809e1e0fc087a856a45aa77e41b9fd3","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.591766Z","times_seen":363,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":125,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/OpenSans-Bold-13cd71fff17a279d6c6c8fe515396b6a9898a0e46c26bca41a031a7ee652e227.woff","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/OpenSans-Bold-13cd71fff17a279d6c6c8fe515396b6a9898a0e46c26bca41a031a7ee652e227.woff HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14180\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14180,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 14180, version 1.1","md5":"6651c9ae3690a2ceb6520fe781ed2917","sha1":"359c9fb4c3283f70a4d78b8c4505fbf993d77ab2","sha256":"9d5575173e17b34916779d395ad1fdbe82e3a463fbad9813bfc83b334bf12265","sha512":"887567d7625526bf42aba6c84e1139aa3e4d4bbd701ee1f0983ceefa687988f49a9223fa28a4b82506bc7b7a86fcf76abb0f9da7a611f587217406a7e0c77d9b","ssdeep":"384:5OE3YJdN4Dpre7REtcx20n/qZOSO7O7RWf2ggwJ:QEgSkOig0nSsSSSRW+LI","tlshash":"5d52afce7a007210d45142b10aa77712fb6c9180055b2a5ea6eb8eff09e26f3fd4e2d5","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-07-10T17:26:00.04622Z","times_seen":410,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":129,"receive":104,"ssl":124},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/id.ico","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:39.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/id.ico HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1150\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"237db6dd11b00c991f7059ae8220f848","sha1":"6e757734103edb536213d80ac4cd26a6945e2dd6","sha256":"09fe42dff8b0fb2b4ea51818ecd86fb540615a1f185bb98b40168638a9d8a563","sha512":"bafb30e19d888a5e2232d72587b01f1491cec023d614fe6c055a6d8e952de4d3c29a07d30b14fc7fec4fef6590966956ec463e8295d236cfd412b58c307fc2d1","ssdeep":"","tlshash":"1521d23f5c37c128da6365767c92112be9a40ad18d3c0432a50bf054f9f6ca44cb4e9f","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.593326Z","times_seen":106,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T07:09:37.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/ HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:38 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8518\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Zendesk","description":"Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.","website":"https://zendesk.com","common_platform_enumeration":"","icon":"Zendesk.svg","categories":["Documentation","Issue trackers","Live chat"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":8518,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"13b94536616e0687326c26b8bd4b68ac","sha1":"0693884aa7d8045ccae38c508d70faab6398bbdc","sha256":"5cd62504f2d2f21d9f39a019e252f890ae28b3f2a0a0306c7180b11a44930636","sha512":"17c50539b7eed107e79e6efad93468fd0393da9b65f31d45a1a6fbc9ff36df8caa3585866863696e494b094eb41761ce47d8c35c778f315a59ea64b399493815","ssdeep":"96:GdtlrgkaWVRfNmmBMrEmGdhovu53lFOLya2+G0l7/x5qN7Q:GNckPVRD0EZoGLLSp67Q","tlshash":"2002532174c0096712b3c298baa6ab18fe92e257cb46640076fc97df5ff7e41cc43689","first_seen":"2025-06-11T11:47:09.410802Z","last_seen":"2026-02-06T07:10:02.59387Z","times_seen":14,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":271,"dns":40,"connect":114,"send":0,"wait":119,"receive":2,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:38 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 184811\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":184811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33862)","md5":"8710953da30d848999a73199df7c2c18","sha1":"3a8e2955888103e9671fd2cd275ff9b9b92bb50f","sha256":"960ae248be6fe22924f77b1e79a2c4b86af22d6fc999d46eab206f6e824e4a64","sha512":"c6792a19dabf97c12ef8697977c7214c7224698dc15ff489a6e77485b9389d0ce24fbf569a770fad18fbb6bf163dd9a414361cfc025d24fae8e661b6456a3bc9","ssdeep":"3072:rNNHjxUQG/tnbPUNxKAU4s1ghAfsbgDsQSPAeSk:ctnbPSxKAU4s1ghAfsbgDsQSPAeSk","tlshash":"f204e7214ea1303cf2bbcda574e1b9c437259013c8272ff9fa56657acac628513a3f59","first_seen":"2024-01-22T02:49:39Z","last_seen":"2026-07-16T16:52:08.893917Z","times_seen":74,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-684ZXW8HVT\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-684ZXW8HVT\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Feb 2026 07:09:38 GMT\r\nexpires: Fri, 06 Feb 2026 07:09:38 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145280\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440200,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7529)","md5":"6445c2d329a967aaa8fcdc0d8f568f41","sha1":"222c2dd0a851c81c4148f14f7c79845581dff814","sha256":"fe8b08679a24a6ff92557f2e34706bf0cda67be73562f9d61a8c121326e9b81c","sha512":"474d3c6e427ec38dfe0e1c5fb31e50b51bd7c94a88a4eb44daad213ebf4c13c8b5c812640e378f4252e2d0906feb82db29a56480b4c377d77dc495a189b0694b","ssdeep":"6144:KZb3hD/zzfR681qbOqR51/48BjM3cp81Qj3AEFyBv10p4B:qb3hDLz56nbD/48BzFyNB","tlshash":"779419de73c674265396e478502f018ba57b28a2f48cc89af1c9cce02d7499a4277f7d","first_seen":"2026-02-06T01:57:24.82039Z","last_seen":"2026-02-06T07:10:02.595165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":135,"dns":31,"connect":10,"send":0,"wait":30,"receive":24,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://florina.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 07:09:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9c98d2bb7f5fa0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1895702\r\nexpires: Wed, 27 Jan 2027 07:09:38 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9zt16wEGrN%2F9wt%2FpgXGyY1BQwmbyT%2BoAyfr3EcUxMP35JKu6bedJ8GJ3oPezq%2FjqgpaPI%2FJL4wigqEqcReCz4sarpQRzlRQLouuApyZo5cD%2BTxqLn8d63Qgz4gtEj7KfkzJy4mdw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-09T10:42:03.837213Z","times_seen":184652,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":54,"dns":30,"connect":2,"send":0,"wait":12,"receive":4,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/idme-logo-1d96899e99d393974ec16fa17a820e78fca132bd8ea53e01f12bdc000baf674f.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/idme-logo-1d96899e99d393974ec16fa17a820e78fca132bd8ea53e01f12bdc000baf674f.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:38 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2898\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"504331be39ca25224951e832d86887eb","sha1":"ddec6bb2c796466b5a7bac8e58070fb0f6c8ddcc","sha256":"eb439f785d33858dfe7300098e5f38c7ebb471ccfe409dde80df79c90c11e5e9","sha512":"8a9bb458b6d6d661aa02bc91d1d69ef098c628960955d134ecf2cf48b061fd44abbe6b4900db51bcced5e2b1ab0bcc2570f9f6c31219a1c4ac5bb0e9fe3b3570","ssdeep":"","tlshash":"1c517a2b0306d7eabda9492ca9111499b2d0eccbd4b4f1c0ab5b1816d48c4e57e9c7ec","first_seen":"2023-07-03T20:31:17Z","last_seen":"2026-07-23T17:43:52.16907Z","times_seen":410,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":452,"dns":28,"connect":119,"send":0,"wait":124,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/google-a43b7bcd4be906d16c347ac7c53f07ebae6f75732b8a8038844b95b737b90ffa.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/google-a43b7bcd4be906d16c347ac7c53f07ebae6f75732b8a8038844b95b737b90ffa.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2757\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d7a0189e77b6fb9e953d94e464f8d0d","sha1":"b89b561bf8119433ed5b7bac174bc4bf3388b4db","sha256":"88287bf73c699b030a6dd9a581ca97d4771ef04bb699acec172629d25dc3b457","sha512":"c67251fe10a3a2d1622ed06529dc7426374a98de22e78affec125f46b6dd7b327967c08e994cfc43959b9af1a1301ec14c1deef60653100369d492c426fdfb83","ssdeep":"","tlshash":"6b511fc90ab903f481629398f3f07904a92d34dbb2e9dd68b75c29c52b32cb2148e253","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.596839Z","times_seen":276,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":286,"dns":0,"connect":0,"send":0,"wait":125,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/Poppins-Regular-f7d5d006eb67f9f5b1499b3140f4cedbe8e0d4d500810216a022e3acd64fb989.woff","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/Poppins-Regular-f7d5d006eb67f9f5b1499b3140f4cedbe8e0d4d500810216a022e3acd64fb989.woff HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 68484\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":68484,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 68484, version 0.0","md5":"1ed9a698de5b1b3328ff71950731a500","sha1":"86790746fdb905eba03f60ee2270610547e0cdcd","sha256":"ad5fb58ad11730ef707d4f28db7a83ec4804bb3e8373dc69bedd94cd7a872efc","sha512":"b5abe41df5fe1362e211dd76cd1ee9a96abca8055df60ca50abae0da6e543caa41c80dd5c014d6629132ba61c0c4ba1cd072099353f319ede73c5def2496d158","ssdeep":"1536:y0/POJweu33S2MWPmZeUp6BAtJI7GWTsjE7L0RVxbqFty4hzrJ+HezZyr:cKeMCUPHBAtJI7NsA7L3KOHE+tyr","tlshash":"046312c0a1fe8d70a471f63565df6b60835e60056dfa09fc86e440709d9cd3be26eba2","first_seen":"2023-05-05T06:10:16Z","last_seen":"2026-07-10T17:26:00.04713Z","times_seen":419,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":117,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/OpenSans-Semibold-6c9bf1664cc6e8151624c0c19613cb4183278f26f97011c172542d5d574faab8.woff","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/OpenSans-Semibold-6c9bf1664cc6e8151624c0c19613cb4183278f26f97011c172542d5d574faab8.woff HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14336\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14336,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 14336, version 1.1","md5":"c9162005930ee812c739b3157e158250","sha1":"431d6395adf3df707a7ebaa707e1c354f42f8229","sha256":"28e5a7bc5703c00c8bc6fd0cfe45a3088e0a88a7862d206bb93f6cba655157ff","sha512":"0b284990a9c5de3f30eb88a271b6221fea5e1ba131f1cca7bb18a06b96648b15fd175d46f59efaa0d8ee32c9d9f3920461cd7696d76e18e7669804c46cf94fdb","ssdeep":"384:Tu4/7YLQqnjU40SXm1lbn/qZOSO7O7RWfkV5IJ:i48ccm11nSsSSSRW/","tlshash":"1752bf5b36447872fc8e0b781de60940bfedb0e448cb14da27991afe90ec272bd38255","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-07-10T17:25:59.996401Z","times_seen":416,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":126,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/facebook-116f6267ff4d14d3dd98fcf4e3dc9931cf5fba014bf16d44a17fd791d05201fd.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/facebook-116f6267ff4d14d3dd98fcf4e3dc9931cf5fba014bf16d44a17fd791d05201fd.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:38 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1217\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b72581e2d480be799e16718d44632932","sha1":"d83b4b86e0ab8ece563d929a36aeac4862d0b469","sha256":"10737a20653122a358d1eb32dbb940fb9b09e7721a3e669e502851c63cf05910","sha512":"ebc1d7b0ebbb253c0b27495ef64c75d5c50f14d41e16c5156f795ff6cd4d0837bf0606e8598c85d2330460466269fb25d77d429e8b4a095651dd010d00ce24ac","ssdeep":"","tlshash":"ce2123c002fd8059e81ada22f3f47216ba3d30cb51d48941f5ee3d99bb110b7254b356","first_seen":"2023-11-16T20:03:17Z","last_seen":"2026-02-06T07:10:02.598414Z","times_seen":273,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/apple-a7464638f21272811259a7dec32cb0ea2a95080256372ea5640b9a78395d9fd4.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/apple-a7464638f21272811259a7dec32cb0ea2a95080256372ea5640b9a78395d9fd4.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1731\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1731,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f15f761498cb91044ed5c551f344ecf","sha1":"d27eb4f8c948e0c1040ff798883a076aed8ac0f3","sha256":"148242d360df5aa8ec82f16d037a6244c815fd56978d7a4f1979b43e285fa39e","sha512":"0d348c897d9341c46d37dd3992898db08ba131b312c608d72b65f24703ea5212c14666dfd80179215366d56e0a4bcc4e8878ba90169c6311142e1ccf3a2eebf1","ssdeep":"","tlshash":"3131820802ffc5f1f210d3b246b9982b69e537ce7d46c418d2ce6d3c9a590ec0aa65cb","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-02-06T07:10:02.599058Z","times_seen":277,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":325,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/down-b7ca882674faa748455822f70f3822029d25ca64487139c5f0d8daadc4789b39.svg","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/down-b7ca882674faa748455822f70f3822029d25ca64487139c5f0d8daadc4789b39.svg HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T10:48:24.77849Z","times_seen":54797,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":418,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/Poppins-Medium-a5829f09868f62506459177f6872e751d023527e6cfd42525bce8d1c33365003.woff","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/Poppins-Medium-a5829f09868f62506459177f6872e751d023527e6cfd42525bce8d1c33365003.woff HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 68356\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":68356,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 68356, version 0.0","md5":"896fb06c7b3bead35bb2fbe6be7d8b54","sha1":"5fd34acb5d590d495415c8045f49533d4cfb6798","sha256":"6dfdf411a70ae4d26942efdf1034e66976435758d29f2a7d556d77e08b9e2412","sha512":"a6367dfb471742fdf96a60d4454d7078005d6820841474b365bfdef8f55c48ba546126581eefd5a405f6b99384e5dca8cf2b2a344e98710028b4732f5b84dea7","ssdeep":"1536:RzxyCka0UoOqKixt5EQkxykWrZYOv+rCa2+J:hxua0eRixrJHFfYCF+J","tlshash":"d4631222c0ef459afb442fb9e47e0da64a819fd787dd39b90f1cb432d449168e309359","first_seen":"2023-04-19T13:33:03Z","last_seen":"2026-07-14T11:27:30.095061Z","times_seen":439,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":116,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}},{"url":{"schema":"https","addr":"florina.digital/ires/hidme26/images/OpenSans-f965889da0ef7fe9f91270decb4638eafb62e358ac08b974059512f9b4fa099b.woff","fqdn":"florina.digital","domain":"florina.digital","tld":"digital"},"ip":{"addr":"66.85.46.254","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://florina.digital/ires/hidme26/","date":"2026-02-06T07:09:38.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"florina.digital","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 20:08:41 GMT","end":"Sat, 02 May 2026 20:08:40 GMT"},"fingerprint":{"sha1":"57:35:4E:24:8B:CB:A6:60:0D:87:5E:36:74:5A:CF:B2:20:04:CF:CB","sha256":"D1:C6:C6:98:E1:C1:B2:E4:FE:34:B8:D9:CB:07:4D:BF:EF:1D:A7:7C:06:D8:88:1C:2F:46:01:B1:E3:9F:09:43"}}},"request":{"raw":"GET /ires/hidme26/images/OpenSans-f965889da0ef7fe9f91270decb4638eafb62e358ac08b974059512f9b4fa099b.woff HTTP/1.1\r\nHost: florina.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://florina.digital/ires/hidme26/css/application-12485d2c911011b226e18329e57725b33a13a593773141eae6e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Feb 2026 07:09:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 18 Jan 2026 20:31:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14260\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14260,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 14260, version 1.1","md5":"c2952e9358a350e58feee37405703b99","sha1":"23ea6dcb3dc74be7d03d1294f5728667860989e8","sha256":"cfda84577729425a91460b1220d5ed31b76bb0f63e1bd55014c35127798eb355","sha512":"161c121064fa5992da4fb839cb19168b8311c1698e1630762b644dd4a8ac4a06b42f967336d4538da2ef8767488805e7873be774c217a7de8a3526a123d45921","ssdeep":"384:1EJJISzK5KQnby0eQa5bdbo8KtX0n/qZOSO7O7RWfk4AJ:1mIj5U9Qa55oDSnSsSSSRWV4","tlshash":"6b52bfc332a0a1e9d10b47f244f151002e4c75cd975f85ff548b8fae41990bb7e9a6ea","first_seen":"2023-07-22T16:33:39Z","last_seen":"2026-07-10T17:26:00.037726Z","times_seen":421,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":122,"receive":108,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"florina.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"florina.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - ID.me","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with ID.me phishing","tags":["id.me","phishing","authentication"],"meta":null}]}}]}