{"report_id":"3d84ee4b-e05c-4273-b469-a6aa07d5c876","version":0,"status":"done","tags":[],"date":"2026-08-31T07:57:24Z","url":{"schema":"http","addr":"business-meta.farekey.com/","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"business-meta.farekey.com/","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"title":"Meta for Business","dom":{"size":2345,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7d8b14b22554e9caf3a23cca191e8fc2","sha1":"93f41b245aa9033c9729d1dcbd1b6de4e75f6ce0","sha256":"880a8e0bd998edd6aaec8f5affd08f492a7c70b5b94a1fce0a65f35b898abb3e","sha512":"44b40a136b76ea3c2d4f2dc296e42c39286e2fafba0bb9dfe23e4a7b16aab6ed9f472296f1403399ad78d5c694fc2acc0f4873c684804980011b9fb328044765","ssdeep":"","tlshash":"1741fd1954f5397b025241d358926f29bed1cb03c29895003afd4ea91fe3eb38c672ae","dom_hash":"domhashace1352f3187d58223b8720709cf5594","first_seen":"2026-08-30T09:47:46.008438Z","last_seen":"2026-08-31T08:54:30.523692Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"business-meta.farekey.com/","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:57:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"business-meta.farekey.com","ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-30T09:47:41.650376Z","last_seen":"2026-08-30T09:47:41.650376Z","alert_count":45,"request_count":9,"received_data":20391,"sent_data":4667,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"business-meta.farekey.com/js/main.js","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"282314bd132b4e81bcfe8a45387f0937","sha1":"8fa53dd78c40c3abe42b355c5e09621668019792","sha256":"ab386cfbb81c375ea1b70562f9b4028e4ba534ba6861393e180293366f1ae823","sha512":"7903fcdbbf7b9a02f04cfbe771a1c89bb12aa212a07aeef0d7e4b1d756e315a66fb8e53580a05f4fd506c1b604dab6d763302fbe89e0fec9e9b668713ea00bb7","ssdeep":"","tlshash":"1521976ab4bc55350a33f0ba261f290cb02701472084cdcf35cc8e809fea66e54b7b9b","size":1334,"data":"","first_seen":"2026-08-30T09:47:46.010558Z","last_seen":"2026-08-31T08:54:30.531583Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"business-meta.farekey.com/assets/meta-logo.svg","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.224Z","timestamp":1788163016224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /assets/meta-logo.svg HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 05:02:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a377062-9dd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2525,"size_decoded":1577,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee6f129d275b4da35f9c4b9f12a531ce","sha1":"7d6aa8a21e4fdb80b2662f0ef57142f33cbed2e8","sha256":"29c95534793e6787123663a7e3b12a8cb5286a0c0a01f748293bb91a74d14b9e","sha512":"67f2bb2bccf3ef8eadb96eec1993b51cb35d01f7d00650c8a13d204882268e66a057b241cf0287b8ffa26eedfdac9756d41755e844e5e6bdce81780d3427a999","ssdeep":"","tlshash":"0c5196edc7f8aa79e09cd399df145938364fa2ba3181c62071bc9f4d1b70d85480a8e0","first_seen":"2026-08-30T09:47:46.011513Z","last_seen":"2026-08-31T08:54:30.525646Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/assets/google-icon.svg","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.226Z","timestamp":1788163016226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /assets/google-icon.svg HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 05:04:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3770f4-ba1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2977,"size_decoded":1751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29dde85ca8ca0643e41d5c727970c837","sha1":"80be442bb941ef07b4bda23805a5e61733488bc5","sha256":"3d5cc6ea662614bfd42ae06ac271a43743cd96eae4e3d2ad1897558b710b24fe","sha512":"2360e0fa9a4c0788cbef67183b2a982ab46ee9e2050539734f30a39ef0941de314750cd0857f1715d80947cb1af46ba6730a5d96e8f82c9ffb3cc2eabb2c32d7","ssdeep":"","tlshash":"855134d423f8a1b6f109cb98aaea7856563c349ba2d4c488b98c6959ff224fd000d543","first_seen":"2025-06-23T21:53:12.052962Z","last_seen":"2026-08-31T08:54:30.527094Z","times_seen":13,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/assets/meta-logo-simple.svg","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.352Z","timestamp":1788163016352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /assets/meta-logo-simple.svg HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 862\r\nlast-modified: Sun, 21 Jun 2026 05:02:33 GMT\r\netag: \"6a377069-35e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":862,"size_decoded":1302,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cee3836d54164c6f92154fbeb4119c97","sha1":"2fa56a1ab2bda7c7f54b4ca7036acc1360ce205c","sha256":"4cb0f0e236db972c6d433622a67fe3ba54808248718d1cd7d901dbeeccff90fb","sha512":"74f02dcb03fcbd66da77317b8e1b76f8e4c991e9880b648a75315c6e853369dfaf777c7fc794ba8838a78bc2bd2c185bcb365512e121550bb0a8231f7634ab1f","ssdeep":"","tlshash":"091123cd97c142fc91986754af38466db6cfbd182112c93891acdba460d39add445c11","first_seen":"2026-08-30T09:47:46.01449Z","last_seen":"2026-08-31T08:54:30.528312Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:56:55.633Z","timestamp":1788163015633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 21 Jun 2026 05:09:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3771f5-944\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2372,"size_decoded":1356,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fa495b4138f1b215b12e9f6370a1ab2a","sha1":"7f3d6af14da3d61632002d48caa6ea04acfa77fd","sha256":"f5f4b8a7e71345a888de5c2abe82fb41b36c31be56cdb1b4580805b075d65f87","sha512":"ba0022d4ed8ab4c172d1c29d8c578c7dc7d70d6b675c45876bbc9f487c138bd9fc317b0d5418e9741c1ff15e7dd5eac2c536bb968f605d233cfb62f0e08b3f88","ssdeep":"","tlshash":"d0411f1954f5397b015241d258926f29bed1cb03c29855043afd4da91fe3eb38c672ee","first_seen":"2026-08-30T09:47:46.009631Z","last_seen":"2026-08-31T08:54:30.529504Z","times_seen":5,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":14,"connect":100,"send":0,"wait":100,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/assets/facebook-icon.svg","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.229Z","timestamp":1788163016229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /assets/facebook-icon.svg HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 384\r\nlast-modified: Sun, 21 Jun 2026 05:02:39 GMT\r\netag: \"6a37706f-180\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":384,"size_decoded":824,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"141700b9dc8450490d33238d69ce9490","sha1":"838c41e8fde2cf924600827b0841a81b4b90e834","sha256":"fb109c785174ba330ca4783b8bb57d3020695932800f63b6b826181c589fb195","sha512":"4f4914b5e460a3f61f034053ed3173dc4c185af98d3f0f155f121ee332ecb5053aedaa07db41e9ca0f91d9f777cb172434a4053e7e63398cca74a38e18e91c63","ssdeep":"","tlshash":"71e068da0b64908593994b393b2c3052ad6bb0bf6995087450e2ce8941c99e6be09d18","first_seen":"2026-08-30T09:47:46.012439Z","last_seen":"2026-08-31T08:54:30.532594Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/assets/instagram-icon.svg","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.231Z","timestamp":1788163016231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /assets/instagram-icon.svg HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 05:02:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a37707b-54a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1354,"size_decoded":1075,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f209be468921a86bac50f6d319a294b","sha1":"c2cb78d4d4e835d86bbeb2791305f766222faf23","sha256":"98e6b99e806721066c9537138c6165d2af81bb1441528e4dfa433b5c6e13ae05","sha512":"12f82e4c3390339677668375a6f65fd45367dd85aae12e9987ffd93c87bca58ce990fad08a255656bba9224af06422faf66d5d2439eeffbc8bc09c633c823bf1","ssdeep":"","tlshash":"412133cd42e1d9cdf86ac27acf1aa03a5b0ef0671ac0c051f45d8f3d57594d1570e664","first_seen":"2026-08-30T09:47:46.013382Z","last_seen":"2026-08-31T08:54:30.533779Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/assets/meta-logo-simple.svg","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.232Z","timestamp":1788163016232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /assets/meta-logo-simple.svg HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 862\r\nlast-modified: Sun, 21 Jun 2026 05:02:33 GMT\r\netag: \"6a377069-35e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":862,"size_decoded":1302,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cee3836d54164c6f92154fbeb4119c97","sha1":"2fa56a1ab2bda7c7f54b4ca7036acc1360ce205c","sha256":"4cb0f0e236db972c6d433622a67fe3ba54808248718d1cd7d901dbeeccff90fb","sha512":"74f02dcb03fcbd66da77317b8e1b76f8e4c991e9880b648a75315c6e853369dfaf777c7fc794ba8838a78bc2bd2c185bcb365512e121550bb0a8231f7634ab1f","ssdeep":"","tlshash":"091123cd97c142fc91986754af38466db6cfbd182112c93891acdba460d39add445c11","first_seen":"2026-08-30T09:47:46.01449Z","last_seen":"2026-08-31T08:54:30.528312Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/css/styles.css","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.219Z","timestamp":1788163016219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Jun 2026 05:06:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a37714f-e01\"\r\nexpires: Mon, 31 Aug 2026 19:56:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3585,"size_decoded":1587,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"fe0c93cc805522a1ec9d41746675f87a","sha1":"13709314049e77431fb1131409e77817b9dd9273","sha256":"d7dc2ec358b0a85a8c6e1ba633c6e45b096b9db91cd8cf641b2a58d7cbda4b4d","sha512":"af03d5a2762688086570468b41bfabb6ee274326ab3de0f97bb7e88e560c73197282a5b75b940263beb5ccadf3cfab06a0eef305b3a9e46ac4dc8b3319751ac7","ssdeep":"","tlshash":"4d7111c227785405b84b9caa39629f15626cc453d20fcdbc6ff0306cde892d569b3b8e","first_seen":"2026-08-30T09:47:46.015446Z","last_seen":"2026-08-31T08:54:30.530481Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-meta.farekey.com/js/main.js","fqdn":"business-meta.farekey.com","domain":"farekey.com","tld":"com"},"ip":{"addr":"23.94.169.14","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://business-meta.farekey.com/","date":"2026-08-31T07:56:56.220Z","timestamp":1788163016220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"business-meta.farekey.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:17:13 GMT","end":"Fri, 27 Nov 2026 07:17:12 GMT"},"fingerprint":{"sha1":"57:A0:A8:88:C2:26:F8:C4:CB:AE:9A:C1:89:54:78:AA:D4:08:21:30","sha256":"98:68:67:6A:9A:49:13:A1:E7:83:30:0A:BF:D9:99:CF:85:49:59:DF:8B:0A:4E:B1:E0:16:44:4E:40:92:06:0F"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: business-meta.farekey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://business-meta.farekey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:56:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 29 Aug 2026 08:17:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a929586-536\"\r\nexpires: Mon, 31 Aug 2026 19:56:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1334,"size_decoded":934,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"282314bd132b4e81bcfe8a45387f0937","sha1":"8fa53dd78c40c3abe42b355c5e09621668019792","sha256":"ab386cfbb81c375ea1b70562f9b4028e4ba534ba6861393e180293366f1ae823","sha512":"7903fcdbbf7b9a02f04cfbe771a1c89bb12aa212a07aeef0d7e4b1d756e315a66fb8e53580a05f4fd506c1b604dab6d763302fbe89e0fec9e9b668713ea00bb7","ssdeep":"","tlshash":"1521976ab4bc55350a33f0ba261f290cb02701472084cdcf35cc8e809fea66e54b7b9b","first_seen":"2026-08-30T09:47:46.010558Z","last_seen":"2026-08-31T08:54:30.531583Z","times_seen":5,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"business-meta.farekey.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"business-meta.farekey.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}