{"report_id":"508ed0cc-8982-4fbd-af42-8b76712cb4ad","version":0,"status":"done","tags":[],"date":"2026-07-01T01:27:13Z","url":{"schema":"https","addr":"armt.cloud/devices/vpn_gateway/","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"armt.cloud/users/sign_in","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"title":"ARMT Cloud","dom":{"size":9626,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1590)","md5":"1610bfd9ed5941aeeabc1721ffabc887","sha1":"30131b1d7019d8950db6a0e107d58b084522450e","sha256":"ff27d405cf13c5aa1e5178f87fa1395dcd009d0f9111451ca940082ef8b563fc","sha512":"e8c3b73f504db6d8bb6358aeb1ba1856b69a957ba441892b92fc828453c617b0fb3453332cbe040da363013130f1dc184bf4dcb32c56509949df53e8ec231d50","ssdeep":"192:gyYmScEmXMPU8cc56BHGe2zvJ62kH28Ojvp+CNAO:lYmScEEMc8ccOHGe2zvJTkWZvp+CqO","tlshash":"4312c7b2d0e04d262b1386d8e7b2fb0ad441909bced78c0472ed06a19ff6cb159572b7","dom_hash":"domhash886cd9fa19157135e3d29505b5b82867","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"armt.cloud/devices/vpn_gateway/","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T01:27:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"armt.cloud","ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2021-01-12","domain_rank":1393923,"first_seen":"2021-06-02T05:23:40Z","last_seen":"2026-07-01T01:26:51.40518Z","alert_count":24,"request_count":12,"received_data":2392391,"sent_data":6900,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":3,"received_data":147399,"sent_data":1710,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":23860,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"armt.cloud/users/lodash.templateSources[0]","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"159e21ed82e933b52b72d0902f1605f4","sha1":"064e8b47837ce8de3fddcdc95683af061f3ee108","sha256":"dfe41c160d067ec107391815d95b33aa19b517eec05dd50f1edd1c65a40aaa09","sha512":"d62000b303fd998107207be6b8ff42eb1ab6e3474b8e5aede35802363f09f9f013be38870841b4dc8572f4500f95cc055dd78e8f37edda5e05e0f22d9825010c","ssdeep":"","tlshash":"edf0aca610e0102618726c98192f7b0e37754334dedfca0331a2c9f16bf7e05ca69018","size":618,"data":"","first_seen":"2026-03-03T07:52:42.709747Z","last_seen":"2026-07-01T01:27:16.666779Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/users/lodash.templateSources[1]","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5aa6e876799bff905ff06e0a374bebff","sha1":"47762b28fa327f69d0a214fa93b1d305f6ffcd7c","sha256":"43ef726a18d8776cbeb4b602a9852f89619443b0163e8508441d4ed97391643c","sha512":"a27a1f3c0ad81f6ff7ffe2a6487591b546eae89446c558d0336ead05ec885857bc9cc5f7bedbf13334bb757f649f309dd6fa6d0a2d5974221bd6624ac24b412c","ssdeep":"","tlshash":"41f0d39434d474525961b4bc679a6a5f13288234c9e78c561255d77094faf1241acc38","size":651,"data":"","first_seen":"2026-03-03T07:52:42.717827Z","last_seen":"2026-07-01T01:27:16.667587Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/users/lodash.templateSources[2]","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a531126335e2adc4586aff27a5752ff3","sha1":"ff1e89cdb8f4ddddd15e1e6fa8e07030ffa62a0a","sha256":"99652c7e9432531a072ed60282909b4b92da7427a9d6c23469d94fd518b65d57","sha512":"3bdeedb93dfe6e51578fccd4204605f6188baf63ecf5ac7f81f965d5597d60ed52e0783b1bd6086081a3247848f3668585ee9f141155524ad9875373127efc07","ssdeep":"","tlshash":"34e020c874e1b0656d72747ce65b885b2738423844e8c425914885b46cfbf3112e8d2c","size":350,"data":"","first_seen":"2026-03-03T07:52:42.719606Z","last_seen":"2026-07-01T01:27:16.669165Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/packs/auto-focus-first-input-bca14bb1058559b0e26a.js","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3e215b56272c4a3f1562c84fe356be9","sha1":"a1693cc69ee7d5781f9fb2f7a76063f3b7075860","sha256":"7095c10efd777f81fef3ff59fc1426716ed5bff13aca8f479726002140157594","sha512":"2dc93ce62ada553ac50ae71fe6d64d61f86d7ca1675b866131e0ff39961620cc1bf4f149c22cec18375caf9ecf205142be2f08abd5977d49f8d794352c5b67fc","ssdeep":"","tlshash":"e4f09ebef0f5bdd103b6a43c822b5447e279b890241b508187d9c3e15ca804e4072a9c","size":643,"data":"","first_seen":"2026-03-03T07:52:42.689692Z","last_seen":"2026-07-01T01:27:16.664088Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/packs/feedback-modal-c10f4faa4d3f071dfdff.js","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6217201e9e011a9b5feab2d9bbf80c2","sha1":"0c9b5e57a3dfced58d35408028a98bcd1ded9935","sha256":"01e62c9efe7ded0ad04fe09fc536c04581321faf5f9a95ac98f45988fdf1ecb7","sha512":"3a859636ef294cb5b09e069794fa4b41d2a9f5464e784f06b9d1725b1611d8a0157175294c6cc4153ced8ed82a8f2268671ab63be7fd7a509b0b9ed09ba19eb7","ssdeep":"768:bnEUKwuYGPAfGJkrkoZ5xC31DfodgWjSJpUQ+k3Woq2zGhs/6xMksMiarNMdriUR:QUbuYVrLWQU+k3x9Yr2driUgQ","tlshash":"bc83e6dc7299b5b153a721f2003f540bf37a6a289c0ec0a0b222e8d67db589d5167f7d","size":83694,"data":"","first_seen":"2026-03-03T07:52:42.682674Z","last_seen":"2026-07-01T01:27:16.660968Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/assets/application-e7ab5027fc7d881ad0c868baeb24815f52bdb9704a16fd49e98986499c33dfd5.js","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c744101e4adca4f24f0fd8669fe78f8","sha1":"dcacc073f75674ddfb584a7a1009c9d56ea90086","sha256":"e7ab5027fc7d881ad0c868baeb24815f52bdb9704a16fd49e98986499c33dfd5","sha512":"78029823b38cadc08196ed2416e3398d74988502fc80ca6f6e9502517d5a8fd5e7c4f3810a83661e07c6a91879b25fb5260b04461e9a44dd851fa938467f44a8","ssdeep":"49152:5aQurcVG5SZo501ybWqgWGqNJAVdFTyUV7rUj6FFlCL:qdJydxyUV7LC","tlshash":"32852b4c724276218297a0e7943f150ae2369559a00640d8ff78caf71db9f89b27ff39","size":1764920,"data":"","first_seen":"2026-03-03T07:52:42.711528Z","last_seen":"2026-07-01T01:27:16.671223Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"armt.cloud/assets/application-e7ab5027fc7d881ad0c868baeb24815f52bdb9704a16fd49e98986499c33dfd5.js","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.943Z","timestamp":1782869208943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /assets/application-e7ab5027fc7d881ad0c868baeb24815f52bdb9704a16fd49e98986499c33dfd5.js HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1764920\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000,public\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1764920,"size_decoded":1765209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32747)","md5":"c87d86514d972c5d1e946077f5df1a4e","sha1":"2469fbca27b655279695016d85aea3ee1a690286","sha256":"834331eff5e1d3de6a88477000b5e45c558d9038edd4506e0cd9ca8ad11c03e3","sha512":"167224a9374d23d3ac9aced193b62931db9b9d6aea935cfb782a4093fc929bc50bcabb986adf520f9f29894263ef5e6ea84d4f3b8219a0f35cc9dd9a621e3e6f","ssdeep":"12288:5aQurcVul5STdMHysE7QzEby1aFesxy20WfOhWB0R:5aQurcVG5SZo5068ybWBQ","tlshash":"99251b4c7242b211d29ba0a7d43f2545e235d449a00a40d4ff39caf72eb9b85e67bf36","first_seen":"2026-03-03T07:52:42.654313Z","last_seen":"2026-07-01T01:27:16.652248Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":586,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/assets/base-9dfcfb3ae0204260c4c5f8c00aa982f61565fef21bf12c8a286fff4aa78b4ff3.css","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.948Z","timestamp":1782869208948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /assets/base-9dfcfb3ae0204260c4c5f8c00aa982f61565fef21bf12c8a286fff4aa78b4ff3.css HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 124436\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000,public\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":124436,"size_decoded":124710,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"164d77662ff20f52a33be706266aef9c","sha1":"2d6e7361478c8c1b0b68bd5dcf99d219580991f4","sha256":"7a803467cb188baf5561f8e883dd0dab667f5f0ea8db4aae5da3e7c67a594b60","sha512":"2637ee794c6d39f4134f822347aa914f21c45725661b040347fbff56c1c5c88f0ad0201c046b8024bcda78e512b084fb45d0c3ee73b2cc1db51f5038f82c3820","ssdeep":"1536:Iwp76ARnZEO8ob0J1nkbUb5H+I/GeZB8tNGiAqxIlheknh73Mwj3ghtRhjDkrhTi:KK5SzBSxp","tlshash":"a1c3f771e29030a9b42bc66ff0d4aee13534da63e4120ffff5636668c7855a90752f0a","first_seen":"2026-03-03T07:52:42.685921Z","last_seen":"2026-07-01T01:27:16.654563Z","times_seen":17,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/assets/plugins-ae42f3165ddcd502e79df59801a344164ef8e031eaf6bf132094355cc4173bb5.css","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.950Z","timestamp":1782869208950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /assets/plugins-ae42f3165ddcd502e79df59801a344164ef8e031eaf6bf132094355cc4173bb5.css HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 201467\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000,public\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":201467,"size_decoded":201741,"mime_type":"text/css","magic":"ASCII text, with very long lines (63901)","md5":"9d9954a1c54fcfdfe8921bc40275d2b0","sha1":"0e8d1072ef663d3dcaa3be7e2e305c13b016b7da","sha256":"ae42f3165ddcd502e79df59801a344164ef8e031eaf6bf132094355cc4173bb5","sha512":"c5cbefadcf9a86bdac1f89fee147c394aee6c6752a80254188c2590e538265af6e29eac544e8821b7c2431bcf41573ba46b6a7cce6d66b2c63be0452d0500868","ssdeep":"6144:rkZYwU1GAHkuDv3Kym5drKeZ0CT0S22joZttprodrh+A:YZYwU1GAHkuDv3Kym5drKeZ0CT0S2+oa","tlshash":"3914a569858421e97333c91b9bd47ea45739e23bc4610eeef14a680d8fc3a9413db727","first_seen":"2026-03-03T07:52:42.650821Z","last_seen":"2026-07-01T01:27:16.656321Z","times_seen":17,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/assets/att_logo_large-f527c7267baba412108b84ae7258899d4567a6f913588659f1ba1dde2f942588.png","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.962Z","timestamp":1782869208962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /assets/att_logo_large-f527c7267baba412108b84ae7258899d4567a6f913588659f1ba1dde2f942588.png HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 31335\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000,public\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31335,"size_decoded":31609,"mime_type":"image/png","magic":"PNG image data, 600 x 196, 8-bit/color RGBA, non-interlaced","md5":"783651d7beaf1da2780c706a5747a5ed","sha1":"5d51e5bdb566fe678ebcb33c3c3793b481603cd3","sha256":"f527c7267baba412108b84ae7258899d4567a6f913588659f1ba1dde2f942588","sha512":"fcf7a0e6ad46115fd184fc9addb6e979a0fe3e59f858985a4af8c4ef8b007de705c39bf5048b3a77db791396ffa76bbda35f4a5254af935aeaa393f99db51019","ssdeep":"384:WtQfuojv1zN3wtT/LptxF39V+ggncXd+mwWfR/1/ZuKMnL:WtQGojtzNAtTv9V+ggnMdR/1J6","tlshash":"cfe2cf3eeaf075a95d59f03169a158870cb20583f1d0eca5b98ddc9a6f523d5de0f0c2","first_seen":"2026-03-03T07:52:42.657387Z","last_seen":"2026-07-01T01:27:16.657377Z","times_seen":17,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/devices/vpn_gateway/","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T01:26:47.992Z","timestamp":1782869207992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /devices/vpn_gateway/ HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nlocation: https://armt.cloud/users/sign_in\r\ncache-control: no-cache\r\nset-cookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf; path=/; secure; HttpOnly\r\nx-request-id: 07ab0f6d-ceac-4a0f-8da3-7d43a8b6eb66\r\nx-runtime: 0.013372\r\nvary: Origin\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":144,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/assets/aview-bbd6ace98170706d25d935e8fc334414027ee64ae352724eff9189bc3dad0458.css","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.952Z","timestamp":1782869208952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /assets/aview-bbd6ace98170706d25d935e8fc334414027ee64ae352724eff9189bc3dad0458.css HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 35345\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000,public\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":35345,"size_decoded":35618,"mime_type":"text/css","magic":"ASCII text, with very long lines (35344)","md5":"c87674c2f0be9b27337a35f81d487558","sha1":"f082dd48a90c55d2e7cc7f2b6c15cc6e7fd4fbdb","sha256":"bbd6ace98170706d25d935e8fc334414027ee64ae352724eff9189bc3dad0458","sha512":"c75173749b5ff1ce7baad4a88f33db20f25fd5e4cd4fcdefb1e90960c2efd453a94a59f8da3c5685834e516c26e921f77c5cdb54b2c36916ad476594e9a3d6e5","ssdeep":"768:u/lf3TqYzFcQ/4+b2XU8e4uqcxhI87INl2A4o9tejFw43h9Z1taQC+84ZRA/5DRp:aFzFcQ/4+b2X9e4uqcxhI87INl2A4o9D","tlshash":"fef298ade1451896236fc13d99c0bbc81a1a6120e6438dfdf467af184ec56c552eff2c","first_seen":"2026-03-03T07:52:42.695934Z","last_seen":"2026-07-01T01:27:16.659906Z","times_seen":17,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/packs/feedback-modal-c10f4faa4d3f071dfdff.js","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.956Z","timestamp":1782869208956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /packs/feedback-modal-c10f4faa4d3f071dfdff.js HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 83694\r\nlast-modified: Sun, 28 Jun 2026 06:00:05 GMT\r\netag: \"6a40b865-146ee\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":83694,"size_decoded":83970,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b6217201e9e011a9b5feab2d9bbf80c2","sha1":"0c9b5e57a3dfced58d35408028a98bcd1ded9935","sha256":"01e62c9efe7ded0ad04fe09fc536c04581321faf5f9a95ac98f45988fdf1ecb7","sha512":"3a859636ef294cb5b09e069794fa4b41d2a9f5464e784f06b9d1725b1611d8a0157175294c6cc4153ced8ed82a8f2268671ab63be7fd7a509b0b9ed09ba19eb7","ssdeep":"768:bnEUKwuYGPAfGJkrkoZ5xC31DfodgWjSJpUQ+k3Woq2zGhs/6xMksMiarNMdriUR:QUbuYVrLWQU+k3x9Yr2driUgQ","tlshash":"bc83e6dc7299b5b153a721f2003f540bf37a6a289c0ec0a0b222e8d67db589d5167f7d","first_seen":"2026-03-03T07:52:42.682674Z","last_seen":"2026-07-01T01:27:16.660968Z","times_seen":17,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:50.398Z","timestamp":1782869210398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://armt.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Jun 2026 18:12:11 GMT\r\nexpires: Sat, 26 Jun 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371679\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-01T17:14:51.753255Z","times_seen":319538,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/icons/attlogo-favicon-16x16.png?v=1","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:50.599Z","timestamp":1782869210599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /icons/attlogo-favicon-16x16.png?v=1 HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1815\r\nlast-modified: Sun, 28 Jun 2026 06:00:22 GMT\r\netag: \"6a40b876-717\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1815,"size_decoded":2075,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"abd3bff57afc444be6f78801334e6c10","sha1":"011429ac96709c9b05cda6f29c3c2ecac6158391","sha256":"f7582fd23db2b0f03a798169c070e6ef14a4baf31d2b6db9f3083fde8aced2e3","sha512":"524b44202f62d22cd8981f697e385c719eb5346f32437655cc62327a135e966cba5237d80304c4eae76952f72e0078b3784114239e6895c71845cd284d1287a0","ssdeep":"","tlshash":"f931d747fa426541d489c5832ce2802b4c5391c0dec0d496becfd86f68b01f4a42dad7","first_seen":"2023-05-25T22:24:00Z","last_seen":"2026-07-01T01:27:16.662719Z","times_seen":115,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/assets/framework-0cd98e43da9ff46c6b653d13fc94ffcf325928ee343b507d4d370c4f1292b640.css","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.946Z","timestamp":1782869208946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /assets/framework-0cd98e43da9ff46c6b653d13fc94ffcf325928ee343b507d4d370c4f1292b640.css HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 135906\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000,public\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":135906,"size_decoded":136180,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"33e35f6ae9a7f47b839e9927a21f22fd","sha1":"cba9a37d1338fffee4443b2e3c3d23bb6224d549","sha256":"6e99e68994fbb26e2de81ba6757be2a4f6026e090db3ebcee63cc724cefab02f","sha512":"030b6859e7f869e7ffb6151917951e25292d3834bc879139c63532905911bd06eb29707c659c9d2acd196084cae4c0f8fbf6991e62cbc4f3b64a679ff0562e2f","ssdeep":"768:k4Gxw/U1Hcz39gSyrMMrrF2r+RH9j4rJDFQaR/GXP4NsOYSYDse9mR64YZ/L8Ogi:0w/wrcr+RH9krJN4xs72TUccc","tlshash":"20d3e760f21031ea3373c21e71d0fe862659a152e5564eb7f22f26d84f896ca1773f1a","first_seen":"2026-03-03T07:52:42.662847Z","last_seen":"2026-07-01T01:27:16.663436Z","times_seen":17,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/packs/auto-focus-first-input-bca14bb1058559b0e26a.js","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:48.954Z","timestamp":1782869208954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /packs/auto-focus-first-input-bca14bb1058559b0e26a.js HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 643\r\nlast-modified: Sun, 28 Jun 2026 06:00:05 GMT\r\netag: \"6a40b865-283\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":643,"size_decoded":915,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (571)","md5":"c3e215b56272c4a3f1562c84fe356be9","sha1":"a1693cc69ee7d5781f9fb2f7a76063f3b7075860","sha256":"7095c10efd777f81fef3ff59fc1426716ed5bff13aca8f479726002140157594","sha512":"2dc93ce62ada553ac50ae71fe6d64d61f86d7ca1675b866131e0ff39961620cc1bf4f149c22cec18375caf9ecf205142be2f08abd5977d49f8d794352c5b67fc","ssdeep":"","tlshash":"e4f09ebef0f5bdd103b6a43c822b5447e279b890241b508187d9c3e15ca804e4072a9c","first_seen":"2026-03-03T07:52:42.689692Z","last_seen":"2026-07-01T01:27:16.664088Z","times_seen":17,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/icons/attlogo-favicon-194x194.png?v=1","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:50.597Z","timestamp":1782869210597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /icons/attlogo-favicon-194x194.png?v=1 HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/users/sign_in\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:50 GMT\r\ncontent-type: image/png\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncache-control: no-cache\r\nx-request-id: 63738b05-1f63-4915-9c47-2617f5c1b8a1\r\nx-runtime: 0.002256\r\nvary: Origin\r\nvia: 1.1 google\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":345,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700\u0026lang=en","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:49.432Z","timestamp":1782869209432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700\u0026lang=en HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://armt.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 01 Jul 2026 01:26:49 GMT\r\ndate: Wed, 01 Jul 2026 01:26:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":2503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49148aa6aa83030c8107b048340b6d45","sha1":"0120fa4085b32b021b14aeae199e5dfade9bbf78","sha256":"c9232eb823d220300177aba31f7efd6e78e0ccdef46558336f8ede5a6efbfdc4","sha512":"2e5514ec03270ebe0019fbafead0722e2ab5e87b3ddc3e2c6a2beab2ab4ca36d6fa22835e6a88827eaba8f0fc9f0819a94e69fe3049539a389076b6baa8521fd","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIw3:0AYqY4tjXqY4ahhqY4tU8qY4Z","tlshash":"3ba22ba00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T06:09:26.673739Z","last_seen":"2026-08-01T14:57:45.505027Z","times_seen":16610,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:50.394Z","timestamp":1782869210394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://armt.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Jun 2026 18:12:11 GMT\r\nexpires: Sat, 26 Jun 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371679\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-01T17:14:51.753255Z","times_seen":319538,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":28,"connect":31,"send":0,"wait":17,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://armt.cloud/users/sign_in","date":"2026-07-01T01:26:50.396Z","timestamp":1782869210396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://armt.cloud\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Jun 2026 18:12:11 GMT\r\nexpires: Sat, 26 Jun 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371679\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-01T17:14:51.753255Z","times_seen":319538,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":22,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armt.cloud/users/sign_in","fqdn":"armt.cloud","domain":"armt.cloud","tld":"cloud"},"ip":{"addr":"35.190.118.211","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T01:26:48.195Z","timestamp":1782869208195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"armt.cloud","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 01:57:31 GMT","end":"Thu, 10 Sep 2026 02:53:25 GMT"},"fingerprint":{"sha1":"D5:38:48:5C:68:FC:EB:73:24:7B:17:5E:FD:BB:B0:DD:03:D1:94:5F","sha256":"02:B5:5B:E5:C5:58:E4:08:EE:2A:1C:D8:29:A8:B7:97:88:F2:45:6C:B7:C6:40:47:8C:1C:FA:1F:98:98:F5:28"}}},"request":{"raw":"GET /users/sign_in HTTP/1.1\r\nHost: armt.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _armt_cloud_session=3fd444a9019530c2313af48654429ccf\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.21.6\r\ndate: Wed, 01 Jul 2026 01:26:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\netag: W/\"a7bfebfd559301792ee49946985abfce\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 6f58999c-b52c-4348-836f-46a50f32668b\r\nx-runtime: 0.012779\r\nvary: Origin\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9090,"size_decoded":9522,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1590), with CRLF, LF line terminators","md5":"a7bfebfd559301792ee49946985abfce","sha1":"fc6f639601e87b760012079e7eec26403a76bac4","sha256":"d079a4289fb09f0580578ee80e9e34110feafd745c5b844355e4ea46538120a5","sha512":"21024b2e19afaa4022c9fa3b20c4a434997d07f485abdacd94b457ca922e1e5d5921799b7b173d8f4c97076cca29e004adb1321d9735207f09f0f5926c5a01b6","ssdeep":"192:HLXcScEmXMPU8cc56BHGe82HH2yXZjEwF:rXcScEEMc8ccOHGeNHWyxEwF","tlshash":"a212b4b2d0e04d2a1b1286d8e772f709c44590d7cad79c1832ee06a1aff5cb159573b7","first_seen":"2026-07-01T01:27:16.665657Z","last_seen":"2026-07-01T01:27:16.665657Z","times_seen":1,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"armt.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}