{"report_id":"509b5850-45fc-4a38-b153-590fcaff5702","version":0,"status":"done","tags":[],"date":"2026-07-22T15:09:22Z","url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"172.67.171.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"title":"FORTNITE INVENTORY CHECKER","dom":{"size":143417,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43526)","md5":"765dc0d23d5935416241e95cabd9bec1","sha1":"0eab5d4d542b24433cce3c8072f3d12722325b07","sha256":"76aeaceeb1c0e911d09bd3ba1c9ae4acc9b8efb80a43979046274725278b0b74","sha512":"0c1daf262c7571f58b8ee63ea2cdab7ade7d2ea09fdeaf70c16c864531108889c6c71008a60530b8d2d2661e103e3c688677c0619e134846ccb4dfc737e705cb","ssdeep":"3072:r2hSsnv8mlm01IkhKZvVkQ4+HbAH0hZjBuTe7Zx:r2hSsnv8ml/1IkhKZvVkQrAU/j17Zx","tlshash":"50e31a2562a0003e6c1385f5b2eab74db61da587ef17a8f8b74d41101fcf9ab487366c","dom_hash":"domhashab058a70973b1f7595939190df0fd7c0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"172.67.171.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T15:09:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":8,"received_data":1352434,"sent_data":4521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-20T08:40:19.100598Z","alert_count":0,"request_count":2,"received_data":420448,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-19T22:31:15.74052Z","alert_count":0,"request_count":1,"received_data":231809,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":3,"received_data":13992,"sent_data":1649,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"auth-fort.live","ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-22T15:04:08.32019Z","last_seen":"2026-07-22T15:04:08.32019Z","alert_count":33,"request_count":11,"received_data":11604077,"sent_data":7274,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"186a16fa80e0768982fc1767ae09e020","sha1":"7a478586cba6f13c11c9e1a277316b8f9622e4de","sha256":"b834ed75b8de70693c97e8f7cc5bea1c50e56aa0d0e9f39f464fc165249513cd","sha512":"aa7be12cd1e3b43f9b5922b407c6090cf957ab7c54d3c442d14f982ccb3baddb0eeada7d799d4ffe448f85aa815a356967708439aaa3fa4866789e8b5b84cda8","ssdeep":"","tlshash":"24119758eda908272a6a153550ae5d45a02601cfac183c7f3b8c331c9f0c21f20b53ec","size":1052,"data":"","first_seen":"2026-07-22T15:01:48.558159Z","last_seen":"2026-07-22T15:09:25.863458Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"855c27782663cd125e09dbebdcc92000","sha1":"ad7c73221b629490b77483c7abf49b2ecd56fa6e","sha256":"5561155a875db20879cd57156204b9611cf55235c36740a27b551529b2581a26","sha512":"652b240b8cfb2db68ff209e7434d71cc7b85f01b1bf9c87435829153aeb790506b32128d4f6e22b07f6a23e13605be773a5813313fa673025f43377caee4c010","ssdeep":"","tlshash":"478004731003c0314f7cd14410513105431d5f47c5c3cd144cc04004113574404101d0","size":35,"data":"","first_seen":"2026-04-04T15:35:16.192782Z","last_seen":"2026-07-22T15:54:07.117553Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a550d7f5ae46e8d72f833684cc789c70","sha1":"078a4788793906d0d3d8db205ddaa0e99bc9d113","sha256":"5e5bf04812c52f311df70d9f8f10c232e7f630dda4498899a98a0bac86af2ef4","sha512":"1c7b77011e23a0ffb53f229a206af1f4399cab0adad325d6d9837f58b2b99bccb7c65e364dd1c456472a6d9599cf9fdf6e04acae5b8bd48474731ce4d1834d2d","ssdeep":"","tlshash":"e01125683caa3c28936996ea377fc3cc517924277461cc80d40ec8341a67d871483aad","size":1002,"data":"","first_seen":"2026-04-04T15:35:16.195645Z","last_seen":"2026-07-22T15:54:07.118393Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfd8ccfee74746cd26a124747302f8f","sha1":"f76d62cd48d7abd863f92469f79fe77421eb23c7","sha256":"2ee50a99b61b4e9f8f4d582c1266adc8bc8c9d5aef73d909a1c865f37168ec81","sha512":"7cb83dce1207cc8455d93c143916b7ff98ce9f1bfce2ba40b70bb9b4d7b82e466002f81a1b72b6e3a37dd6b75d9cb5dcf35d3be8febe4c7afb8763945b9c58d2","ssdeep":"","tlshash":"54f00e5c0c0fb97103365aac73be89c83656010c25414944ca66c13065a08db6896b4c","size":504,"data":"","first_seen":"2026-04-04T15:35:16.198644Z","last_seen":"2026-07-22T15:54:07.119679Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e7505fe892d48d65a9fcbc15e53081","sha1":"de9a2a1617665aa3375bf6fd1aaa58dbacd20dda","sha256":"728b0006af24f92a8909559fed79bc2e862735c676979ab3443ff81f40abdc97","sha512":"aacc10a7a0cae58db3387f0194836cc3e15306b748ee8492c279136efa5abe3e977bdd58d7763faa12f02aada33c39183a11a0884517dbfb2ae3ac71c6b45e52","ssdeep":"","tlshash":"19e068ab3885093912bab9be32b7660430131118b40c4618db55b370e574cc68b4580d","size":379,"data":"","first_seen":"2026-04-14T13:27:05.580507Z","last_seen":"2026-07-22T15:54:07.120598Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af1b021ea565dce430a083e4deee054","sha1":"ca4ba492f88b85bdd52289e7d8887e2ac95033c9","sha256":"e5206351c812a92de9690cf522fc9a3d92d3abca06d17139163c9a4d355ac7c2","sha512":"f8530995ccdead23bba129159210a3469f7809e2e11d7df22ea896aec0fd8b468d73e2b05209f703f8a335cba3bc5248930efb4689392d7fec84448b87761f3f","ssdeep":"","tlshash":"99e0f1e833828eb042a95a0933bff34db1e3201c88854810c97e687cbf38e93c324d80","size":431,"data":"","first_seen":"2026-06-27T13:27:28.236331Z","last_seen":"2026-07-22T15:54:07.121432Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20c7f7ad2f213c9076a12603950f2bc3","sha1":"4f282de702efeacec52ea1acf6025b6c300c7d0f","sha256":"c1e6ce66b51d611135aaa29940e53dc07d8326fb9a53b4023bc9f087823310fa","sha512":"eee148f548b53eacd05afd154c5d3a964910196412a5491fafa090ada1fa8a3fffbca11e66586b227b80b4525f50e971bdd6c486ea89f006fe645e7e7513bce0","ssdeep":"1536:J2L5Evf/IHnVALA34Pq0hZjiwuuY3uN9ZYhkJ6T:w+HbAH0hZjBuTe7ZS","tlshash":"e743d6672164051881629696b1fb7302b21d5d17be82b4f8bb4ed6082fce52f90b5efc","size":58175,"data":"","first_seen":"2026-07-22T15:01:48.561382Z","last_seen":"2026-07-22T15:09:25.868219Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,container-queries","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9aca14a5f8c2b5683912a08db4f7841e","sha1":"684e72ae291579ffa8c5de5b0a56c8ef063da30b","sha256":"a789ce5a73191759006b64a0c05f63afbf9aa43a86511bf798d688737429e60a","sha512":"9e30781f2ce2d241be8689e2747f1b62e28cbdf1b7de94de62e241a067e2cfac877a172017f96de1033991d13313b2756c1b566834037da58ca8f4fefe28934e","ssdeep":"6144:f1BV9KZWrIJQi+4E520Wie75PCP9HMVuiQG3aI33VO0s:taWrIJQifE520Wie75KP94uiQfI3lO0s","tlshash":"f5944ba57396742647eb51d850ea1042f37eaa38840844bcf7edd4ea39e5e4840fbf39","size":418973,"data":"","first_seen":"2025-08-21T16:21:17.561387Z","last_seen":"2026-07-22T15:09:25.858012Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf1bc49b9c750aaf7232904cd0b63dd1","sha1":"e1d2106d01dd6078bf419085c4dc796ebd8d1932","sha256":"9a8e64cec75115e0297fff042051148d84f2491ecd665b6eaf09317551bf4bda","sha512":"bd2570d57f2809b2c4993b1fa0396034f891d275a0792b38c539404cc387898b73e3b75e9bce16d05e2597bc86c51058d1191aa406a0a51c30536625af041838","ssdeep":"3072:d87aFzbU03T5KrhRldiEbLy5x6hFyuv4GZWlkry7e0pDcw1D/fhSQAKKp2T3:wWbUrh9iEbvFJ1y7e4cKD/fhSQAKz","tlshash":"bf3409cdb39a706653a3b5b8903f014bb27e7992f848c8a4e142d8c43e7465a4277f7d","size":231206,"data":"","first_seen":"2026-07-22T07:29:20.451889Z","last_seen":"2026-07-22T15:57:47.022128Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/?plugins=forms,container-queries","line_number":64,"column_number":13405}]},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700\u0026family=Space+Mono:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.034Z","timestamp":1784732934034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@400;500;700\u0026family=Space+Mono:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 15:08:54 GMT\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6392,"size_decoded":1301,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4442c192a0847dc56c0333d93a2fc45","sha1":"ce7ed6187f6169b99951f1373562aeedf1896072","sha256":"f1421715077589b510c67cc0a2c3e4ba8be24c85b7a60f29bd52b4d55c99e592","sha512":"cfd3925cd12bed0c8943bf0700442ee3b8e5756a7a432fece76d5d4be4c67996b85621ee1395c83bce45629928a7c3bd20d4a8c151e29042a865f36c3c564a72","ssdeep":"96:cNQOEaHQOEaGJc+uhQOEafNDNQOXaHQOXaGJc+uhQOXafNDNQOpaHQOpaGJc+uhT:cx/GiZC4GRZYiG/ZV6FY7sbBxx","tlshash":"bfd11092006b9500eb575cc236cebe32fe9ea0546051d9396ffe1498ed9fc316311b2d","first_seen":"2026-02-24T20:28:03.147187Z","last_seen":"2026-07-22T15:09:25.852548Z","times_seen":21,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/23/vbucks.png","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.047Z","timestamp":1784732934047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/23/vbucks.png HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 04 May 2026 06:08:06 GMT\r\netag: \"69f837c6-1b626\"\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7ZDNB8jFIRgTQzHiLQ681s%2Bl83vhc3qY35MaM25vh0%2FsDFq80P5OM5cbfYymHpi6L5JIwXoLgEzjJEb%2FL0sZvKP39RpwXZe8WRmrZdBvxXefZr0YDhMMpJjvffDHEXnxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d05cb42783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 112166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112166,"size_decoded":113048,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"12c982384c8eaf25d16d6aea3b98ce81","sha1":"87181a274f4c45ebad4c303c09bf175bd5b6d27e","sha256":"46c9fd63ff1a8656177a0daa31519b40fffc5f2957f7f39d3e3e6a0d3dfefa31","sha512":"4cc18d729b8d7ca3a3d4d5b06caec2884092acdfe4257e94d18ef6ed8fd4368ea002173300dd001cf36a1237e508b68d17d41f644d296d5fb7bc200bbefb0902","ssdeep":"3072:kRbT/i5At/1F0TYSFOKIQoaw3kMRDSVxJ4:oniStscao0KsJ4","tlshash":"e6b31225aacdb0d4dd35321dd7849905f70cef74ea9e2a0a624f046c61bc916be37239","first_seen":"2026-05-07T04:05:07.401295Z","last_seen":"2026-07-22T15:12:43.851803Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/23/skins/kratos.webp","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.050Z","timestamp":1784732934050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/23/skins/kratos.webp HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 04 May 2026 06:08:06 GMT\r\netag: \"69f837c6-1bf94\"\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVMqtstTOl6ENHPFoGS8GIB8wJo5Br6aKBa2S9D0dld2gV6r6S4u%2B4F4wLathZd82etFXdI5ASpBr2fxg3nKl%2BSoM6eUHuHNP%2F%2BxQg4C70D%2F%2Ffy2wM60ie9plrcacxWr%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d05db47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114580,"size_decoded":115471,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62c12ed0ddb65c8fe4b7ac279857bab3","sha1":"1eefd25086ec3c6467e188ba410e477be4633c84","sha256":"ebd23278d8307a48b9335bf4f2c0f6f6d0c0020ecda15b81a4e4ccbb77defa62","sha512":"0dfbe07a70b0a00043ea4ac651728eae73bfc064719ac020478778dbdeffb92bb446bfb4462deb2d4e42565dc376305172732236fc16fd6ca8d51712f434fcf3","ssdeep":"3072:wZcbvZXqTdVkKQ6A0c8exRkHQMQl1ZZ8c9gmJjj:wZARX+dVr3o8eUwMQ5Jf","tlshash":"5db312c73e584e070cf4a368da3e95acb50bbe778f990e4138a7ae9a39055f4b353110","first_seen":"2026-05-07T04:05:07.394695Z","last_seen":"2026-07-22T15:09:25.853927Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/23/banner1.png","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.820Z","timestamp":1784732934820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/23/banner1.png HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 04 May 2026 06:08:06 GMT\r\netag: \"69f837c6-501807\"\r\nexpires: Fri, 21 Aug 2026 15:03:36 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7uOICzLDTnEJCKFZFWq%2Bmfw0GICoH4AnfSmHCy7Cjegbs8tRJ%2BCWX3X3fzRtp9BcNUvEQurvnV7ktHazKv%2Ft5wuWrJcDwveDm%2F3sRte4KNepVih8Ke%2F7m7TRrqR51ajHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d0a9c95783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5249031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5249031,"size_decoded":5249919,"mime_type":"image/png","magic":"PNG image data, 2356 x 1792, 8-bit/color RGBA, non-interlaced","md5":"3c577e375ad2c1c80d492c72552172c5","sha1":"0b75bc9502b0024943e2b0a5673417ddcdc6eb7e","sha256":"7998a8711ae4b8a71f1e25c2f7ea798a18a7d68fe8f93c098a94a60af3761368","sha512":"ab32df5945040eea27c2b4985c5aa27bafd55f4e4726060a3e1a2bbe0babda88a3bf31a59dac8f3f31c852411f85223be4d3839ba0effb63152ca4701a133f4e","ssdeep":"24576:E1Mz6PskFUSNbnFiGlN4X6aQreWb2qf0xBhsfveQq:Eezs1DFflteWKyesHLq","tlshash":"352533fd06bbf6279b185cc85682bf8e0ab273388426157d3853838d44775cac5267af","first_seen":"2026-05-07T04:05:07.402274Z","last_seen":"2026-07-22T15:09:25.854551Z","times_seen":12,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.930Z","timestamp":1784732934930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:16 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 7058\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23099,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-22T17:29:32.326722Z","times_seen":24582,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":30,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.931Z","timestamp":1784732934931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:16 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 7058\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23099,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-22T17:29:32.326722Z","times_seen":24582,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":52,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/Epic.svg","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:55.207Z","timestamp":1784732935207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L65nl9TOsGhnVbALO%2F9EjP4RfPUo%2BT0kfEj1fDfmJNI84EUCJANPjyt00SvQEbzt13LWGb7UT%2FFLNMrkA36SGV62x1HnpssDoiyhfsXQUfaCPXrBFKKLBK7jaU2%2BIdidWg%3D%3D\"}]}\r\nage: 319\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1f35d0d0d21783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3495,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-22T15:54:07.08317Z","times_seen":592,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.925Z","timestamp":1784732934925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:34 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nage: 7040\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39680,"size_decoded":40491,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-07-22T15:09:25.856221Z","times_seen":7308,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T15:08:53.410Z","timestamp":1784732933410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:53 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Sat, 18 Jul 2026 20:32:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjpuyzcjs5DRY8ssuVHJaOXp3WvFRjsK2TngNctNyHlUXnbQNhdy9uhS97imc1rNHdLMks%2FEaGalkSc2d%2B2%2Ftl7ODKEIgop6FhEUOC6muz%2FIwN9CQqbNDfRPsZg2qjcJEw%3D%3D\"}]}\r\nset-cookie: pixel=; Path=/; Max-Age=31536000; SameSite=Lax\ntt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax\nclarity=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_id=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_label=; Path=/; Max-Age=31536000; SameSite=Lax\ncf_s=0x4AAAAAACNDgWEUTrL1fw1t; Path=/; Max-Age=31536000; SameSite=Lax\n_user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss; Path=/; Max-Age=31536000; SameSite=Lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1f35d01fa8c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110182,"size_decoded":32438,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2445)","md5":"d5764d6231d3467b2153dc3594b23b26","sha1":"b01fd69991f9cef19cc72650329dee56705d1cab","sha256":"6b17e4648329a0026de97abb185a581e23dd1b1d9a8d003e5d19fcb4c7c07b0e","sha512":"360c5e4c29ed271dc50362de901a855d2eddc20340083dfd4187c380e8ca5e16ddaa746826a869aecd4d7b2d7e873a5a9d8510a106ee21afb983a41d36a4d08e","ssdeep":"1536:8mMicwQG6JH+Qh7s+XyBvpyPHYF72jNbLl2L5Evf/IHnVALA34Pq0hZjiwuuY3ub:8mU77s+XyBvpyPk+HbAH0hZjBuTe7ZV","tlshash":"61b3e7a522f004a8415746b572fbb70ab61c9a07fe43f8ecb75c81151f8e85f8472abc","first_seen":"2026-07-22T15:01:48.545702Z","last_seen":"2026-07-22T15:09:25.856992Z","times_seen":3,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":113,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,container-queries","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.026Z","timestamp":1784732934026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /?plugins=forms,container-queries HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=forms@0.5.10,container-queries@0.1.1\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::bthrr-1784732439863-e708c58d8f07\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5ENcoe1j9vGAR%2FwQ32KwTZP%2FqpWUiTEWJziIkOShx0t29F58Rq6%2BoKDQER3lp8sg%2F23HDLlPuVUClrIE3jnqut3%2FOHO%2BAsavv%2F3BchmRaC%2FZU57afTjs3WlTf1dm75EUWdlHTU%3D\"}]}\r\ncf-ray: a1f35d05c9c12678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T18:24:27.697275Z","times_seen":17457126,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/Epic.svg","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.041Z","timestamp":1784732934041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=5,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2Fu%2BJMntMFgmgi7M6a8lCmj6YQ106ltLXNi9eZ4NSGiyAF%2BZyDVUwNqeRc4wT0QO6eMFeE3hb8NmRAUElNjjdZ%2BjxDLKV0Qh0B5eX1DHyCUa0rWWawipbGTquTUv4ipILA%3D%3D\"}]}\r\nage: 318\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1f35d05bb40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3492,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-22T15:54:07.08317Z","times_seen":592,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=forms@0.5.10,container-queries@0.1.1","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.082Z","timestamp":1784732934082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17?plugins=forms@0.5.10,container-queries@0.1.1 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auth-fort.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::zwkjb-1778775054745-6f7163d48e45\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 5957876\r\nlast-modified: Thu, 04 Jun 2026 03:41:32 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euUJrUHDkTXQcBB3mL55nfSeqfad1b5fUV8dPF1tGYAbng4YURZRFsKXczvMLFYBxYMFy7eKXBHYMj0l%2B1zApSQVd4fs8Zk7U8kQgiYoOPoDANjzJ1zvNML49DBWDR%2FeRNs9YkI%3D\"}]}\r\ncf-ray: a1f35d05f9f12678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418973,"size_decoded":130418,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"9aca14a5f8c2b5683912a08db4f7841e","sha1":"684e72ae291579ffa8c5de5b0a56c8ef063da30b","sha256":"a789ce5a73191759006b64a0c05f63afbf9aa43a86511bf798d688737429e60a","sha512":"9e30781f2ce2d241be8689e2747f1b62e28cbdf1b7de94de62e241a067e2cfac877a172017f96de1033991d13313b2756c1b566834037da58ca8f4fefe28934e","ssdeep":"6144:f1BV9KZWrIJQi+4E520Wie75PCP9HMVuiQG3aI33VO0s:taWrIJQifE520Wie75KP94uiQfI3lO0s","tlshash":"f5944ba57396742647eb51d850ea1042f37eaa38840844bcf7edd4ea39e5e4840fbf39","first_seen":"2025-08-21T16:21:17.561387Z","last_seen":"2026-07-22T15:09:25.858012Z","times_seen":458,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.928Z","timestamp":1784732934928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:34 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nage: 7040\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39680,"size_decoded":40491,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-07-22T15:09:25.856221Z","times_seen":7308,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":44,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/23/skins/reaper.webp","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.045Z","timestamp":1784732934045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/23/skins/reaper.webp HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 04 May 2026 06:08:06 GMT\r\netag: \"69f837c6-8540\"\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jn9HDNzFRL4J3W8ZfEcq1IwVDRzFe1XneD4le5lO%2BabG%2BNZq%2FTtwwxvEgECNPFKo%2BJgt95t1cDaAkOxYVpGUstHm%2B1kG%2Bc8dS6NGwW3CMl%2FR%2F4yi8Oq01oso81v1IelStQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d05cb41783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34112,"size_decoded":35003,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8948fbd8cbe2d95c54cef580fd197a7","sha1":"6397f7a8e2b113a1099613403a84fed34b435ad9","sha256":"9bc8c80d32e8559046db0c74efa0855a795d2c89f1d70b0ae97c6072c965db2e","sha512":"e528e55e65ac2b14d8e7c9ae0776b6fcdb821be947c9924b3d45c2e3781c39140f1045210aa06c9de9198e210db9bc3119ffc4b1f03383e16c750fcd476eb232","ssdeep":"768:hJ2wwC83rY8prP9IsbYMyHoN6g9Md6ldNloh3CLC:P2wwC83U8prlxbYMyHoOEMt","tlshash":"03e2f1ab7e6456abae3cdcb157959d76af01435bfae2e3f0b2305961d02208d195b300","first_seen":"2026-05-07T04:05:07.390811Z","last_seen":"2026-07-22T15:09:25.858549Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/visit","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.362Z","timestamp":1784732934362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"POST /visit HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auth-fort.live/\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://auth-fort.live\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mosXsMIyxuyuYtgIQDdgjaEn0G%2Bg56SkNYXGZeKwO3ljh5LMMvsc8pA2bniG3z1mRDy4MGNYMcCz6GYHZ7Z4%2BS4N%2FQ8vu00rGFBuBHCdoipvpFo61%2FmaOfP0NnY5Olz5xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d07bbb9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":692,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"72054d9a6fbdcc7df012e19f32345b65","sha1":"52dd4c74c813db3790179c4f236ceadaca3467a8","sha256":"c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334","sha512":"5305bacdfd7c9bb525ff6c40d3ffa23c3f82eb5268ce3037dc353fa1a043ae31b239eed46db0fb043d61c55d57b97c5f00c308f92456c51c44069f23fda40317","ssdeep":"","tlshash":"5f30000000000000000000003c00000000000000000000000000000000000000000000","first_seen":"2023-03-12T08:54:09Z","last_seen":"2026-07-22T15:54:07.089641Z","times_seen":3487,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v361/kJEPBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzBwG-RpA6RzaxHMPdY40KH8nGzv3fzfVJO1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.923Z","timestamp":1784732934923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v361/kJEPBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzBwG-RpA6RzaxHMPdY40KH8nGzv3fzfVJO1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1125924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:14:40 GMT\r\nexpires: Thu, 22 Jul 2027 13:14:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Jul 2026 17:33:22 GMT\r\ncontent-type: font/woff2\r\nage: 6854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1125924,"size_decoded":1126737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 1125924, version 1.0","md5":"98172fef8c2d5c5acb8f77c9de1e622e","sha1":"d43ba105bc01805b7c52b8681bd55ade364a6558","sha256":"c4bfec3f41effe12723450ddf7bbb8ae04766d85e94a34898ef8b2aab89d56df","sha512":"4c086b100e5c4bb2ec72cca7593af1af4d9f9e420aa68da731e58a6a894c88d045a4066985c936c98a9585ce3bb1ee123273ece5e71017b8cbff1ee656bb4156","ssdeep":"24576:O5ZYdSLYS0IVgwPxDnv5DqAccF+8aFfPWr6JPkqnytOazT6bt8BKE:OMdSL6IvPxDnRDqBUuF306Jrny/nZkE","tlshash":"352533f0fff3526c2067e26aaf7bd1d6132934edb421d8e899f718e076534d65406a08","first_seen":"2026-07-13T23:26:15.603004Z","last_seen":"2026-07-22T15:38:09.259098Z","times_seen":374,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":56,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/23/skins/blackknight.webp","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.048Z","timestamp":1784732934048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/23/skins/blackknight.webp HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 04 May 2026 06:08:06 GMT\r\netag: \"69f837c6-1e3f4\"\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FH5oJA%2FayGabqDJGk4Ab6N6GIXDYD%2FhLqOKWlg9axYYi4jQuNYXFqsZRT1Qle%2FsdJBqG2gnbxqFZCKS9QulZ4RdFd8cJ%2BFxZLWz3Tv6KGunGYUvFOBkLBub9AkksSB0HtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d05cb46783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 123892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123892,"size_decoded":124779,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd3355b63f03afc3a2d2fa2cbb65b3a7","sha1":"006cc260580a9ed4378aad3838d44101922971b3","sha256":"024d7e4d334d5108900fd77c619c6bfbd32482c75c071ca6e31d4cccbda8ce39","sha512":"12fd6a94f533ca675012f7e2e048ee0688cc6f409990e9f22423903633e23667fd04d917f24a98c1cf8944e9fa42fffc964ec99890b3a3db07d189fbb00fdc1c","ssdeep":"3072:PUUE4EZFmBeUo2WtpnAj/bZs/06Hk5o1VazOTJgNaSOHuY+ioYTg:cUE4EZQIU4ZKKcSVraHNSOdQg","tlshash":"94c3135848c87ec1354bd4d3ead278070f79640ac63edf90e7079ab5d84a17ef8250ab","first_seen":"2026-04-12T13:48:01.304848Z","last_seen":"2026-07-22T15:09:25.860098Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.368Z","timestamp":1784732934368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\nexpires: Wed, 22 Jul 2026 15:08:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 86694\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231206,"size_decoded":87297,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4917)","md5":"cf1bc49b9c750aaf7232904cd0b63dd1","sha1":"e1d2106d01dd6078bf419085c4dc796ebd8d1932","sha256":"9a8e64cec75115e0297fff042051148d84f2491ecd665b6eaf09317551bf4bda","sha512":"bd2570d57f2809b2c4993b1fa0396034f891d275a0792b38c539404cc387898b73e3b75e9bce16d05e2597bc86c51058d1191aa406a0a51c30536625af041838","ssdeep":"3072:d87aFzbU03T5KrhRldiEbLy5x6hFyuv4GZWlkry7e0pDcw1D/fhSQAKKp2T3:wWbUrh9iEbvFJ1y7e4cKD/fhSQAKz","tlshash":"bf3409cdb39a706653a3b5b8903f014bb27e7992f848c8a4e142d8c43e7465a4277f7d","first_seen":"2026-07-22T07:29:20.451889Z","last_seen":"2026-07-22T15:57:47.022128Z","times_seen":58,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":31,"receive":31,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/Epic.svg","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:55.205Z","timestamp":1784732935205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 15:03:35 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ctl4U9TbyW1k68Jb8oIKjdzy%2FtNQLQinjEUCEqgQf%2BDLDUlYz7gPlsGtvVKrUzrMOCPrbZZVv86zFnGkv52PMOhq4Pn3mlfhRiD4DTAVLTx6TrZyT6wCOsvrZYgnypuQcQ%3D%3D\"}]}\r\nage: 319\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1f35d0d0d20783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3491,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-22T15:54:07.08317Z","times_seen":592,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lexend:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.029Z","timestamp":1784732934029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Lexend:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 15:08:54 GMT\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4884,"size_decoded":1199,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70886f25d2f883ecbe6a7d967128e27a","sha1":"c1ae93b2667f763e6b53645cc1cd35e0b1f3d904","sha256":"fc1d62a988ed4a279f232e75a925938280f5e56b19b6890e03683f8b5ed0b9ef","sha512":"7736cd6a498d3e64111bc8cc8bbcc7771f7f8f7d0b660d3a6906989f36c3e1fe9ad5b3a834aebdef1bd23754653fa9a65344055d362e54f202b6d09f5d91acc8","ssdeep":"96:cUgOEaAXgOEaA3Jc+uggOEaAXNDUgOXaAXgOXaA3Jc+uggOXaAXNDUgOpaAXgOpr:cUMudO7TueOd1uUOvXuSd","tlshash":"1ba17b91086ba600db5b0dc12ace7e37ad4f6162b440d539affd1ddced9ac222315b0d","first_seen":"2026-05-07T04:05:07.396221Z","last_seen":"2026-07-22T15:09:25.861093Z","times_seen":12,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:wght,FILL@100..700,0..1\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.031Z","timestamp":1784732934031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:wght,FILL@100..700,0..1\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 15:08:54 GMT\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":684,"size_decoded":1080,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80c2f0cc68f011e88850033523ee984a","sha1":"b53e211989e329a0f760ce7a79a0fb0f601937d8","sha256":"b1f5ee20bdf50aa928daf903edb11da25392b7ab99dbef31a33aad650d6477c5","sha512":"b1793f76cf83bcc090cb49004e01bfc3cf083efde60580f906ad8992a6f7af6d6e66b5f06c0f8f77c956d70148b0f4eccb714b9945b17289bc72173921113519","ssdeep":"","tlshash":"a40199986a569805a5150c43334f7f221e19481f284ac9feaf510d0c9efe9770349b0f","first_seen":"2026-07-13T23:26:15.592494Z","last_seen":"2026-07-22T15:38:09.247944Z","times_seen":429,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-fort.live/assets/23/Frame2.png","fqdn":"auth-fort.live","domain":"auth-fort.live","tld":"live"},"ip":{"addr":"104.21.47.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.816Z","timestamp":1784732934816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-fort.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 20:14:13 GMT","end":"Sun, 11 Oct 2026 21:14:09 GMT"},"fingerprint":{"sha1":"E6:39:8D:F9:7D:74:66:F9:FD:7E:6B:F1:9A:10:39:CD:4E:BC:0B:A3","sha256":"CE:AD:97:4C:4C:06:0F:DB:3A:69:A1:60:6E:D4:D3:0D:11:46:7A:37:0C:30:82:79:ED:2F:E7:D3:61:A8:24:C9"}}},"request":{"raw":"GET /assets/23/Frame2.png HTTP/1.1\r\nHost: auth-fort.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-fort.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACNDgWEUTrL1fw1t; _user_c=1784732933:195.64.118.152:cgsdun_zqMbzR_Lbt3_cHSGxsuRYuUBahIjBT5oHNss\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 15:08:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 04 May 2026 06:08:06 GMT\r\netag: \"69f837c6-58fafd\"\r\nexpires: Fri, 21 Aug 2026 15:03:36 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=clqjIk8gG3TYTAlOnuCFbpkyNmNODxsemRb7GvWj8xiDSQ7WKT5lx8MvRrE%2BD20Dr2FYxUmw2mHKKnt4LyV3egD3vfAu7uh%2Bkhp1rLKUfoEF4OXbU61mOcq8rwwdxgUcrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f35d0a9c93783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5831421\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5831421,"size_decoded":5832303,"mime_type":"image/png","magic":"PNG image data, 3781 x 2227, 8-bit/color RGBA, non-interlaced","md5":"5077eb606263a8140bf58b4895cb0480","sha1":"08b909680fe0123ff89e488148d73ac0aa558adc","sha256":"81a4fbe6846c1861b9ae68d25f13435390b543e461abf913764f457fb3eeb155","sha512":"e7c9071720498dcf3fd37f558d7b0f71c0162dd6c461c8d8a2ce11153623a828aea4bd3fdac68e1d7abc67d98bcb8d74ba378b6a07ed2b584727266ca782c7b3","ssdeep":"24576:qQ4BVYnMyhfQhD0jGc3sjOkkWAbeLi7LCrbd4:q7eMyhk0jGc3sjOnW0eu7LCrR4","tlshash":"d12533a18b426e24595b00394d4878fd77ce854b32eaacd9e7c5fbc0fe6bf526056034","first_seen":"2026-05-07T04:05:07.397613Z","last_seen":"2026-07-22T15:09:25.862176Z","times_seen":12,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"auth-fort.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"auth-fort.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.921Z","timestamp":1784732934921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:34 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nage: 7040\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39680,"size_decoded":40491,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-07-22T15:09:25.856221Z","times_seen":7308,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":25,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.935Z","timestamp":1784732934935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:34 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nage: 7040\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39680,"size_decoded":40491,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-07-22T15:09:25.856221Z","times_seen":7308,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":49,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-fort.live/","date":"2026-07-22T15:08:54.933Z","timestamp":1784732934933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auth-fort.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:35 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Jun 2025 16:58:05 GMT\r\ncontent-type: font/woff2\r\nage: 7039\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16724,"size_decoded":17535,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16724, version 1.0","md5":"e5e908997a453e21f2fe41cb72e186d2","sha1":"d0c504bd8f896d39883e0ddfc81c511af526656b","sha256":"2d46bd159b53f55c41167a4f1540a074649464194fd1e416f5b4694a6c0f282c","sha512":"dd6bf730a4b16a50b0977b2d8efe865be0805da41c50aa86d39b4892c79db91f354e91b1a2ce4198e4b58e26752d4e9a06e33e9911e63f2df2e004d610685cd8","ssdeep":"384:ZRyfvfqIrJOZA3s5dQsQLR7JIWapcGsukRYRv5fpD:ZUXfNs5IRQ3zkCZ5fpD","tlshash":"8f72d0b8fe064610c2542fbf06209de1831895fe192e4f24f8aa74ac4f1715e3f117ba","first_seen":"2025-02-19T12:54:04.600022Z","last_seen":"2026-07-22T17:56:29.619597Z","times_seen":2015,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}