{"report_id":"55e382ae-ff0a-4523-95ae-d02b1b85ee0b","version":0,"status":"done","tags":[],"date":"2026-07-28T17:06:59Z","url":{"schema":"http","addr":"fnval.top","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"172.67.152.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"title":"Fortnite Wealth Leaderboard | Epic Games","dom":{"size":190438,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34256)","md5":"13c7515bc3356bc7b6cca24c040438c8","sha1":"747ba1791b20f09b0ebe2722d55077a5c55a65b9","sha256":"0f35fffcb8065b8f6b472f17a59fe4685c8a75dc573767f7c55fccebaf607c84","sha512":"5eff9389760871901e1ea021f6864dda86eafaabc471cef36f2bb0e8f81ba568bd3f66818c76f13b5b32507831f9c7e7606c2c69cb1a07049b8bb546069bf79b","ssdeep":"3072:hRsh1w8lotR84OhPk+QK0G0woyumziJKDxm9YgTxOkbiuPk+QK0G0woyumziJKDT:hRsh1w8lot+XbBqOA","tlshash":"9114d73852b1117a198392f8e5d1bb5f7568d707ce1be918b7ad04113fcacc688d3ba8","dom_hash":"domhasha7bcddc887c16d50be57f525df3374a7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fnval.top","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"172.67.152.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T17:06:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1704,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-26T22:31:28.839046Z","alert_count":0,"request_count":1,"received_data":232042,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-07-23T16:03:38.848493Z","alert_count":0,"request_count":2,"received_data":18685,"sent_data":1008,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-27T08:40:23.885085Z","alert_count":0,"request_count":2,"received_data":408705,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fnval.top","ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-26","domain_rank":0,"first_seen":"2026-07-28T13:46:01.956641Z","last_seen":"2026-07-28T13:46:01.956641Z","alert_count":88,"request_count":22,"received_data":4606797,"sent_data":14538,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"0a25a1c70efae8e610228e68dfc0ccff","sha1":"1373c273267770076feb27c30249f71efb37f576","sha256":"6bd33a4e9286a6241ddd5b3a764ab2122b235ec09dff70a6a469a11b52cc8c43","sha512":"26bea773178c749b53ff65533f515d8faac4930b370d6e1cd716a2d4282960991093ad026e08d5db8d37976fd0b22a5db7bd18b4f3fd72dcdba4bb93abbaab10","ssdeep":"","tlshash":"eea002d52a2e56440e8c92144c942b1a7166180c56d0f60eac206db6465edec39347f0","size":71,"data":"","first_seen":"2025-09-21T13:17:51.337089Z","last_seen":"2026-07-28T23:21:17.122121Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e77ddb3400fc5d212bdbe0d7425aa962","sha1":"8ef5e41dcc96a4ea11aff264dbfc4b5242c3905a","sha256":"998c604e64ede1432abee7ca088f71a74dabcc28e6f830c7066dcdaa7e8eecb7","sha512":"073946c7b17e1da236ea3c80b46c91cad3a21d3e770c9ebfbba1f1776e8187b6a78a4d368d3f0fe62d96de5162c1d4d50f38e872ba4cd8a4d0cfb5cafea9e7d4","ssdeep":"3072:w1f/IatIv8L0KOgalgr5Y77csTdqW127AbAwfptlASQ6YAyucwiffkEFQoO8nQrx:m6kElgW77c/GPQ6YEc3ffkEFQoOZ","tlshash":"913419ccb79a706653a3b5b8903f014bb27a79a2f84cc894e142d9c43d7466a4273f7d","size":231393,"data":"","first_seen":"2026-07-28T16:34:27.889797Z","last_seen":"2026-07-28T21:15:20.515335Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c59a0de93179f1920140269ef0295006","sha1":"f5318dc36233a700c24f0550c870f7adc32c180e","sha256":"1a27f98acc5dc3672909206c103c74ce595de22fd614744cd36d9b82277dd40c","sha512":"3db2668a44fc1010e62d220a69cba13bdffb29ef9056e4d17cea3d112e6c90e7f823b65880ef2079bd6cee2f370543989b5ed3f152bd92f5238a72baee39c1f4","ssdeep":"","tlshash":"15318b1cd9f30b13120321a9d8d70a40373c868b5e2dbc6e371c29658f0e56f52b979d","size":1737,"data":"","first_seen":"2026-06-11T21:10:40.77776Z","last_seen":"2026-07-28T17:32:45.517815Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"855c27782663cd125e09dbebdcc92000","sha1":"ad7c73221b629490b77483c7abf49b2ecd56fa6e","sha256":"5561155a875db20879cd57156204b9611cf55235c36740a27b551529b2581a26","sha512":"652b240b8cfb2db68ff209e7434d71cc7b85f01b1bf9c87435829153aeb790506b32128d4f6e22b07f6a23e13605be773a5813313fa673025f43377caee4c010","ssdeep":"","tlshash":"478004731003c0314f7cd14410513105431d5f47c5c3cd144cc04004113574404101d0","size":35,"data":"","first_seen":"2026-04-04T15:35:16.192782Z","last_seen":"2026-07-28T23:21:17.124734Z","times_seen":438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a550d7f5ae46e8d72f833684cc789c70","sha1":"078a4788793906d0d3d8db205ddaa0e99bc9d113","sha256":"5e5bf04812c52f311df70d9f8f10c232e7f630dda4498899a98a0bac86af2ef4","sha512":"1c7b77011e23a0ffb53f229a206af1f4399cab0adad325d6d9837f58b2b99bccb7c65e364dd1c456472a6d9599cf9fdf6e04acae5b8bd48474731ce4d1834d2d","ssdeep":"","tlshash":"e01125683caa3c28936996ea377fc3cc517924277461cc80d40ec8341a67d871483aad","size":1002,"data":"","first_seen":"2026-04-04T15:35:16.195645Z","last_seen":"2026-07-28T23:21:17.125618Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfd8ccfee74746cd26a124747302f8f","sha1":"f76d62cd48d7abd863f92469f79fe77421eb23c7","sha256":"2ee50a99b61b4e9f8f4d582c1266adc8bc8c9d5aef73d909a1c865f37168ec81","sha512":"7cb83dce1207cc8455d93c143916b7ff98ce9f1bfce2ba40b70bb9b4d7b82e466002f81a1b72b6e3a37dd6b75d9cb5dcf35d3be8febe4c7afb8763945b9c58d2","ssdeep":"","tlshash":"54f00e5c0c0fb97103365aac73be89c83656010c25414944ca66c13065a08db6896b4c","size":504,"data":"","first_seen":"2026-04-04T15:35:16.198644Z","last_seen":"2026-07-28T23:21:17.126496Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e7505fe892d48d65a9fcbc15e53081","sha1":"de9a2a1617665aa3375bf6fd1aaa58dbacd20dda","sha256":"728b0006af24f92a8909559fed79bc2e862735c676979ab3443ff81f40abdc97","sha512":"aacc10a7a0cae58db3387f0194836cc3e15306b748ee8492c279136efa5abe3e977bdd58d7763faa12f02aada33c39183a11a0884517dbfb2ae3ac71c6b45e52","ssdeep":"","tlshash":"19e068ab3885093912bab9be32b7660430131118b40c4618db55b370e574cc68b4580d","size":379,"data":"","first_seen":"2026-04-14T13:27:05.580507Z","last_seen":"2026-07-28T23:21:17.127395Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af1b021ea565dce430a083e4deee054","sha1":"ca4ba492f88b85bdd52289e7d8887e2ac95033c9","sha256":"e5206351c812a92de9690cf522fc9a3d92d3abca06d17139163c9a4d355ac7c2","sha512":"f8530995ccdead23bba129159210a3469f7809e2e11d7df22ea896aec0fd8b468d73e2b05209f703f8a335cba3bc5248930efb4689392d7fec84448b87761f3f","ssdeep":"","tlshash":"99e0f1e833828eb042a95a0933bff34db1e3201c88854810c97e687cbf38e93c324d80","size":431,"data":"","first_seen":"2026-06-27T13:27:28.236331Z","last_seen":"2026-07-28T23:21:17.128289Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85638f8d3810d84283b7dba3347d91cd","sha1":"4a02415c3197b7cbe21c28b99be9a6a47fc61635","sha256":"2574b3a8a297f793f5970dfe668d7ff553132bfd705cfcb0d0b094fec57aed2d","sha512":"4986c40f389e822808a3af14c5c0b2a1dddb5efe52cce3cc10901029a44d88b0403eae07bcbb1da0facc3ab7f97b82c6bb702b9a1067149914929d37912c826e","ssdeep":"768:w26aqt3p7xSfaKZvqsjqjxeZS+ZPBujhPD92klIBgAa0jBHuwijZKArfzi94wmDJ:kLjxeluvZT+dLJo6KJ","tlshash":"3113c55991a0082a4182435996e2bb44202d49a7cf85f8f97badd8192fdc45fd0fbffc","size":41615,"data":"","first_seen":"2026-06-07T14:48:19.899893Z","last_seen":"2026-07-28T17:32:45.521109Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-29T06:20:12.538991Z","times_seen":47100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"fnval.top/assets/20/neo.webp","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.272Z","timestamp":1785258349272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/20/neo.webp HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-1cca4\"\r\nexpires: Thu, 27 Aug 2026 13:45:30 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 12018\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7eDnXatpTjeyIjcjDdQAsLS%2B%2BZ8rjI7blyVwMmyXyani2M5RCQVzsgV7iw9uTI2aI8j6J%2FRMmeRQYapWf%2BcR2dfJApedNc045PvSSMuix37RSHGrDknsQld7ESY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788af974c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 117924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117924,"size_decoded":118801,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b0483c7d58bd85281b4a4daaeefe3c6","sha1":"0586b5735399d695ddf904ac2c4d299290fcb956","sha256":"f44d64afa1e76ea8753c861b8bc54a68e83015a4133a5ddb8fa5f82d16a8c8a7","sha512":"191db46c7773c69f917554d9fc7419b906816155c1af2f05ba0a9df2eae4390ec4ad56e79ce03b8fcb1f6739f20fe48252ae62f249de37c02583f709250d58ac","ssdeep":"3072:Qej/48egMthXXSPMOrfI2mvP645sdRqJErQGWMb:QeL48egMtlD8bmvP6yqUGWMb","tlshash":"a1b3130bfe5603a8ddabff7e9e1fc3056a9281161512c3ab6e590761702c77c16be348","first_seen":"2026-06-11T21:10:40.769856Z","last_seen":"2026-07-28T17:32:45.512466Z","times_seen":46,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/3.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.282Z","timestamp":1785258349282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/3.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfhkjoUyRiyOACmCr45fH%2FILRhKAkHKw8DLFxHCoT%2Fjo%2FdHwwZkFdcFPowonfrsN6QgB8BeGUeuqQrJKO183becN9oSKUV1ImCF4K26oBWqNqDenrw4q2ILJxcY%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788b097ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":843,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/1.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.502Z","timestamp":1785258349502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/1.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ye4L5%2BibX%2F9%2BD2uQOwjwMlUB3OOOt5KEdkXssGNiBe0ACeAMMPrc0%2FevZoD%2FgS3zqcqrgHjGmflBFqdKoKha9LfToM%2FLZTg%2FMiNLUgM89Fk8R3CR1VxJjIU2Ivg%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788c6997c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":851,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/Frame-55.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.744Z","timestamp":1785258349744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/Frame-55.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-bab93\"\r\nexpires: Thu, 27 Aug 2026 13:45:31 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 12018\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ETROIKBrSQE3TBL5UxX5UlXe73QyKMujLqO6%2BC6jJ7F%2F74GygOQgQEMlGIbqpoaW0XI872i%2BDATPOr%2Bti6w%2Bq%2B1prj%2FefD1%2BJA24JRjGskyflL7w4hFN3DTnhU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788de9d1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 764819\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764819,"size_decoded":765703,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"e4d30d79cb598d5226600b3170295249","sha1":"3961435d75997fd4461468c19a1ad23866e912d4","sha256":"ef246db9a5a64071d07222953a3f195f174281157ade8903c454dd0b5545eeb9","sha512":"df7f306314484d777d2ddf667e7565759fddbab5315f5669c9bc783409f635cf9d7638afc0c0e16cefcbe13c8f6750d62fc72bfad8342336eb795267b367e35d","ssdeep":"12288:pWNjzTdJRRuJF7GewWIiF7P8Ru53lJhe6pM+hcTaGhQzTM7DazhGzmeoSfV2UX:2jzT2JRwWPl3lJvxSai4w2kzm0pX","tlshash":"72f42324e5c8a164c9b416d139f83fd713eac60e6edc486a0a699955c003b313fa7f9f","first_seen":"2026-06-11T21:10:40.771209Z","last_seen":"2026-07-28T17:32:45.51451Z","times_seen":48,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.782Z","timestamp":1785258349782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnval.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532535\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T05:56:07.808388Z","times_seen":248752,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":21,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.485Z","timestamp":1785258349485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\nexpires: Tue, 28 Jul 2026 17:05:49 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 28 Jul 2026 16:12:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 86746\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231393,"size_decoded":87395,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4975)","md5":"e77ddb3400fc5d212bdbe0d7425aa962","sha1":"8ef5e41dcc96a4ea11aff264dbfc4b5242c3905a","sha256":"998c604e64ede1432abee7ca088f71a74dabcc28e6f830c7066dcdaa7e8eecb7","sha512":"073946c7b17e1da236ea3c80b46c91cad3a21d3e770c9ebfbba1f1776e8187b6a78a4d368d3f0fe62d96de5162c1d4d50f38e872ba4cd8a4d0cfb5cafea9e7d4","ssdeep":"3072:w1f/IatIv8L0KOgalgr5Y77csTdqW127AbAwfptlASQ6YAyucwiffkEFQoO8nQrx:m6kElgW77c/GPQ6YEc3ffkEFQoOZ","tlshash":"913419ccb79a706653a3b5b8903f014bb27a79a2f84cc894e142d9c43d7466a4273f7d","first_seen":"2026-07-28T16:34:27.889797Z","last_seen":"2026-07-28T21:15:20.515335Z","times_seen":69,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":32,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.778Z","timestamp":1785258349778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnval.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532535\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T05:56:07.808388Z","times_seen":248752,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/118753/Fortnite.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.784Z","timestamp":1785258349784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/118753/Fortnite.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnval.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/fortnite\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 22 Sep 2024 15:22:03 GMT\r\netag: \"426c-622b6d5962661\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12018\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Fv%2BdRa6Zxla61yVLsSvPi3urks%2BOnS2hzzE%2Fs5vdZjyljEQZ8kA0b7ZXN%2B3N8FHmfk96ngZAXHLgVmlgoJZJRaT1r2vM1%2Bp8AOc3j7dq2hV788I%2BYQ65RwTIprIwjwF329GIfo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a225788e39484c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17004,"size_decoded":17757,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 17004, version 0.0","md5":"7375b68b2b6206e83cd2dbeaea40dc67","sha1":"41efa554e7b949efd1c97aee555117c21a76c07e","sha256":"79b761d9595324fdbcd4b7177b8fa73df9b74558603db072e1e2ae0bfa86f887","sha512":"c172c4b5fe504e2ae2d697af5adb22ded533e1d4858ae5b9bdf70d1e2c09fe6f09b0a4a024a1a599f6621733a2e331dac923a99d9780cb9824792a96fd209512","ssdeep":"384:6IG5/+sEEKmTKiGaUYRqUF2tq4LxTL+kj2SOzWZ:vU/+shKAPRqUFb49Lj2SOm","tlshash":"9472c0d8bf74c914dc1caaf0196baf48cbf8b14b217341ce49144d198ddaa584f47b66","first_seen":"2025-11-18T04:00:01.705623Z","last_seen":"2026-07-28T23:21:17.106895Z","times_seen":259,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/2.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.279Z","timestamp":1785258349279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/2.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCMWcO%2BAu7ZoH%2BdzA2u18mor3QTfYEIJ%2BoTG5FaBJYTt0u8g3kJ2twK2Kj4UJ4zS%2FiiYzlIZXBmguVBl6l%2FQzaaZDq4UDMTMt8x9JCclzpUq%2BTW0%2F4hncksF%2F6s%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788b0979c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":853,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/5.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.808Z","timestamp":1785258349808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/5.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8awE9VSzaUPnml8tYwUjUFv8Chh%2F%2BsaVeltsVpwR7FwBCpjts351zAzpZhIWJa6bZSIVBWT%2BM%2FXJbU3nIrGLh1ueHO6HRuK7iCl%2FIh62zg20SwBVnzXqbY81V4%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e49dac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":843,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/4.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.813Z","timestamp":1785258349813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/4.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToLqKnFsGUC5bj%2BD6N8o75nrDflIpITRfz5ChXx8FR4DfZwfFU13unhl7B%2BWtXQvC%2BB2vQFuBK9tQiUG6YRc7WHnPGhOfGDcfRfOvpJxnY%2Bs7z0Z0sjZ2NroaEA%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e59ddc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":841,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/6.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.815Z","timestamp":1785258349815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/6.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqZWesp3wsntQ2EQqMhsOcyTHDCaruOB9WCEIWxg3LkzyoB%2B4xxjQ4sNn1hhBz2tSx7DJP5G9buBUJ8IoWHKcNoZVmj%2BrxspXf17tDfsaa4oGRvUpqmb0ZrhbmU%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e59dfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":837,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.352Z","timestamp":1785258349352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fnval.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 4111720\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmx17kuVigGuUY1ep97WpQFIb18Y3Tz9fhpTsiku3wIaIW4%2BtZN7SUrpP4egmxrzOgarvfmuuW%2F1hVpVrllH%2Bi%2BkMtPL8XdONgaMLRHAdtGxc6Ydz0svOraKYTGgVXXOk4C9QFk%3D\"}]}\r\ncf-ray: a225788b7e3cb4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127122,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-29T06:20:12.538991Z","times_seen":47100,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/Frame-18.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.746Z","timestamp":1785258349746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/Frame-18.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-638b0\"\r\nexpires: Thu, 27 Aug 2026 13:45:31 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 12018\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytpREKXH9Pps0412qOVDkeIMl5dD1vT5IN7yS7Sn474%2BQ3rhrcKbIbSfkRaTFjNPjtoR3KaMhstvhh9LvKi4SmWhmu%2BtW%2F7fQzGNdrQXLSt7jEsklE%2FLoiDfbiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788de9d2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 407728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407728,"size_decoded":408604,"mime_type":"image/png","magic":"PNG image data, 1280 x 350, 8-bit/color RGBA, non-interlaced","md5":"c9f004c80b8dde35a8b16b90197eaa78","sha1":"65e32dde135458448cac14e01cc1fab79042fac5","sha256":"4e80b918e5254ab06a9971a11bb12cedb6906ceede987d30547cfd6666dfcba0","sha512":"0f0e318c608e6b7792d2f6fa908ca58e7905c1f262c4090dd4b3b4c838ac6fa509dac47aa809436be7436b43ecb7314783423613cdefea90a6cab18336b978cd","ssdeep":"12288:CKopDp7+fH7a0W/M/uTv7JayC0VOurMDfOgPUMHuJ/cwjXIP:Jolp87UfjMUMCgjQ/Jq","tlshash":"418423d84e10076cd9a4076061e865e67fe23aa5efec5c273d326915bf1e9f1fe01818","first_seen":"2026-06-11T00:02:00.356249Z","last_seen":"2026-07-28T23:21:17.116001Z","times_seen":206,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.781Z","timestamp":1785258349781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnval.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532535\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T05:56:07.808388Z","times_seen":248752,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/7.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.816Z","timestamp":1785258349816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/7.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvyd36brUGyinriYBoWhFe9jkZSeJbLX0i8zZZwqUDH%2BQbJ9SixiSaQYwEhYV%2BX5855H39Br1GxVdSIs9HJwTLoLLq8apW%2BDzqhMxDm4uduJLj67KiljAVD9sQA%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e59e0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":839,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/Epic.svg","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.937Z","timestamp":1785258349937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 27 Aug 2026 13:45:31 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKOepohUqyIOhtKcApz7xoXyKV7lYxMu3bcU89K%2FbUu6tNy6QsGoJw4TUOQc8wDYUEX1pebXCO0HYrk83xv8aT1MgkUZkNUIkz9gPwZ%2BmA0UMfzn8GrqD6CyIgs%3D\"}]}\r\nage: 12018\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225788f19f4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3483,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-28T23:21:17.112192Z","times_seen":676,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/fortnite","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.262Z","timestamp":1785258349262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /css/fortnite HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 816688\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 19 Jul 2026 06:14:20 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zF8zRuHIQxYeh3%2FxPonmKvJZA4qXqXwvEnQhgjb%2FPUCczCHQAxzbVp1qAfuKaBEljCVe7cJtmczJoF9Fl3GiZ%2B6nEb0dEFceGziWxu6RRfGIbHj6qqxMjlRupsexPX9sFkv%2Bluw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788b0a5356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":861,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"d98ef3e15f4b7b5f30b7cffbd05d41aa","sha1":"5349badba63402895e15f338e792ce2643ba665a","sha256":"ca798a5738886afa0c00902e038cac9bb20cd7a1a88d71f858f7726102c3a80a","sha512":"d55e27726627405a3b7bbc2393e6a122edd051597d4fd88ac02960cf309f140e939cec464b511977fd58168c27352934d342c99231528e627fda14349fe23dee","ssdeep":"","tlshash":"41c012550597b40669200c8e375f75140d4e9037a14dc9753fbd2d489eaf42912d671d","first_seen":"2026-02-09T11:26:57.701974Z","last_seen":"2026-07-28T23:21:17.119387Z","times_seen":469,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":20,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/22/raven3.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.273Z","timestamp":1785258349273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/22/raven3.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 30 Apr 2026 15:33:44 GMT\r\netag: \"69f37658-1aaece\"\r\nexpires: Thu, 27 Aug 2026 13:45:30 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 12018\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBk520FOmUl5oK6st17knaBD%2FSRMwBgCJco6WVNrR9Ngt0MrWuC0tICcW%2BTmnLXZ2t0APAvfG01LgOqGuJ9OqudNt%2BnawEJtquEBD5F5M0c1cgBlG1Yq9SvDDN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788af975c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1748686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1748686,"size_decoded":1749562,"mime_type":"image/png","magic":"PNG image data, 1350 x 1500, 8-bit/color RGBA, non-interlaced","md5":"719d6968c3271a0f5c22c8dc23f7fc8c","sha1":"b0cb6b10632e43e0e100bc899a8f7bbf4db2e55f","sha256":"98df98cdc74231e44724023142971c324934b54c93db51493696ea46ba0d041b","sha512":"68494bffebaee87409ce1145473622d93e2974632af2ebf9fc4eba434efa917c0f67d84fb12b4d8a79a8305f148893a5482d020b41326267505411f934ebae40","ssdeep":"24576:Nx/R16TEr7l5Xsb0WH+9L5hyFcwJIMUUjdHJH/:D/R16gvl5qtep5078Ujdpf","tlshash":"d02533e2ce73ea067c86e2a79fc4dab00e83052218c77ee86cf594e645c3df85949954","first_seen":"2026-06-11T21:10:40.775235Z","last_seen":"2026-07-28T17:32:45.506798Z","times_seen":50,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/1.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.276Z","timestamp":1785258349276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/1.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xEcugYp09zso8pAVeA9sCBhh8sxYPJKMFkAz4ROg8YO3S%2B1xWvz%2F7RowlMWIf4eTNWET7FdV0vvnDCnie%2BCqHiIxR6k2hsyuiArzZICPrElA3nU%2FYT5PJcvUoQ%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788af978c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":845,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/9.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.809Z","timestamp":1785258349809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/9.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QArN3CyrJJ%2BCTzj9UXBIJ2%2F2%2F784iQZE5ioy%2BVQ2ycjbVTErn67fzdKOiMpxh3NNJj7VD%2BFJVzCS0mvo%2BVyK4N2z8FNL2e7upXj7oZIgQSYRFRccFKajz1LDsg%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e49dbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":845,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/10.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.811Z","timestamp":1785258349811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/10.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fxo070OIxibPbpktAxmf5gkvY2F7ihP7THLwSzFy0oumGTDiodYBL7LXl5hLL4NyqEgdZd3uMKefKCFes6oP8M242rEhKnh%2F1HL8%2BG5h6f8jRr1IpqMFppwdO8I%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e59dcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":837,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/kuo1u8kuo1u8kuo1.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.275Z","timestamp":1785258349275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/kuo1u8kuo1u8kuo1.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-160ddb\"\r\nexpires: Thu, 27 Aug 2026 13:45:30 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 12018\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x42Z8VMnW%2BAGvXuRBf1Vtb6lRR3rbO437G9pSTFFPIUHJXuEmh1tX3W%2BY8ZLJmrAgybEPucodnq0ai4H9FkQ5Kajf9lENJTF4YECoyEIp9Xe2q%2B3QUfFo%2FapfxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788af977c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1445339\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445339,"size_decoded":1446217,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"7867942949d9886c3cb0c0678043f36c","sha1":"3243d9aae8ac7c2f47bb7d67de1bbecb242703f9","sha256":"b9f5d471d9f68f2c986b6f7e7f5583973ea60b206b9bc9e55e6838cec5af8cee","sha512":"105e53983a26b048a29515de33cd6162dbffaef4dbb84d8372fbcd505d2932e822fa3f732705ce42556987168ce705365fdd1f4bbe1e04222da9953d0969f4e7","ssdeep":"24576:RejtTgtczl9AzlicDenv1NZ14ZNfBGUEe2u4:RQtTgtcQJBDelOZNpGUC","tlshash":"012533c7dd93024dae1a716b0c1517ab09c26259bdb378a9f02a7a81f2cfb717863744","first_seen":"2026-06-11T21:10:40.766281Z","last_seen":"2026-07-28T17:32:45.511048Z","times_seen":49,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/Epic.svg","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.935Z","timestamp":1785258349935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 27 Aug 2026 13:45:31 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzVVK2fSXjj2spjcrXOe%2BgbbVLrrIJ6pZ3UBi2Yu9ugVB8MrZzQ16ujckyowka28nfzcsCB95YF%2FHm1myd77KBQ7C44M4hKXzSLNURUgZM35gzgZNqkhCtLjV3Q%3D\"}]}\r\nage: 12018\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225788f19f3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3483,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-28T23:21:17.112192Z","times_seen":676,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T17:05:48.775Z","timestamp":1785258348775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:48 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Mon, 27 Jul 2026 14:30:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dr92CbRMyCyRMId30FQzohzlXlg2%2Bk07P3cw0sNRZUKKXGzzA8dBq2xCISRtLR8l11evl4Te4d49%2FcKoIIsR6%2FpKi2Vy5VT12XX7IwpBkq%2BFBeF2leZvb82OSPE%3D\"}]}\r\nset-cookie: pixel=; Path=/; Max-Age=31536000; SameSite=Lax\ntt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax\nclarity=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_id=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_label=; Path=/; Max-Age=31536000; SameSite=Lax\ncf_s=0x4AAAAAACwTjiNLeZu-W0Kz; Path=/; Max-Age=31536000; SameSite=Lax\n_user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4; Path=/; Max-Age=31536000; SameSite=Lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2257887f924c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":90267,"size_decoded":27663,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2445)","md5":"83aa8b6b194009c56384d8e7a4306e99","sha1":"c89a43bc3d7e56fa364627b95a138140676c0aeb","sha256":"dd15aeedbf9160c0bd07c29bfa647c12a04cbba8aea953259011aed108d98688","sha512":"6a2930f0ef498f107db1a58397e513720faefadb921809733f5c2da0b1604db5085fdb188295c5c199638549aa008e06658d20949e1e69bdbd778a9322d94479","ssdeep":"768:J8WifkzybGKtsuvKHuLyw+9oyviL4nqZETfL6kJ6AkqsKjq4cq1rqx+hU26aqt3m:Jli4QGKqm+g5LjxeluvZT+dLJo6KA","tlshash":"df93e85451f204b5004743b8a6e2bb09252d8a57de5bf8ecb3ac95252f8dc4fc0f7aac","first_seen":"2026-07-03T10:25:43.670309Z","last_seen":"2026-07-28T17:32:45.510579Z","times_seen":42,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":100,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.259Z","timestamp":1785258349259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Jul 2026 17:05:49 GMT\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e6b2beb5d2bb6df88bf2fb90aef55ea","sha1":"57299d704f0414dd1794fa2d00f662a6d68b721d","sha256":"7f5c718efb8ff6993c546f94f732e813c8379e615e79f553bc5ef9026856d244","sha512":"f86b2519ba151eb35b585be5d94cdd2bb27f84dc349ae08f00b7e4fc429e7c30b9b8a0dcfcbde73cc4d66993da77e73067229d4e9f460847d77877607f143d98","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGYNCbOO3Lxxgx:vXuM1+RQK","tlshash":"65227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-17T10:11:41.831391Z","last_seen":"2026-07-29T05:13:48.310075Z","times_seen":641,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":37,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/2.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.504Z","timestamp":1785258349504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/2.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LKzErK0JftnAdN2UG%2F41mRyUOZJ9yU2AlTGj%2Foz3qoJniA7%2B%2Fp4UZ2XMH6PSEOTqf2AZX8STHBCMJ19b2lqI8AyOM1cc%2FKs5ys%2BFXmRZOhdVvhdz3dzy9wMLZU%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788c6998c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":849,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/3.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.505Z","timestamp":1785258349505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/3.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjNFwz7p6GxJq078OjdBJtvaQ1LqiyBRsb774tkLzer5u4L6UIODS0i36yHWd%2F0fXjLtLD3tDCMTLMXm%2FYdjkTrfT6evoxUo7LmEfdtjHt4ri3I%2BUPpb3j5hrmc%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788c6999c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":843,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/assets/avatars/8.png","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.814Z","timestamp":1785258349814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"GET /assets/avatars/8.png HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EScN7f3njZe16RKNZsSUGp6MOwAm2FWyzQirwevDiDD4Zt9pfmPAUGib2TvUkhcBwu%2F4ee08OVys9ajLXL3R1CDCv4JKZCg3ApnuXG0QCTVRaEJJVeWeBthycyI%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a225788e59dec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":835,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-07-29T05:27:04.716495Z","times_seen":38200,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.263Z","timestamp":1785258349263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnval.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::xs5xj-1785258059624-fe12be0e5734\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eK3%2Fvj0l1GwADc3bdufAzVOuwkyO4sXVeU91Gm4P%2Br7sUmwS8CTGglRDr2%2FqJBQDmQgZJq9yDZXOS5jbNqrNPuWY42%2BzYvluALNSN35cGwIyRYmswypc6Nvlv76VeAbyc0hEGRw%3D\"}]}\r\ncf-ray: a225788b0ddcb4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T06:56:24.505941Z","times_seen":17593773,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnval.top/visit","fqdn":"fnval.top","domain":"fnval.top","tld":"top"},"ip":{"addr":"104.21.65.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fnval.top/","date":"2026-07-28T17:05:49.481Z","timestamp":1785258349481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnval.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 13:30:36 GMT","end":"Tue, 20 Oct 2026 13:30:35 GMT"},"fingerprint":{"sha1":"B7:78:F5:E6:46:7B:D0:D3:35:00:05:49:41:F3:B2:43:8D:27:57:84","sha256":"39:2E:FE:BA:51:A9:F7:DB:2E:F4:09:13:37:89:22:5D:3F:67:83:CA:CB:D6:B1:AC:CF:3F:D6:C6:D9:92:3B:61"}}},"request":{"raw":"POST /visit HTTP/1.1\r\nHost: fnval.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fnval.top/\r\nOrigin: https://fnval.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAACwTjiNLeZu-W0Kz; _user_c=1785258348:195.64.118.152:GWpArbQjy7WywYS8pEYQIWfc2jK0edSlkv1t0sO-7a4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:05:49 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://fnval.top\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjQp59TnKhGpmtsV6IT%2FZ0MF%2FAu40kMXc%2Finf0vVcAe1KhutUFO%2FXCYIFsri9xsyAtpqwiRIcGxTP4wHtt4xnVfltgGEkCBGU8UFI8SPS6nMxxu25BfJFvu0eB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225788c4995c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":677,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"72054d9a6fbdcc7df012e19f32345b65","sha1":"52dd4c74c813db3790179c4f236ceadaca3467a8","sha256":"c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334","sha512":"5305bacdfd7c9bb525ff6c40d3ffa23c3f82eb5268ce3037dc353fa1a043ae31b239eed46db0fb043d61c55d57b97c5f00c308f92456c51c44069f23fda40317","ssdeep":"","tlshash":"5f30000000000000000000003c00000000000000000000000000000000000000000000","first_seen":"2023-03-12T08:54:09Z","last_seen":"2026-07-28T23:21:17.115164Z","times_seen":3582,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fnval.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"fnval.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}