{"report_id":"798482dc-574d-49f4-87f7-2dba917cb7c3","version":0,"status":"done","tags":[],"date":"2026-08-26T19:08:38Z","url":{"schema":"http","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"title":"Fortnite","dom":{"size":228638,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52263)","md5":"e8156ba2ff03174e7bb2b2118edb928d","sha1":"a5d64d6d2c42417b6d9a2572670f04b7770ec3c1","sha256":"68c79429daf550609a94b8033947ca4a306132f673116df475d9be95f9b599e3","sha512":"f78c82dcecf50b00defe1b7b52ddd257c404323e85afe79b8c0d5e18f70fb0f322e593fb07a1944954992bd06d3f09cf189f25b0d035329d57019cdb0512afd9","ssdeep":"6144:/thX0NGhMBbDC+1xuMD9NdGjyihajvu2CbLJllgZlcdG1I:/INGIDCquMrLsCCbL8lcdG1I","tlshash":"972412813d03097b0d2244e6f7b6d1483a19d0d3c424d5adbadea2226fcb9a2ded3795","dom_hash":"domhash301a9440b116301e09c0fd8ecd40771e","first_seen":"2026-08-26T19:08:42.244519Z","last_seen":"2026-08-26T19:08:42.244519Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T19:08:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"fortcent.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fortcent.top","ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-28","domain_rank":0,"first_seen":"2026-08-26T19:08:39.434648Z","last_seen":"2026-08-26T19:08:39.434648Z","alert_count":4,"request_count":4,"received_data":226919,"sent_data":2414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":235917,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-24T09:02:09.710604Z","alert_count":0,"request_count":2,"received_data":408697,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-26T21:52:40.188547Z","times_seen":50908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a550d7f5ae46e8d72f833684cc789c70","sha1":"078a4788793906d0d3d8db205ddaa0e99bc9d113","sha256":"5e5bf04812c52f311df70d9f8f10c232e7f630dda4498899a98a0bac86af2ef4","sha512":"1c7b77011e23a0ffb53f229a206af1f4399cab0adad325d6d9837f58b2b99bccb7c65e364dd1c456472a6d9599cf9fdf6e04acae5b8bd48474731ce4d1834d2d","ssdeep":"","tlshash":"e01125683caa3c28936996ea377fc3cc517924277461cc80d40ec8341a67d871483aad","size":1002,"data":"","first_seen":"2026-04-04T15:35:16.195645Z","last_seen":"2026-08-26T19:21:07.968632Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfd8ccfee74746cd26a124747302f8f","sha1":"f76d62cd48d7abd863f92469f79fe77421eb23c7","sha256":"2ee50a99b61b4e9f8f4d582c1266adc8bc8c9d5aef73d909a1c865f37168ec81","sha512":"7cb83dce1207cc8455d93c143916b7ff98ce9f1bfce2ba40b70bb9b4d7b82e466002f81a1b72b6e3a37dd6b75d9cb5dcf35d3be8febe4c7afb8763945b9c58d2","ssdeep":"","tlshash":"54f00e5c0c0fb97103365aac73be89c83656010c25414944ca66c13065a08db6896b4c","size":504,"data":"","first_seen":"2026-04-04T15:35:16.198644Z","last_seen":"2026-08-26T19:21:07.969577Z","times_seen":728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e7505fe892d48d65a9fcbc15e53081","sha1":"de9a2a1617665aa3375bf6fd1aaa58dbacd20dda","sha256":"728b0006af24f92a8909559fed79bc2e862735c676979ab3443ff81f40abdc97","sha512":"aacc10a7a0cae58db3387f0194836cc3e15306b748ee8492c279136efa5abe3e977bdd58d7763faa12f02aada33c39183a11a0884517dbfb2ae3ac71c6b45e52","ssdeep":"","tlshash":"19e068ab3885093912bab9be32b7660430131118b40c4618db55b370e574cc68b4580d","size":379,"data":"","first_seen":"2026-04-14T13:27:05.580507Z","last_seen":"2026-08-26T19:21:07.97052Z","times_seen":759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af1b021ea565dce430a083e4deee054","sha1":"ca4ba492f88b85bdd52289e7d8887e2ac95033c9","sha256":"e5206351c812a92de9690cf522fc9a3d92d3abca06d17139163c9a4d355ac7c2","sha512":"f8530995ccdead23bba129159210a3469f7809e2e11d7df22ea896aec0fd8b468d73e2b05209f703f8a335cba3bc5248930efb4689392d7fec84448b87761f3f","ssdeep":"","tlshash":"99e0f1e833828eb042a95a0933bff34db1e3201c88854810c97e687cbf38e93c324d80","size":431,"data":"","first_seen":"2026-06-27T13:27:28.236331Z","last_seen":"2026-08-26T19:21:07.971381Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75cf63a09efd91b3ba8c35fc09d64189","sha1":"fd8d2a46bf47d05dd885e7026c7112e9a18ca11f","sha256":"b4040dad7c6446ffd8e35bf6d2ecb1a549c662d6e1253456b32fa2ba240d6337","sha512":"71e0dddf96e63e434f36d0cf11fd7409fd9e8551f8ffa382374846ba93f6215be0878ea013100a4b169a1ae3bae3cd00dd882c4920126dee7c37dfe9d9473136","ssdeep":"192:8ColasI9dG1a3OogBizNbQQfDxlSU+56FeSjACs52d6t9pB:89lasI9dG1aMiZvfu9ajA","tlshash":"c112c7172d6704374aa280a93f976b01362b90eb5651d4947afc8212dfcd849fde33ec","size":9590,"data":"","first_seen":"2026-08-05T20:43:25.8444Z","last_seen":"2026-08-26T19:08:42.270313Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88d131b67c1b610ba0d32c64a803eebc","sha1":"a8e6a799c60a9fbefb2716cf9dcdbecd7ae6fd34","sha256":"a2af94d22944c0535d7e3bb2c47d9e8f565eec7b2f695c33c82d90be1896cd8a","sha512":"26b6704b3e6874b9c5fb549bf36423306e1d93359e6351917337351d8284e96368bbbaf1b755b9a155d67e2b7d728983b94706534837691437a03711205b8bdd","ssdeep":"6144:Mb/lKJiUljbCPl2x+2N/Mcdc0HKBEaQq/kUp:B9lEzp","tlshash":"353418cdb39a706283e3b4b8503f014bb27a7da2b848d8d4e182d9c46e746594277f7d","size":235268,"data":"","first_seen":"2026-08-26T18:10:46.626308Z","last_seen":"2026-08-26T19:10:02.433153Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"fortcent.top/","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T19:08:09.759Z","timestamp":1787771289759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortcent.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 08:37:09 GMT","end":"Thu, 15 Oct 2026 09:35:41 GMT"},"fingerprint":{"sha1":"87:C3:EE:2A:2B:C7:E4:49:45:BE:DB:53:9D:5C:68:4A:59:79:7F:C2","sha256":"0A:38:D5:71:09:65:26:D5:DE:AA:BD:AC:73:45:E1:0D:DB:12:6D:6C:DE:87:1B:34:E1:2E:42:D7:D5:47:CD:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortcent.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 19:08:09 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Sun, 23 Aug 2026 17:45:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86iUrNySLPuflJchKp8FH6fBhRH3wytSLGQbAr0iPBEFMo6g1XCie2Jcq5P7ELetaZGwZELSwKZRVrwr39ENS2CCEUpn0Fy4XAJsLDfjwG16UQTDKSJ0fXo03VDg8Ec%3D\"}]}\r\nset-cookie: pixel=; Path=/; Max-Age=31536000; SameSite=Lax\ntt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax\nclarity=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_id=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_label=; Path=/; Max-Age=31536000; SameSite=Lax\ncf_s=0x4AAAAAAD3ybdfb0lB2deXJ; Path=/; Max-Age=31536000; SameSite=Lax\n_user_c=1787771289:195.64.118.152:u_EszK_rPxFtt_QYQPOhTGvz_DBnNAkBToziO8ZNeMY; Path=/; Max-Age=31536000; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3151fa1be3c5b4a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"pixel","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"pixel=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"tt_pixel","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"tt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"clarity","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"clarity=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"_g_id","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_g_id=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"_g_label","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_g_label=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"cf_s","value":"0x4AAAAAAD3ybdfb0lB2deXJ","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"cf_s=0x4AAAAAAD3ybdfb0lB2deXJ; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"_user_c","value":"1787771289:195.64.118.152:u_EszK_rPxFtt_QYQPOhTGvz_DBnNAkBToziO8ZNeMY","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_user_c=1787771289:195.64.118.152:u_EszK_rPxFtt_QYQPOhTGvz_DBnNAkBToziO8ZNeMY; Path=/; Max-Age=31536000; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":15819,"size_decoded":7004,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2391)","md5":"e66cfdd966b674e80b457ae18fc16dc1","sha1":"1234fe82fcd21c104a98275fe90ee8e62bc166c3","sha256":"244c2f441a071a52656c643af1a0233c540dc5a671c663541001b09ad0f7f3fe","sha512":"22937f92ac6bdbc1445396342da1bf4ad448b5b8a2329605b2dba0c41dbebb2b3cba34957c0e6c41f4ad5aa027d39c693190dab2c5b6385f91dca86c003f8528","ssdeep":"384:PEGURRzyL3GZ7LHTx9lasI9dG1aMiZvfu9aj+M:PE7zybGlHTx9lasI9dG1aMiNmc","tlshash":"4362f9222da7043b06a341657ba7bb09363a91dbd215c854b6ecc1215fcdc86ede33ec","first_seen":"2026-08-15T14:50:17.58432Z","last_seen":"2026-08-26T19:08:42.249199Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":61,"connect":42,"send":0,"wait":89,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"fortcent.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortcent.top/","date":"2026-08-26T19:08:10.493Z","timestamp":1787771290493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortcent.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 26 Aug 2026 19:08:10 GMT\r\nexpires: Wed, 26 Aug 2026 19:08:10 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 26 Aug 2026 18:19:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 88668\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235268,"size_decoded":89317,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5024)","md5":"88d131b67c1b610ba0d32c64a803eebc","sha1":"a8e6a799c60a9fbefb2716cf9dcdbecd7ae6fd34","sha256":"a2af94d22944c0535d7e3bb2c47d9e8f565eec7b2f695c33c82d90be1896cd8a","sha512":"26b6704b3e6874b9c5fb549bf36423306e1d93359e6351917337351d8284e96368bbbaf1b755b9a155d67e2b7d728983b94706534837691437a03711205b8bdd","ssdeep":"6144:Mb/lKJiUljbCPl2x+2N/Mcdc0HKBEaQq/kUp:B9lEzp","tlshash":"353418cdb39a706283e3b4b8503f014bb27a7da2b848d8d4e182d9c46e746594277f7d","first_seen":"2026-08-26T18:10:46.626308Z","last_seen":"2026-08-26T19:10:02.433153Z","times_seen":8,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":16,"connect":27,"send":0,"wait":41,"receive":66,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/captcha","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortcent.top/","date":"2026-08-26T19:08:10.649Z","timestamp":1787771290649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortcent.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 08:37:09 GMT","end":"Thu, 15 Oct 2026 09:35:41 GMT"},"fingerprint":{"sha1":"87:C3:EE:2A:2B:C7:E4:49:45:BE:DB:53:9D:5C:68:4A:59:79:7F:C2","sha256":"0A:38:D5:71:09:65:26:D5:DE:AA:BD:AC:73:45:E1:0D:DB:12:6D:6C:DE:87:1B:34:E1:2E:42:D7:D5:47:CD:CB"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: fortcent.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortcent.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAD3ybdfb0lB2deXJ; _user_c=1787771289:195.64.118.152:u_EszK_rPxFtt_QYQPOhTGvz_DBnNAkBToziO8ZNeMY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 19:08:10 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtTp8xEIik08QaZKGdRfIUerkmL6cHc1Ux5pRtj6h05FHHG3O9xiufLP%2FKqQb0qhvbkFriVY6M2MOwdo4%2FMYW6AiaRALRJAiuKORQsRDhY7gGWfFIB%2FPAercFlGmGc0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3151fa6ae535b4a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203682,"size_decoded":153731,"mime_type":"application/json","magic":"JSON text data","md5":"5643d3c99fbd2735d139e99b504d33ee","sha1":"4255cdcb05ef0a80730e0a854cf71b581b327057","sha256":"bdaad8b65a313cdddfa10b9aa50707d62c43b40d98b3a439ea9a54cbafb5139e","sha512":"cc30e52f44a19e94bf0d6dc0100e23f64f988756a403717c609e4d4a6d2f7e3348be9c348487395cfd8a61d90f13e5938e5d4f631cf6197256957a73ada85975","ssdeep":"6144:0NGhMBbDC+1xuMD9NdGjyihajvu2CbLJlTgj:0NGIDCquMrLsCCbLq","tlshash":"421422c02d471fd702200a66733ac0883e58d926047572af9beb77e7099b756db25ea3","first_seen":"2026-08-26T19:08:42.252725Z","last_seen":"2026-08-26T19:08:42.252725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"fortcent.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/assets/Epic.ico","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortcent.top/","date":"2026-08-26T19:08:10.795Z","timestamp":1787771290795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortcent.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 08:37:09 GMT","end":"Thu, 15 Oct 2026 09:35:41 GMT"},"fingerprint":{"sha1":"87:C3:EE:2A:2B:C7:E4:49:45:BE:DB:53:9D:5C:68:4A:59:79:7F:C2","sha256":"0A:38:D5:71:09:65:26:D5:DE:AA:BD:AC:73:45:E1:0D:DB:12:6D:6C:DE:87:1B:34:E1:2E:42:D7:D5:47:CD:CB"}}},"request":{"raw":"GET /assets/Epic.ico HTTP/1.1\r\nHost: fortcent.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortcent.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAD3ybdfb0lB2deXJ; _user_c=1787771289:195.64.118.152:u_EszK_rPxFtt_QYQPOhTGvz_DBnNAkBToziO8ZNeMY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 19:08:10 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a6faf03-7be\"\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 02 Aug 2026 20:56:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 25 Sep 2026 19:08:10 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5BMqC1Oq2uXD3zZvkrjtDzCR446nqKNAZBH89r5a6cSsWZoCp89efW87wMNsCqylkuWhaZCtj5Ye4D4oOh%2B%2By2ssJQEbenXntrikgAyLlGY9%2BAGIE0qNCyhgjqOUEE%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3151fa78e555b4a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1982,"size_decoded":1275,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 28x28, 8 bits/pixel","md5":"c31810b56001624b0bd9a4e82d1ce643","sha1":"a1715fd9cae2fdc4d8428f57cc3e4b202c6f7fa1","sha256":"711b22166ad8ee14b81383da16e0971b2fdae9b99c70d29c3958046476fb660a","sha512":"5382bcc21c4f9294ac2904de63f7245f7bc64686eec30e0bd2e7640e9fc57a88beeeb288c2d4f26acb0b725ae6464146702147bcf810a7866067c8a264cdab74","ssdeep":"","tlshash":"884106caea46ce63f8407139d0907631b531c27b0025f66b7b8528c44e8e9670b31ec1","first_seen":"2026-08-05T20:43:25.833255Z","last_seen":"2026-08-26T19:08:42.256086Z","times_seen":8,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"fortcent.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortcent.top/","date":"2026-08-26T19:08:10.323Z","timestamp":1787771290323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortcent.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 26 Aug 2026 19:08:10 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::shq6w-1787770651704-fe283100f2a6\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 638\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAegRpl3Vb7yDNeMweP5SdljLF5RFMdfsZzeEnGK5cFf%2BMA%2FluacmLvzrMI2YWhrC%2FLr2G45UTyCsI8vdrSEaNenE6WKZlOHTZqiJjCem79iuGZFmIV1q3mDfFi5IujGawlTdXI%3D\"}]}\r\ncf-ray: a3151fa4b92ac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T22:40:41.652624Z","times_seen":18121065,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortcent.top/","date":"2026-08-26T19:08:10.367Z","timestamp":1787771290367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortcent.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 19:08:10 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2611549\r\nlast-modified: Wed, 26 Aug 2026 11:24:44 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsPeKTAGZRJtJHzbLpJDd6PTM63l1zpBl2zcKHnG3b5GhJ4MsSu7PsfZj4ZruLk%2BieyrsR8cxw1Jd3Ivzz0xzptQdJHddCbEYkbjQqKZTV7IklEri6SJ7rDMplyRJ3AZcs8JP6Y%3D\"}]}\r\ncf-ray: a3151fa4d99cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127116,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-26T21:52:40.188547Z","times_seen":50908,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortcent.top/assets/Epic.ico","fqdn":"fortcent.top","domain":"fortcent.top","tld":"top"},"ip":{"addr":"104.21.44.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortcent.top/","date":"2026-08-26T19:08:10.793Z","timestamp":1787771290793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortcent.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 08:37:09 GMT","end":"Thu, 15 Oct 2026 09:35:41 GMT"},"fingerprint":{"sha1":"87:C3:EE:2A:2B:C7:E4:49:45:BE:DB:53:9D:5C:68:4A:59:79:7F:C2","sha256":"0A:38:D5:71:09:65:26:D5:DE:AA:BD:AC:73:45:E1:0D:DB:12:6D:6C:DE:87:1B:34:E1:2E:42:D7:D5:47:CD:CB"}}},"request":{"raw":"GET /assets/Epic.ico HTTP/1.1\r\nHost: fortcent.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortcent.top/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAD3ybdfb0lB2deXJ; _user_c=1787771289:195.64.118.152:u_EszK_rPxFtt_QYQPOhTGvz_DBnNAkBToziO8ZNeMY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 19:08:10 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a6faf03-7be\"\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 02 Aug 2026 20:56:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 25 Sep 2026 19:08:10 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jp4eriU%2Bz9Aookz6MOOyJQCQO%2BvTFlfGxTnnJY5xZ%2ByibPhFMorVRw7wC8zrJszV95k%2F0oZiGD92sYWfBvjxYcwGZwcTosrVCvSV699npLjY0TGUYBZk8b4FRMb3LMY%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3151fa78e545b4a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1982,"size_decoded":1282,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 28x28, 8 bits/pixel","md5":"c31810b56001624b0bd9a4e82d1ce643","sha1":"a1715fd9cae2fdc4d8428f57cc3e4b202c6f7fa1","sha256":"711b22166ad8ee14b81383da16e0971b2fdae9b99c70d29c3958046476fb660a","sha512":"5382bcc21c4f9294ac2904de63f7245f7bc64686eec30e0bd2e7640e9fc57a88beeeb288c2d4f26acb0b725ae6464146702147bcf810a7866067c8a264cdab74","ssdeep":"","tlshash":"884106caea46ce63f8407139d0907631b531c27b0025f66b7b8528c44e8e9670b31ec1","first_seen":"2026-08-05T20:43:25.833255Z","last_seen":"2026-08-26T19:08:42.256086Z","times_seen":8,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"fortcent.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
