{"report_id":"7a2aa663-b0cd-4978-a378-a76a476de807","version":6,"status":"done","tags":[],"date":"2025-12-18T16:10:41Z","url":{"schema":"https","addr":"www-firstharlzon.top/","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www-firstharlzon.top/","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"title":"Log In","dom":{"size":26082,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (906)","md5":"9a9df1041a36afa16ef1a920a0d94228","sha1":"d443d7bcc44a2e2434b3f3f02fb8c9003c915f8d","sha256":"598acd7402b3095d5698732ce6f3bf0ac85f1951bd6b8228b97f2cc41b87cc1d","sha512":"9b0b5c3e81113a7552644edba072f64b35175249051134a603bde4377348539c1d3cea0fcb120db00945ebf3c8f1651e5ad13187a8cff450d77f36adad8e4dde","ssdeep":"192:mFe46C2tTw6fUeUNJB8iMm2xdXeF+C6+NQDYUMMwvkYYa1Ein69j9W0b0+PEXNOR:Y2DeDdjJcsd4LL6Jlg62a2Az7tYkel","tlshash":"05c2922723f31006794b91a8afb6275a6725d153d20ecd983aec574ccfca9d09c93b9c","dom_hash":"domhash60eec7530d2ce19aa11d0b61237ed743","first_seen":"2025-12-14T16:23:34.636268Z","last_seen":"2025-12-18T16:10:45.544396Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www-firstharlzon.top/","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-22T16:10:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":1,"received_data":18805,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www-firstharlzon.top","ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2025-12-18T16:10:41.285867Z","last_seen":"2025-12-18T16:10:41.285867Z","alert_count":8,"request_count":8,"received_data":693008,"sent_data":4112,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":4,"received_data":174893,"sent_data":2458,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www-firstharlzon.top/","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb5e523c9249706d00dd49d72b081040","sha1":"fd6812d08ee03bb33d3539b1a8e1e880df18259e","sha256":"9d49eedb07899e832892a998ab2e18d7792601fe6a2f5c075d8bc3938be0fb9f","sha512":"fbf7342956b411abc0bd4a7af78f9557f3288b7af380fc32c0dbe2df511d964bad680f6a17ab98ee19a541bf52bc7780984327ebcbb4b4cd88ef9267a5e45dde","ssdeep":"","tlshash":"77e0922932a804355abf5667b0ed11c8b622984bf58b8947a1f9c70d2b529934270ae6","size":376,"data":"","first_seen":"2025-12-14T16:23:34.658717Z","last_seen":"2025-12-18T16:10:45.558418Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"DF:9F:85:F6:4A:53:64:E2:D3:A4:9C:9B:0A:4D:88:F2:DD:8C:92:6C","sha256":"99:65:94:2E:11:0B:3A:F6:B6:E7:38:F9:58:D0:01:2A:B6:CA:D4:2D:38:BB:87:ED:72:23:CA:63:32:85:95:35"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Dec 2025 16:10:19 GMT\r\ndate: Thu, 18 Dec 2025 16:10:19 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Thu, 18 Dec 2025 15:14:41 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18042,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e4020d8a688b570ac502982085e9a77","sha1":"ed35f4a1150de851fac53b622aebb5955dca900b","sha256":"5e6cc8b928d64004caaab08fe27953386d0058c7062b0515fb2566d0d3c51c63","sha512":"7af77729d17e6ada2de05cfb9827f64e1f09a0389aa274ecfe4322e33891d96c3ca4f012eba1b25368e18f100653d2f382106f9dcd97f2aab5a98b7c3ddb57dc","ssdeep":"192:aCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIwV4pWzGSC77u2mIrqUnbqGIwq:Jt5qY4yf/qY45uOqY4P","tlshash":"80820a9000171850ab435de633ce7e34ee0f92666044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T12:52:38.383192Z","last_seen":"2026-08-18T03:05:24.404034Z","times_seen":6579,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":87,"dns":1,"connect":8,"send":0,"wait":23,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/assets/images/logo.svg","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 05 Nov 2025 10:45:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690b2ad8-11aa\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0718f039cefb1215f4e203286ea2f65","sha1":"b335a095203977d71ad08fb95c4b2581e6bd179d","sha256":"87ddb4705203aca07c3d7ab7d529354bf9c2b3c12fc613853c32f64f7579ef8a","sha512":"6a6cd6e58f06ea8015a4ffebcfaca7a55db4d027a33d573d382d06fd3c92e6a99309b6afef78a921a9b3b25c39c1d96aedf248ce45290653144fd82347d6071c","ssdeep":"96:E/txCimPnZqmL+SxCD492SzuTSzu1PhlS5:EuZHLnc49pzuWzublA","tlshash":"b99132d129ac958c6c430b80dfd988e4831df0ee735b8ae4726d663949a23ddf58fb14","first_seen":"2025-08-05T12:10:01.987292Z","last_seen":"2026-05-06T12:53:38.725775Z","times_seen":18,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":109,"dns":0,"connect":50,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/assets/images/logo2.svg","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /assets/images/logo2.svg HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 05 Nov 2025 10:45:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690b2ad8-133e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4926,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"41442e9359849bd707773ba592f898dc","sha1":"4ef1ca8f73ada7c6e6a51e500dd6d9bca9b2b34f","sha256":"79c2a1c4e38323726d1a6d0dc2a3e9f7137d1b0208ff7928686dfc99bc93779d","sha512":"6b24ec883bacef672a673975442214d449068f99b8b24d31218812038715f99757d8b908e8a7d932e27b5eeee46ecb47584e26e90e5e4d49236ac3fb4a9d7880","ssdeep":"96:6HKx8kqfaOqvAjjeXBL+ZLPvmfAbb8ajAK:YJfaOqvAENwroJK","tlshash":"f5a154d234b8448cac530756dfd9ccd0771ef0beb62b49e4726c917291a23e8f5d6a24","first_seen":"2025-08-05T12:10:02.009554Z","last_seen":"2025-12-18T16:10:45.548997Z","times_seen":14,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":108,"dns":0,"connect":46,"send":0,"wait":47,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/assets/images/logo3.svg","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /assets/images/logo3.svg HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 05 Nov 2025 10:48:51 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690b2b93-1671\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5bff523627519a82bdb65c71846b1e70","sha1":"a7f0ee4dc744c5cb55f6f0dd130daab5966b5f1d","sha256":"7a138afcd34c5028c499a0e973f3a83ac87216dcf29257d711f7c0d7fe18f8aa","sha512":"c7ea22d595185223ce458b6da4fc200b49300939e4f1db97aaa6f55b215174a0c5a66b1440a93031e5673f7d162101baa738a06c3b9f77c72a3b931286838d4b","ssdeep":"96:jlIkxTJDkYOx/gp8mItOYBwmgeCsPwOowuupdRruUrX5VXB:xIKGYOs89wteCsPRow1HRSkVXB","tlshash":"c4c164d23ee8988c6c130ba1dfc544e4031ff2aeb25748e8f67ca17555e229df589b50","first_seen":"2024-08-21T10:11:02.09932Z","last_seen":"2026-05-06T12:53:38.758327Z","times_seen":22,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":106,"dns":0,"connect":46,"send":0,"wait":47,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/assets/images/lender.svg","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /assets/images/lender.svg HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 05 Nov 2025 10:50:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690b2c03-21fd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8701,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86d1a604e42e545502861b3a779bd1d4","sha1":"0c1883f25b5227cf690af68511b7728c3278bc3f","sha256":"d28c655f2480545e19aa5b6399408fbd28e1ba602b930c3955bcda40cfaaea47","sha512":"e30e2f46680399b95f4c5ecffd5cc97e33d01d8101e821c1e4f9fd5e2231fa135b83f249ca041758a639b8dd9aa8c6b56e64c947bf28d0e70eb499835093cc4f","ssdeep":"96:aifdmxcsyy1P/o3JNAhkTpgC3SPfyle3pqyKVM7Hgf+rjB6xpJwQrtH:aahsyeXU+CCPfyuqy3Hgf+rjoxfPhH","tlshash":"d60284c125e458cc1c5b8775cfca88d4a22df0dde22b18c872ad367985931adfa4fa19","first_seen":"2024-08-21T10:11:02.098029Z","last_seen":"2026-05-06T12:53:38.862778Z","times_seen":22,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/assets/images/hero.png","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /assets/images/hero.png HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: image/png\r\nContent-Length: 631265\r\nLast-Modified: Wed, 05 Nov 2025 10:45:45 GMT\r\nConnection: keep-alive\r\nETag: \"690b2ad9-9a1e1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 620, 8-bit/color RGB, non-interlaced","md5":"14ff5c9bb19698496f637d46b193ea37","sha1":"fd593e6afb6a9206e2f26af857f6e41601485508","sha256":"753cce34c8ff2cad8038dd8bf68daedecefe6c97b1722cfa9ce2524540213ada","sha512":"2cce9bee42270e5bb35e9f5ba6997dbd49211581fdc908978580ac276779b63da04b97e675eac3f26eaade6aab3ad282812edd5d351d762b683db9d1e575de23","ssdeep":"12288:+Kvr4JbEx7KvVJbhzkJdnVKQcnCIH45Iij3dcVZowf/BUmsePcs5WtQsvA2rmotF:+argm2vbeJL+BH4GiS7owf/BlsePcsjm","tlshash":"5ad433c94c8d1ef802769d2d8521375cde48640d1c779f92de2ce19cd1a0f5ed39a893","first_seen":"2025-12-14T16:23:34.65644Z","last_seen":"2025-12-18T16:10:45.553651Z","times_seen":3,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":95,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www-firstharlzon.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:42:02 GMT\r\nexpires: Sun, 13 Dec 2026 10:42:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nage: 451697\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-08-18T07:26:19.67011Z","times_seen":46444,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":129,"dns":4,"connect":10,"send":0,"wait":17,"receive":2,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/assets/images/fdic.svg","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /assets/images/fdic.svg HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 05 Nov 2025 10:50:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690b2c03-21fd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8701,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86d1a604e42e545502861b3a779bd1d4","sha1":"0c1883f25b5227cf690af68511b7728c3278bc3f","sha256":"d28c655f2480545e19aa5b6399408fbd28e1ba602b930c3955bcda40cfaaea47","sha512":"e30e2f46680399b95f4c5ecffd5cc97e33d01d8101e821c1e4f9fd5e2231fa135b83f249ca041758a639b8dd9aa8c6b56e64c947bf28d0e70eb499835093cc4f","ssdeep":"96:aifdmxcsyy1P/o3JNAhkTpgC3SPfyle3pqyKVM7Hgf+rjB6xpJwQrtH:aahsyeXU+CCPfyuqy3Hgf+rjoxfPhH","tlshash":"d60284c125e458cc1c5b8775cfca88d4a22df0dde22b18c872ad367985931adfa4fa19","first_seen":"2024-08-21T10:11:02.098029Z","last_seen":"2026-05-06T12:53:38.862778Z","times_seen":22,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":105,"dns":0,"connect":46,"send":0,"wait":47,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www-firstharlzon.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:55:49 GMT\r\nexpires: Fri, 18 Dec 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22470\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-18T07:36:40.875448Z","times_seen":329800,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":149,"dns":1,"connect":21,"send":0,"wait":11,"receive":3,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www-firstharlzon.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:55:49 GMT\r\nexpires: Fri, 18 Dec 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22470\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-18T07:36:40.875448Z","times_seen":329800,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":89,"dns":1,"connect":8,"send":0,"wait":8,"receive":10,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:19.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www-firstharlzon.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:55:49 GMT\r\nexpires: Fri, 18 Dec 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22470\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-18T07:36:40.875448Z","times_seen":329800,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":68,"dns":3,"connect":21,"send":0,"wait":8,"receive":4,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/favicon.ico","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-firstharlzon.top/","date":"2025-12-18T16:10:20.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-firstharlzon.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:20 GMT\r\nContent-Type: image/x-icon\r\nLast-Modified: Wed, 05 Nov 2025 13:36:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690b52d4-47e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"bc77a437ea6eb82e870880375f3bfda5","sha1":"6b62a77dde2c7b13812e87d6e9e0a100b2d067c7","sha256":"64caf0212a9d7d172f932566d05ed97f89c24d25a355a58651b4532269108e61","sha512":"a7c6a154400f25b16aacdcb03ff38475b6312a783053c7d47f191eb1c003f6d4f9e905fbfba46f01cdb6a742f8da566212a3f3e079f905c5a7c9f02aff929918","ssdeep":"","tlshash":"5821dc9d56e8d53adfcc493e1543093a70baacc7b1629a4a4115b01a1cf5e817e5084d","first_seen":"2025-12-14T16:23:34.645577Z","last_seen":"2025-12-18T16:10:45.556412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-firstharlzon.top/","fqdn":"www-firstharlzon.top","domain":"www-firstharlzon.top","tld":"top"},"ip":{"addr":"144.31.244.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-18T16:10:19.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-firstharlzon.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 19:44:51 GMT","end":"Mon, 16 Mar 2026 19:44:50 GMT"},"fingerprint":{"sha1":"70:E3:8C:33:C8:21:68:D2:D9:0D:BD:33:C3:4C:B8:D7:11:0F:5C:BC","sha256":"9F:2F:40:08:CB:3A:31:9E:70:AD:45:CB:1E:E6:F6:8B:90:9C:38:C6:5C:79:FC:72:8D:76:0F:7D:A5:B8:C9:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www-firstharlzon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Thu, 18 Dec 2025 16:10:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6626\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26022,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (900)","md5":"58dabc12231d89af7a25dcff8dcd310e","sha1":"de19d6fad45220d430f6a0d1af511a53fad0e346","sha256":"77f8b514dd98dbdda7f54a9bf1246ee446d1da768647ce93cff5895c1cf36e45","sha512":"bd704ad8bc6c2fede724c91877feba8fedbf8a249c791cede9672b1fb9de58e19422fbbd5375a82a97aaebb606d8af57af9465a27f49753fd4af41d92e42c8dc","ssdeep":"192:WFe46C2tTw6fUeUNJB8iMm2xdXeF+C6+NQDYUMMwvkYYa1Ein69j9W0b0+PEXNOs:o2DeDdjJcsd4LL6Jlg6DaHAhhtYfA1","tlshash":"2ec2912b23f31006794791b8afb6271a7725d153d60ecd983aac564ccfca9d09c93b9c","first_seen":"2025-12-14T16:23:34.647971Z","last_seen":"2025-12-18T16:10:45.557323Z","times_seen":3,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":156,"dns":55,"connect":46,"send":0,"wait":55,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"www-firstharlzon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}