{"report_id":"7c89eda4-70d1-4b85-9c52-0aa4b882342f","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-05-15T06:47:05Z","url":{"schema":"http","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/?lang=no","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"title":"Facebook","dom":{"size":117659,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"be0e883147b0215d7f68115e152c5b63","sha1":"86f7f26e91c57dedf04fd7582f89dc9ed725dac8","sha256":"d536dc00e0db1491489d3db6d59554296f27146c7692f75fbcfbda650680f309","sha512":"84c18d91d91f9d57b22e969e658ae0b84bd099bfcac25c9cf1a8a9fae69c5aa80cfb524c70f020dc20691eea05c6fac1edb964906e65e6f4d870c1d494d062d7","ssdeep":"1536:QRpgxmRQXHSNlbtJFZcFXnsdSiSAj9luVr42JR8coHju8gZ70tF87/T34oltvN7E:d+rFZMsdh9lIr4Dc1p34o/a","tlshash":"bab31a26dc9b2d039b52556a27df1ac1152c438bac82dccc7a5edb8ccf4e96a04e17dc","dom_hash":"domhash883dd8d6e91639f2e3598c07daa55cdb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T06:47:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"api.ipapi.is","ip":{"addr":"46.225.52.25","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-06","domain_rank":592375,"first_seen":"2023-07-07T10:51:10Z","last_seen":"2026-05-12T16:50:36.326829Z","alert_count":0,"request_count":1,"received_data":1914,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"galaticothaikhongg.netlify.app","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2026-05-13T02:12:50.391301Z","last_seen":"2026-05-13T02:12:50.391301Z","alert_count":45,"request_count":9,"received_data":524103,"sent_data":4433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"224d61449294bd28a94e41c3d5b65727","sha1":"f6314f15563d6791abb801437d35617ed575d3ee","sha256":"a5e4648b528e4e0e298501aa29eec377ec3515a86023d82f6e9b63f4250e3ca8","sha512":"54190f47962c442f520e40c8d0b742bb5e04744a58ceb39a9082ee39acc9b857f7f1604e8fb4e8886ad926cd1f038342912b16573f61abb931e1d84d43996ff0","ssdeep":"96:sFtPIjVIrItPloGKZBhv/9aMyDdyRTFoktMullxvqRe:AJIjVIaPqX9HKyFFmuTQe","tlshash":"799101f964a320225277346f8b9f260420f54007ec0afe497e1d92806fde55ed9b7bb9","size":4366,"data":"","first_seen":"2026-05-13T02:12:55.106145Z","last_seen":"2026-05-15T06:47:07.128045Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0b14ff0c797c3f45e565875e6ed84f9","sha1":"6ea0680fc0174cd5c33711de49c6d7855b3e11a5","sha256":"96657a51507b87371a0db55c76cf6ab651453e38026b083faf9e60e59c1d0df3","sha512":"fafc8bfa9010314a10b763e79598737f906eca6cbcae6d729d280ab88fdce73d6c37dca92862e02fd14673df248bac7b2f65b199126b6325ddd405b8770b83b7","ssdeep":"192:aCaDA58xSkY5Eohjz4oUqKzwCeE030QLaZGd9F3BczeWX:V8xSkY5N4oUqKzwC9GOZGWn","tlshash":"f7323e58e1b31d57c6b212e829cb05803072635b2f4af449bf4dae181f5e15f91b36ec","size":11462,"data":"","first_seen":"2026-05-13T02:12:55.10783Z","last_seen":"2026-05-15T06:47:07.130006Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8691c8c72dfa330e9e7d408e846dba47","sha1":"012df4733f2b14537fbdbacc023660b57bd5ca01","sha256":"ab73d5dd2b2ec24b3cb170fcdf20f6cec97026d81bb23680aa36471e496d0cc4","sha512":"9f0ad747cbab298ff87fd4f1d53c4f132159ee370e21dda953e9d06d0308555b8be33424dcbc8e01e440fd4569db9463206196ee11bc8eb0c504088a85250eca","ssdeep":"192:Fy0fRmTf6yeVT1eyeTgT1Ly3WPDhtoq0nMif1BLW1hxfbVj2l9J9al2uFDJBLpSa:rm7KVp2TgpP7xgfWLpSepb","tlshash":"8542612ef4f7253556b7b1b9138f42803235e017d886dd843e6c83141f62aa9aa76fcd","size":12116,"data":"","first_seen":"2026-05-13T02:12:55.113287Z","last_seen":"2026-05-15T06:47:07.130752Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"50268ce535f0ed21c61ca1c554eaf99c","sha1":"2933fedca57bda91068a629d007c38a2ff9ef19b","sha256":"25b4df6bc680a511701af4097db3189a68cd288bff07b6bbc76b99f216431a47","sha512":"7568627ec1a09cab35302a3eb5257b4a1998a48988730aab1d28c6c560bb120a938c391250b7ac650ecd8caa89d10909eefa09cba82e486257693d3a899f5fab","ssdeep":"1536:2RpgxmRQXHSNlbtJFZcFXnsdSiSAj9luVr42JR8coHju8gZ70tF87/v:X+rFZMsdh9lIr4Dc1Z","tlshash":"1c638166cd8f2d95dba48a173add5ec6081c17cdbce20ccd855beb9cc24e92a10d81ed","size":67358,"data":"","first_seen":"2026-05-13T02:12:55.115198Z","last_seen":"2026-05-15T06:47:07.13139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/?lang=no","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"224d61449294bd28a94e41c3d5b65727","sha1":"f6314f15563d6791abb801437d35617ed575d3ee","sha256":"a5e4648b528e4e0e298501aa29eec377ec3515a86023d82f6e9b63f4250e3ca8","sha512":"54190f47962c442f520e40c8d0b742bb5e04744a58ceb39a9082ee39acc9b857f7f1604e8fb4e8886ad926cd1f038342912b16573f61abb931e1d84d43996ff0","ssdeep":"96:sFtPIjVIrItPloGKZBhv/9aMyDdyRTFoktMullxvqRe:AJIjVIaPqX9HKyFFmuTQe","tlshash":"799101f964a320225277346f8b9f260420f54007ec0afe497e1d92806fde55ed9b7bb9","size":4366,"data":"","first_seen":"2026-05-13T02:12:55.106145Z","last_seen":"2026-05-15T06:47:07.128045Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/?lang=no","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"50268ce535f0ed21c61ca1c554eaf99c","sha1":"2933fedca57bda91068a629d007c38a2ff9ef19b","sha256":"25b4df6bc680a511701af4097db3189a68cd288bff07b6bbc76b99f216431a47","sha512":"7568627ec1a09cab35302a3eb5257b4a1998a48988730aab1d28c6c560bb120a938c391250b7ac650ecd8caa89d10909eefa09cba82e486257693d3a899f5fab","ssdeep":"1536:2RpgxmRQXHSNlbtJFZcFXnsdSiSAj9luVr42JR8coHju8gZ70tF87/v:X+rFZMsdh9lIr4Dc1Z","tlshash":"1c638166cd8f2d95dba48a173add5ec6081c17cdbce20ccd855beb9cc24e92a10d81ed","size":67358,"data":"","first_seen":"2026-05-13T02:12:55.115198Z","last_seen":"2026-05-15T06:47:07.13139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/?lang=no","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0b14ff0c797c3f45e565875e6ed84f9","sha1":"6ea0680fc0174cd5c33711de49c6d7855b3e11a5","sha256":"96657a51507b87371a0db55c76cf6ab651453e38026b083faf9e60e59c1d0df3","sha512":"fafc8bfa9010314a10b763e79598737f906eca6cbcae6d729d280ab88fdce73d6c37dca92862e02fd14673df248bac7b2f65b199126b6325ddd405b8770b83b7","ssdeep":"192:aCaDA58xSkY5Eohjz4oUqKzwCeE030QLaZGd9F3BczeWX:V8xSkY5N4oUqKzwC9GOZGWn","tlshash":"f7323e58e1b31d57c6b212e829cb05803072635b2f4af449bf4dae181f5e15f91b36ec","size":11462,"data":"","first_seen":"2026-05-13T02:12:55.10783Z","last_seen":"2026-05-15T06:47:07.130006Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/?lang=no","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8691c8c72dfa330e9e7d408e846dba47","sha1":"012df4733f2b14537fbdbacc023660b57bd5ca01","sha256":"ab73d5dd2b2ec24b3cb170fcdf20f6cec97026d81bb23680aa36471e496d0cc4","sha512":"9f0ad747cbab298ff87fd4f1d53c4f132159ee370e21dda953e9d06d0308555b8be33424dcbc8e01e440fd4569db9463206196ee11bc8eb0c504088a85250eca","ssdeep":"192:Fy0fRmTf6yeVT1eyeTgT1Ly3WPDhtoq0nMif1BLW1hxfbVj2l9J9al2uFDJBLpSa:rm7KVp2TgpP7xgfWLpSepb","tlshash":"8542612ef4f7253556b7b1b9138f42803235e017d886dd843e6c83141f62aa9aa76fcd","size":12116,"data":"","first_seen":"2026-05-13T02:12:55.113287Z","last_seen":"2026-05-15T06:47:07.130752Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1167253e2c173d3c9a1f96a692d3c1f4","sha1":"75b06e526655fe45756f862d43ef7abafdf47a38","sha256":"45eaff468c38d76d396ee7d2f4018670433de7a682efb45ea6c41f5f46938f59","sha512":"56a5167d4dbd117275ec0241780962100ffbcb300a54e4e3a6f9d20af4ae13d8c5f5d441a569d142de532369a7bdd4ccf18d58e5fe871716bd57c2659ceacbc1","ssdeep":"768:1Is4oVKzwC9+mN7ZA2VJBx5CZUg9757DZUA:134olmN7ZA2VJBx5tg9Vxv","tlshash":"5633a45ea5b31517a56361bd27db17403234d007990aee083fac9b088f8e69e9d73bdc","size":50147,"data":"","first_seen":"2026-05-13T02:12:55.117948Z","last_seen":"2026-05-15T06:47:07.132232Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/image/F3-2FA-TextMessages-WWW_light-3x.png","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /image/F3-2FA-TextMessages-WWW_light-3x.png HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 22742\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: \"deeed37a204e2696cfdfd5a144994546-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-nf-request-id: 01KRN66BGA6V759WY8CE8YPD2X\r\ncontent-length: 187435\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":187435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 840, 8-bit/color RGBA, non-interlaced","md5":"3a6d3676bb90dc3c0606a86452206076","sha1":"87b3934e296791305f477833d9b86011a668946e","sha256":"9d68a3dd2a3aa490097e86eb733716f7a9106e1b40fe738631d13c8e8f7fc028","sha512":"7637a063a4213ecaca919e14fd207a0a9338b9535a0ea0ab99e5401a4af3c41e273c01ec668f51ec0768492f0f244c348a6e72ae1ae446e89ccced6cc6b8a82c","ssdeep":"3072:UcTKxjKhcc5IN8Lnzl3kIzHJLrlyrFEQUD9tmPu/91nCmUDyI68+pwuM7YwGPRIB:UcQ2cKIN8Lhlz16k9tP/umUDV68+pPM5","tlshash":"760412a5f5b84ee0d15f24300cfe70a91b422c850583a61ba52d68bca76e9fd4718b9f","first_seen":"2026-02-19T14:32:15.675475Z","last_seen":"2026-07-23T07:56:30.828287Z","times_seen":39,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/?lang=no","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T06:46:43.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /?lang=no HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galaticothaikhongg.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 30720\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: \"73f857167b4f6b14108024c3ce137947-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66BDKWBVFW0K131DM3KMQ\r\ncontent-length: 18880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":67385,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65512), with CRLF line terminators","md5":"c9d6850ca57d8881798a5f8551a30d2d","sha1":"d27d18ce09d18d89ee77563dbeeda4e000565302","sha256":"98b07dd9630878c90c369d7cda64a5c411108fec6a9ddfb45aaad477984da120","sha512":"5ec2f0cee8f3ab2af97b1197a80bc68dd08a282cc0321e4bc4cfccc365a0c76d0f422e11477ae35a6c7d81f7acf117e0482a116a12d85e9f76d18b4c623822ed","ssdeep":"1536:TRpgxmRQXHSNlbtJFZcFXnsdSiSAj9luVr42JR8coHju8gZ70tF87/R:C+rFZMsdh9lIr4Dc1j","tlshash":"44638166cd8f2d95cba48a173add5ec60c1c17cdbce208cd855beb8cc24e92a10d85ed","first_seen":"2026-05-13T02:12:55.092143Z","last_seen":"2026-05-15T06:47:07.104323Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/locales/no.json","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /locales/no.json HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 22741\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: 1778533598-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66BH0M50Q8J7EKFW8MES6\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-07-23T22:43:29.20701Z","times_seen":13511,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/favicon.ico","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 33674\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: 1778533598-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66BQ44HG5BWX6NFA7WMQS\r\ncontent-length: 1175\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-07-23T22:43:29.20701Z","times_seen":13511,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T06:46:42.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 30719\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 15 May 2026 06:46:42 GMT\r\netag: \"73f857167b4f6b14108024c3ce137947-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66B1CJ3F3KGDQQY2GJ80W\r\ncontent-length: 18880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67385,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65512), with CRLF line terminators","md5":"c9d6850ca57d8881798a5f8551a30d2d","sha1":"d27d18ce09d18d89ee77563dbeeda4e000565302","sha256":"98b07dd9630878c90c369d7cda64a5c411108fec6a9ddfb45aaad477984da120","sha512":"5ec2f0cee8f3ab2af97b1197a80bc68dd08a282cc0321e4bc4cfccc365a0c76d0f422e11477ae35a6c7d81f7acf117e0482a116a12d85e9f76d18b4c623822ed","ssdeep":"1536:TRpgxmRQXHSNlbtJFZcFXnsdSiSAj9luVr42JR8coHju8gZ70tF87/R:C+rFZMsdh9lIr4Dc1j","tlshash":"44638166cd8f2d95cba48a173add5ec60c1c17cdbce208cd855beb8cc24e92a10d85ed","first_seen":"2026-05-13T02:12:55.092143Z","last_seen":"2026-05-15T06:47:07.104323Z","times_seen":3,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":83,"dns":8,"connect":23,"send":0,"wait":24,"receive":22,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/image/83zWJdc6PJI.webp","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /image/83zWJdc6PJI.webp HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 22742\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/webp\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: \"dbe6e95176ffeb3045a020f013bcf6bc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-nf-request-id: 01KRN66BG9DVXY7Y0DDACK9DY1\r\ncontent-length: 177640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d67bbbe36e2b132a361e8ab179c6de9","sha1":"6020669057705df2229e55abac2889347fc38097","sha256":"76b242e16492f563c762e8db9f30c462ae543dfa1292b137aab4d1cea1739adf","sha512":"55e7ff69c0b613adf4d1d53bac6fd2341aece74f52f9cc9eb32fbe2e1945c5fb8005313ecf4b1a18928023a26559babdca7d966b42a0abac5fbe191ace07ab06","ssdeep":"3072:6cFATRNgbS1gudxvklcPM6dMcJ8hmERFN3nDW5wiOIcKcmaCBme3DV3whPuY:6AAgm19dRklO39J8D33y5wXIcKcsVCPh","tlshash":"eb04121ae64fb639c5d67bf91ab8237e93e4888545c04fc43d8c162f6fbf5472682068","first_seen":"2026-03-04T19:47:53.377679Z","last_seen":"2026-07-23T21:36:21.463044Z","times_seen":2937,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/api/visit","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nOrigin: https://galaticothaikhongg.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: no-cache\r\ncache-status: \"Netlify Durable\"; fwd=bypass, \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\nnetlify-vary: query\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66BG7XMANWA0R5XK18161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-23T22:51:42.538373Z","times_seen":16523,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/image/tL_v571NdZ0.svg","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /image/tL_v571NdZ0.svg HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 22742\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: \"e913d267a1e531598ec2248bfbc6ef1c-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66BGAQ2Y7WP277W1G97DX\r\ncontent-length: 4121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12066,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"949187746f44bece2b6df0bc4dea52f9","sha1":"5cb3b29fe3465f72a8d6ff5609cd61fe386092e9","sha256":"7a0430c375fc8563eafa7636869b5b132e6da4461711a81d384bc0044a20d039","sha512":"7153bbe4b3de349e70a24121b7b9c6db6be10b0010630528510ab5346d023d1269e087789c9970cae8517eb65db0cf09aee45cd3115e4a38341fa6a20167a3fb","ssdeep":"192:TfvYnmijZUlhhUpI+WvyylNhqLJyMELxT7clBqp/xMmU/gfP:7vHijZUVUqfdD04MELxclBUxMy","tlshash":"bc4283e3b6ade9e2e649cb88dc22a875159b24f7efc6c2d140d0ef5c66281c14d0ddd2","first_seen":"2023-08-02T22:13:01Z","last_seen":"2026-07-08T21:15:39.911267Z","times_seen":105,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"galaticothaikhongg.netlify.app/locales/en.json","fqdn":"galaticothaikhongg.netlify.app","domain":"galaticothaikhongg.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /locales/en.json HTTP/1.1\r\nHost: galaticothaikhongg.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galaticothaikhongg.netlify.app/?lang=no\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 22741\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\netag: \"f193ca445cc59880853fbeaa22241caa-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRN66BJAF9VJWK5ZJYP0NZ43\r\ncontent-length: 498\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1084,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c5286f45f5eaee650aa19df7ae7445a1","sha1":"7080df5329e8b3df457f131139bc91c9acb239c4","sha256":"fcfa7a6b1ef6c2de046eeb96a40ad8e8a0bc27f607356552c4e3a2c173ad04fa","sha512":"1b112bd3e8b2d280d620ac76f4f6947140c2040fe37100810a22d527bc1e4c468d090c306bf86f934b14140dbd724167db152508abc97d9db107342008374a48","ssdeep":"","tlshash":"8011fc1b8240085702f29612701b888a7a148f6f8b312c1f3d76a33d1ff2a78ead3349","first_seen":"2026-05-11T21:00:21.431614Z","last_seen":"2026-05-15T06:47:07.122105Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"galaticothaikhongg.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"galaticothaikhongg.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"api.ipapi.is/","fqdn":"api.ipapi.is","domain":"ipapi.is","tld":"is"},"ip":{"addr":"46.225.52.25","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galaticothaikhongg.netlify.app/?lang=no","date":"2026-05-15T06:46:43.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ipapi.is","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 11:16:21 GMT","end":"Mon, 10 Aug 2026 11:16:20 GMT"},"fingerprint":{"sha1":"03:D1:92:5D:00:DD:87:26:6D:A6:92:BB:1A:4C:7C:D3:F6:D6:69:DB","sha256":"9B:13:33:5B:B6:E1:4F:72:B0:A4:26:57:5D:4F:51:05:25:41:76:8C:63:4C:BA:51:28:84:5A:D0:90:93:2B:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipapi.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galaticothaikhongg.netlify.app/\r\nOrigin: https://galaticothaikhongg.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 06:46:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"661-4aMq4mM92oF7/qkP0K/CyBTrWfQ\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1633,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1906764277585ddd97a8f48d8fea45bb","sha1":"e1a32ae2633dda817bfea90fd0afc2c814eb59f4","sha256":"d144f15d6586eec544989161c0d12284f299ca5d32c1cfdc8c880c5fd6e76439","sha512":"01f34dec12c4025fed489108028e9a583d44dd7b08240fe358aec1aa05e9d2c134cfa7635f346e51cbe0ba0cf4ce58d63420599963d94bc4e8e5e51764eb5779","ssdeep":"","tlshash":"19312820c5641d3719e9022ea8ac0b03722056074e0838193eb2274e5f8ce3fb4fb6ae","first_seen":"2026-05-15T06:47:07.124447Z","last_seen":"2026-05-15T06:47:07.124447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}