{"report_id":"84521791-ddae-4b0b-993f-e81d79673d86","version":6,"status":"done","tags":[],"date":"2026-02-14T02:18:28Z","url":{"schema":"https","addr":"fbfoffshore.com/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"title":"FBF Offshore | Institutional Banking","dom":{"size":53355,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (494)","md5":"4e5838f9998a5ad7a1d5edd65620d0f1","sha1":"feb47cb3a8a4cf0d82698e94275f3742502745d0","sha256":"3f7ad1830524b2b7658a41207a1dc8b99de337888d4a888927ec51db9c264758","sha512":"b8bfb88e2148381d0e69252cc8c701a6f7b0401603063298514db9b43f8f237eedd9072a4d5fa384f91fd5d3077009644cc6f4cba7dea263aca44e03a6ce69a9","ssdeep":"768:s3aIAs6s6s6sAW1BW/PrXsP4AgNCpaF0w:KaPXXXLIBW/PrXsP/gQpbw","tlshash":"cb33d03144f12067025390d56a656b0f6fc2d60bca5b8a0477fc4be96fd3e86cc2bd6a","dom_hash":"domhash7988b03625fba46f7566370d9a0073b5","first_seen":"2026-02-13T14:17:05.091026Z","last_seen":"2026-02-14T02:18:33.920806Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fbfoffshore.com/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:18:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fbfoffshore.com","ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"2026-01-15","domain_rank":0,"first_seen":"2026-02-13T14:16:57.100165Z","last_seen":"2026-02-13T14:16:57.100165Z","alert_count":56,"request_count":56,"received_data":5252483,"sent_data":67724,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.69.68.147","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-11T20:05:56.067957Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":523,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":2,"received_data":6414,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-11T20:05:56.47035Z","alert_count":0,"request_count":1,"received_data":18555,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":2,"received_data":98833,"sent_data":1092,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/wow.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","size":6300,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T22:31:25.272791Z","times_seen":5469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ae8db4e4c3439393b5e7188ca5e370c","sha1":"9a8d2325b5e1f0b121509fdc247311e7399a0c2f","sha256":"96ba85ba0feaeb9eba54fd85c338bf5d29c0f4c26c7c22af104d2661fcadd1a5","sha512":"40f1dec4f6a6bf06b4b7c652e8b202b74c8a996ff77d9c12efb50ea8941e364f921e267d0e82769e8e62bc380d0e4e787b144fe9a50a10dc27d64e09ee2a4795","ssdeep":"","tlshash":"3ae0ab7d3c754095079200f880a7e1283d1630744051c807989bd8696cf0fcaad019d4","size":418,"data":"","first_seen":"2026-02-13T14:17:05.187632Z","last_seen":"2026-02-14T02:18:34.007041Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/jquery.nice-select.min.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-03T22:30:56.023904Z","times_seen":10433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/jquery.fancybox.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154104,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T06:24:27.74796Z","times_seen":3547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/validation.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","size":36153,"data":"","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-08-01T04:36:03.170543Z","times_seen":1171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/owl.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","size":89992,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-04T00:14:54.81725Z","times_seen":12657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/isotope.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","size":37779,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T22:31:25.27964Z","times_seen":3278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/appear.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a457d262e3c32d25c003ca412ee7fe6","sha1":"b08e23c986259073419a7068fcd36296a91b1ae4","sha256":"46fb2235bcf84086a9b939ae509ecacc01bb31c68ba94e6473e31d8adebec3eb","sha512":"826945d028efc7a9f95c22c5f4d34dfab6704b75f45e7d6fc2e93e2b42f7078aaf7b8508f9155b36dd15ca759a765fff3b4550f17e3b187e79285f63de455d53","ssdeep":"48:3l3Xwqhd24ayV+zFLAPftUIeohhR9zIreFfFoBSxMEh1u1cq6KjD4W7j9:V3XWz1zFkmDo7R9cr+YSpTocqBksj9","tlshash":"7391db4a759b2ab54877722a9f2fa20cd721513b1202c21138eede6c2f71c50a197fdc","size":4379,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T19:40:53.884906Z","times_seen":4160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/bootstrap.min.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6f488c5766fb06169100bdbd2b4fdbd","sha1":"f7365985962f78092d8eeaca6d6633d6fbf75583","sha256":"0ce9de398de7e7ec63e836b70090643c7c5a3f29ea4a519a67defdd206c13ac1","sha512":"f18f1e18af76773a2ec2944e229a70afed243dabaed2aaad9f365934417c3dab79b6e44d2712570a46d07c9d079541b7cb51c1df3d7c0922a6528ee2db370fa6","ssdeep":"768:KZYN+vOLYakObgUDZj8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnl+G/AX22b+:Kk9PXht8xm+Yx2UPnAe","tlshash":"2443a5563244b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863276bbc","size":60104,"data":"","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-08-03T12:36:05.894982Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/jquery.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b83db83a1d89113ee03ab730efa48c7a","sha1":"2fccdd3e43db21bbc8448ed6d6311c4a6eea1166","sha256":"99e691fae5e88eb36bafb24758b35f0f990708295f8f2abe2221891e328f776a","sha512":"10d6f09a04eb135eae12c890be0512ead801e213614505937d1e782d5a6af86550395470ea31b3aebd85695f07a8fe903eda4941e52bcb7278cce02eacb13800","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:vHNwcv9VBQpLl88SMBQ47GK7","tlshash":"1083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-10-23T00:47:02Z","last_seen":"2026-08-03T23:52:54.235062Z","times_seen":9879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/odometer.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"519a5777444f5965b6df23e26c69f037","sha1":"fe5beb60997c84ab2f91b54535c4221443cdd21f","sha256":"03c1e188b884240e56a79c39b6918e16e9cfdf9b4ed4e84d5d8efe71fef778ae","sha512":"3ee200bb01031ea959bad625e2294fdf810b5a3d667d8c69330780be938c2a07734cf3a6c42b942bc9b28142c1e1d2787a835c1afd16089eea2dc9dccda29f83","ssdeep":"192:xABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:aBhvk8QecCa07z+Wd/T","tlshash":"80129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","size":9896,"data":"","first_seen":"2023-03-07T01:14:43Z","last_seen":"2026-08-02T07:58:54.669125Z","times_seen":1554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/nav-tool.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e28a1be506d3151bad02d20a7751f09c","sha1":"d0a106cd4d593b36c86c3740d26b6d332c740207","sha256":"e35de31330187c0f62603f8b770e2969cbc3fe0d885aa02c7dcdd6fbe5134691","sha512":"e7faae5c7937eb0e2569b90d0dd804b6f0a5c72d30f148770f36c5bde1fec88fe412be41416f91d1caf5fdf6a07059a31119673bdd003ec9f70789eeb9c84455","ssdeep":"","tlshash":"ae11aa68b830e2fd01fb631930139e40c23a0dc5ca2c1d95982019882e6bdcf41eb7fe","size":1086,"data":"","first_seen":"2023-03-07T12:02:54Z","last_seen":"2026-08-02T23:53:25.958915Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/parallax-scroll.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"58d35988547129c9204295262c9f149a","sha1":"fbd7b2772d647f6bbcf98bc7d1909e5c27809df5","sha256":"a96a9d0e49111aa168bd7f45fa84ea4b5455f9274cae49d3b371f17d4f5444b4","sha512":"9a4b03e0cdba335bb3dfb0afd5e67a7d326a5513d2a463ea279493c5c1daf63eb87ae788d8c57f7474375182491d53eb88688fefd794f26cd468e418021979b6","ssdeep":"96:mTrhwew3hcUl2p3R0NIXCAVC7kCVCd4qv6NyHQsmT9CRmPvvobG1UG8qwkIuA5:QN/wxcUUBDVOkiVNyHg2mPX+x5","tlshash":"58120108e411052ae5f67335cf7d03aafb6a761b92519169bb0dc98d0fb083493a4ff6","size":9301,"data":"","first_seen":"2023-03-07T13:47:18Z","last_seen":"2026-08-03T15:05:01.132848Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/scrolltop.min.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7659661aad689dbdfda68967ba95d4aa","sha1":"8d1ac94fe3d2370f25beec76a6e523daa90341c8","sha256":"64144149c414bd3ad306e32b89e86b6adfdcafb71d8d43cd6bb6d025670578de","sha512":"017d820636a2177af04ae84196b758cfe8d10b5e2f141a66b6eafd96b30943c9eea8e2eb317325d19f16ebacfa92e38cf90945c33c5f2588fca6157c214f9e92","ssdeep":"","tlshash":"c501af146140d4f452fa507ad2b72ba17932a47f770711c4151a68b63406f3d5b93fe0","size":799,"data":"","first_seen":"2025-04-01T13:06:23.879576Z","last_seen":"2026-07-27T14:18:32.403295Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/script.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a27e46de49a9494789d6722e63adc1d7","sha1":"15ff74f8701ffe54c181bfdd2d4af522242c2ba1","sha256":"72b3b5fd6a6e71b0317d92653d20ed98f0d278874a4695b73c3c895992e39bfa","sha512":"0167ddbea94ad97d6464c4367c7d1ff9c92c3afb8e109a38e8a73697c84e23a93b59d429f08dc911f967e41281f472bd96d43e933a47205c51a9f09a70d188dc","ssdeep":"192:H+Taj3LFtCLVR0I9Jwau3DRKfhMLs5rMLC56M1g5iQMPM5aWMf4w5hpLMdQK5hpG:H+vhR0IT4MPfU5egObN5cFggzREPHZ","tlshash":"6f621fc0b36e56af12fb3352913d5940af6cc436c18160faf4fe25286be834932a5e5d","size":14841,"data":"","first_seen":"2025-07-13T07:01:05.2389Z","last_seen":"2026-07-27T13:48:37.817053Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-15.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-15.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 01:02:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1872\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 30, 8-bit/color RGBA, non-interlaced","md5":"35be53ccdc8c337d34b5539cf0e21663","sha1":"57f4256250d703c7f716642b9a4b308d3be63417","sha256":"0069903bdab918b6a432d70a8e046c74dc439e50f5bbdc9eddc600e8134c6ddf","sha512":"e029ed5e433d9478574ba1b168ecc83228ada724c360807110a0a4bc905e73e86b477f4db9dd11a819d9fb60974d697f86a66f581d2206a1ace17d8fb80a4273","ssdeep":"","tlshash":"9231d74fca417a41c145fb8128f694279f2286c1c9e4e425fc8fc4436da8af5474eac7","first_seen":"2025-04-01T13:06:23.790737Z","last_seen":"2026-07-02T01:36:02.821936Z","times_seen":35,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-18.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-18.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 05:11:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1463\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 16, 8-bit/color RGBA, non-interlaced","md5":"8cb444c49f105c4ae4a72f18ff928fe3","sha1":"6f210e206a80079e7971fd6dc1f85942be144724","sha256":"000ecce74820db5c113eb4cbaa54c2110baee3053558ea545d4a652e0ad38fe3","sha512":"377338fa02f4f236ba381a5f2e02c71748150116c82a8c029a49db9227eda5cdeccd93ceca4758ac5b49d0cc40a9436d25eea4278b660bfffeb547620b0e7ebf","ssdeep":"","tlshash":"5c31960eeb40e640e588a9952cf7a417df224741b9e1e0a5fcebd4535ca40fa829a9c7","first_seen":"2025-07-13T07:01:05.214653Z","last_seen":"2026-07-02T01:36:02.833708Z","times_seen":17,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-19.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-19.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 05:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1819\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 30, 8-bit/color RGBA, non-interlaced","md5":"bc713179dcc897473eac38e0f6d16015","sha1":"0d8b08b5f43e885c9f3cc38fc02091cbd6b29828","sha256":"71c423fcb919b0ac2c309aad8436295e3a16af129d583a63c0f0a833dc97f8bb","sha512":"e2b85cb56f487415150728f3e6053b080476eb83b6b32421237ff459b59eac702e63e15de79f6252e397dfe0753945be1d80dc0fc037c23d681f009a6e90ca37","ssdeep":"","tlshash":"6c31b91fd541ab10d15cda8168fb90339a26164489f1e5a5f8cfd05719380f24b499cb","first_seen":"2025-07-13T07:01:05.090951Z","last_seen":"2026-07-02T01:36:02.740567Z","times_seen":17,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/parallax-scroll.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/parallax-scroll.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 29 Nov 2021 06:43:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1854\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9301,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"58d35988547129c9204295262c9f149a","sha1":"fbd7b2772d647f6bbcf98bc7d1909e5c27809df5","sha256":"a96a9d0e49111aa168bd7f45fa84ea4b5455f9274cae49d3b371f17d4f5444b4","sha512":"9a4b03e0cdba335bb3dfb0afd5e67a7d326a5513d2a463ea279493c5c1daf63eb87ae788d8c57f7474375182491d53eb88688fefd794f26cd468e418021979b6","ssdeep":"96:mTrhwew3hcUl2p3R0NIXCAVC7kCVCd4qv6NyHQsmT9CRmPvvobG1UG8qwkIuA5:QN/wxcUUBDVOkiVNyHg2mPX+x5","tlshash":"58120108e411052ae5f67335cf7d03aafb6a761b92519169bb0dc98d0fb083493a4ff6","first_seen":"2023-03-07T13:47:18Z","last_seen":"2026-08-03T15:05:01.132848Z","times_seen":560,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/shape/shape-4.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/shape/shape-4.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Aug 2024 23:04:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68294\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 792 x 843, 8-bit/color RGBA, non-interlaced","md5":"e4f0af7200b6c947f7d6f24f8fb559a6","sha1":"4bd4adb27248607505dfd4f784d787186dda1a17","sha256":"bf01b58bf1028f699227fc37f34748f44e0592effaaedc2de5fa2cf5c0a2213e","sha512":"0cff03650eddc410908661a1d5090b3064ca22afa55f61ed75698c37a1ab01fff5838cead113cd1b9ebfd4d19a19ec5c098dfca6ad5ef083d8d3fc388cbed399","ssdeep":"1536:OrTjSb13tLNGAdSaIkvwLMzxCk3WES3smbXHIsBSyESRRY:025GrBMlr23smbX7BzE4Y","tlshash":"5663029d0b1adc20b4bd5026fcce6961372317cfaddeb14d58ac1a1b9e346d8c8e6095","first_seen":"2025-04-01T13:06:23.837107Z","last_seen":"2026-07-02T01:36:02.812609Z","times_seen":32,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/b3000c3f8f5ea75dedd1f15cb0bc8f8d920971c6.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.69.68.147","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/b3000c3f8f5ea75dedd1f15cb0bc8f8d920971c6.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://fbfoffshore.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-08-03T22:00:16.506647Z","times_seen":3660,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":148,"dns":15,"connect":21,"send":0,"wait":24,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/favicon.ico","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/favicon.ico HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 17 Aug 2024 23:20:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2691\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"07279e77f45f18c6b9f18f7b7f94bc9a","sha1":"a93bc5e54ebcfebc37fe403a0e49d7cf7b48870e","sha256":"c781e642bb93fed0e4b4ef4ed8a8b542963d6537c5c15707aa7358bc68be7e92","sha512":"495e85d11e4b81a73dda695049baa5892468782b518653310e71f6853e8b90783fb553e176c85fd9368c77708a9900f39d562b8f4fb297d4781f0c3783fe18fb","ssdeep":"192:jhEsE9EYVjOYZ1jLd+AVa5gCcQJ0GvzW5Y3fm30ampg:jL2EKrZtdDVa5J0OzWaXawg","tlshash":"9762b92a7ecd178cd4110532508e81d0d6686ba9f11cda07d2f9bb27bb2f5146bf2b9c","first_seen":"2025-07-13T07:01:05.200086Z","last_seen":"2026-07-02T01:36:02.787397Z","times_seen":13,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/style.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/style.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Sep 2024 00:38:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 33013\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":313556,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f791be015159fa41b00febfa5d33c4b8","sha1":"44b6890ee5d86d6cc694ec0d3b9c9169d58f01c5","sha256":"ba945acddc478d177f0a6c2101c1a982c6612ec358826575ef07f4df2d2caf28","sha512":"ad1b4cf12edf2eaccd39176fe84a5633d15d81c79f34d39783ea099598d21f4520973084b3fd22aaba54d4a730fc81314f0b4a92480db471042cd4b8905b82f0","ssdeep":"1536:L/Q5eCBOiJyHA7T6V6O64616i666O64616i6V2Q9que3xExiM6O64616i6K6O64w:xHA7TyxExL+DUxUxuxCgRtKxQ","tlshash":"7564539cd226114a6333eb997b81375956749052ef1202acfbf95008a2cd9bc5363fef","first_seen":"2025-07-13T07:01:05.196352Z","last_seen":"2026-07-27T13:48:37.830955Z","times_seen":11,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-8.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-8.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 18 Aug 2024 01:15:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1360\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"348f56af47d11c9ef0199ce79a3be82f","sha1":"e2a93b310037f1e65e5ed26c1dec61fc37503b43","sha256":"04574b37ce17bccce095ee005ba73ee2f01cb94ea741fd8beb5a3484ec3f5dae","sha512":"f3002f25cb619ee083f3200976b5436363a574f3dfbca8c82993a990763dd6b32263987b5804353be2985cfb2688ec4a11bfccac526c2bf300b3d3a70beb8ab3","ssdeep":"","tlshash":"2621b64eef81ad41e095aa822cf3585362750640cac4f151bdcfc95269503f98b9d1c7","first_seen":"2025-04-01T13:06:23.81145Z","last_seen":"2026-05-30T14:24:20.061579Z","times_seen":19,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-20.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-20.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 05:11:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1894\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"29d7348fc61ed0502383bd9914c09c25","sha1":"0389c2dfed967fed366d901063be37649d25e658","sha256":"dcddf10966a70de662966da1038291972b3dbd7921038046dd230728feaeb85a","sha512":"63ab602f22bebe6f70d836253a1484a2640bfb8b8d4128421697d6f7a5b82b1821430be48c883e59edf06bd5330ef9cff41724e3188311afab65d3bd2061f0a0","ssdeep":"","tlshash":"4541d78fcb51aa40912cf95138f6dc6b667127c0dec0f98079cfc54299942f4956e9ca","first_seen":"2025-07-13T07:01:05.177901Z","last_seen":"2026-07-02T01:36:02.832252Z","times_seen":17,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/fonts/flaticon_flexibank0ec9.woff2?8e956bd10ab82df756eccf21dfd64b3a","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/fonts/flaticon_flexibank0ec9.woff2?8e956bd10ab82df756eccf21dfd64b3a HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/assets/css/flaticon_flexibank.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 18 Aug 2024 09:55:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2296\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2296, version 1.0","md5":"953ea9b732e9e3c8536adbd41d6bb390","sha1":"16cdf00c73911c4a435fa4c47858701cdf139741","sha256":"9f9bf1181824e40e5934a287d7ce70f13383b29e07471ade05fb678ca6467232","sha512":"82a775a7923dfb0155c7f8008f93879ef361b80208753acd0b63b65f1630bc3d1b3067ebf5ead3e1a13e8663d3247bf665b2788550cd63655333aa4fad4ff04a","ssdeep":"","tlshash":"d7411953934a4839ced5ccf685b92b3b262c054918befb0ba1a403c860e84d842999e8","first_seen":"2025-04-01T13:06:23.820107Z","last_seen":"2026-07-27T13:48:37.800737Z","times_seen":48,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:18:07.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/ HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fbfoffshore.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Sat, 14 Feb 2026 02:18:07 GMT\r\nserver: LiteSpeed\r\nlocation: https://fbfoffshore.com/index.html/index.html/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41506,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T01:30:21.968587Z","times_seen":17700196,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 02:18:08 GMT\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5ffc15542a2c42f67876d646f086f9eb","sha1":"a075c5d2469c886c1e4c2aeb9be62dcb436c26d6","sha256":"fb05ad76b6b4f1c851a30b94a677bae20d3d99203e83ebdfc3772aa6accc55f2","sha512":"a19fb78fa78c8a5c6fba1a37f25e4860f7011ca00f209d840890ee156fabef593c7de21a57116c0777eec28568fe4a3337afdef886414fa08831d7885b88259c","ssdeep":"","tlshash":"9231df81087b6114e7571dc122ce7e32ef1fa1906454a874bbfe2894fc56c6e5371b4d","first_seen":"2025-09-12T01:48:17.883282Z","last_seen":"2026-08-03T23:59:26.532423Z","times_seen":15644,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":103,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-16.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-16.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 01:11:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1268\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced","md5":"3ef52a70091d41857f8231f0881097ab","sha1":"f449b9e2df8d7bdd43fc24ada2497a9b49f1bbbc","sha256":"2f854cbdd3dd5177c72eeaf6ed739b6d49854b0961395a8f0d04a3855a09162e","sha512":"fa17ff14d5bdb23bce81540dce328386d7e3bb5317c997973e9340a11ded5a0fad44a41a9fa192834a5e8dab99a06384bfc2c1f687623b577fb2d8058bb48c6d","ssdeep":"","tlshash":"7521b70eea427a82e059f9c12cf29513a9210a41d6e4e150788fc4635d6c0f54bae0c3","first_seen":"2025-07-13T07:01:05.163395Z","last_seen":"2026-07-02T01:36:02.730442Z","times_seen":18,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/banner/banner-3.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/banner/banner-3.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Aug 2024 04:02:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 185427\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":185427,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1145x761, components 3","md5":"32889c39fc8f266a184e7e55520f5656","sha1":"bad856020717c1376185f43c036724f39965fbb8","sha256":"7c8d9ec4bea464685004ee5189feef01df53cbabbd3f9f1e7e339bb5826e809b","sha512":"323887d5e3ea16d11f6542a6216b6cb0b85c30711db782fd7e19b1b00fef41d4c9dcc0955fb94970c101e507c086c9e890d845039a64580a61883c31d47336aa","ssdeep":"3072:iYEIIqv3KpeRCimWCelveRBSNqhICLz8P79HyPBuSKVs3sIV2JsdgbyNcb2xpBuy:iYE3o3yekEReliCPg90WVs3sIwPb4w6R","tlshash":"eb042365f1d0c9928af831057cdac400ad171282d712b56d8bdb22b273faef16dd92f4","first_seen":"2025-04-01T13:06:23.789323Z","last_seen":"2026-05-30T14:24:20.091279Z","times_seen":19,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":513,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:18:06.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 10:18:07 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nfbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 10:18:07 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 65\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 02:18:07 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"977d00c8cbbf4b426eaac69646a9020f","sha1":"ccda131e4083e548e5587933b31a849ba2222fa7","sha256":"7f2f22d1c40b1c5d1a02a443889a3435d501265e6252a9fdb25faf8f8ccf5689","sha512":"d542c597968ec8b1d8934085d517ae29412e02ec768d49c40ea742074389b11880ef9c5a118618c9ab05ee05df2c0b9aca986d36747d5ca6a83e848181f58a72","ssdeep":"","tlshash":"0ca011a20e80c208aaf00088c2a2b00eb0a380c88808c083b080c02c00023ea280f8c8","first_seen":"2026-02-13T14:17:05.113435Z","last_seen":"2026-02-14T02:18:33.939692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1896,"timings":{"blocked":735,"dns":385,"connect":173,"send":0,"wait":421,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/color1.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/color1.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Aug 2024 23:14:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 152\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a0020b48b4014098c5dafd89bd3d053d","sha1":"50e4b27de5acd6acb6a3ba73ef4a32ec7c50189e","sha256":"9047b0f73eb202d2865428c603402d355d939d88f838d00fb32881a579699a0c","sha512":"ed75a96d2bde5fd36987106d924489fb27372433a31d7378b64fd116185a95330d2b914d91aed1ceda8e163fa06b03d976bb115855633deb2b58658eaebb9302","ssdeep":"","tlshash":"72c0925c8117160b133705af2660ac1e6730319ced84a704b8cc07c8228d3126cfc8ee","first_seen":"2025-07-13T07:01:05.144721Z","last_seen":"2026-07-02T01:36:02.698701Z","times_seen":31,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/logo.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/logo.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 15 Jan 2026 15:11:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2128088\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2128088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"4b65c4517fcae738bec652183ced9963","sha1":"145cebf93ecab00732e52ca86c3cfe7baccc124d","sha256":"81f2ffdec6309cc876676b511addb2c552c6961aa9da75ab229606887f611c34","sha512":"9f731ead80b403a962d785d9a3722a1161b5813c5b9d3137e2a43eb52e07d27327bd8578485f34e53fc932622170d2aeffe44e751ebc25bbbd408db82dc97cac","ssdeep":"24576:clK0pdkBHMFZ4KlePFk4QwtTHCE2onEZLBOUQu9:cM0paMFZ4KlePy436oEZL4UQo","tlshash":"2225337ff22345e8c7453972c58f3e7feb6576794eba2908202c48cd4229f96d35812a","first_seen":"2026-02-13T14:17:05.125112Z","last_seen":"2026-02-14T02:18:33.944102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/jquery.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/jquery.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 18 Feb 2025 22:15:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29730\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"b83db83a1d89113ee03ab730efa48c7a","sha1":"2fccdd3e43db21bbc8448ed6d6311c4a6eea1166","sha256":"99e691fae5e88eb36bafb24758b35f0f990708295f8f2abe2221891e328f776a","sha512":"10d6f09a04eb135eae12c890be0512ead801e213614505937d1e782d5a6af86550395470ea31b3aebd85695f07a8fe903eda4941e52bcb7278cce02eacb13800","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:vHNwcv9VBQpLl88SMBQ47GK7","tlshash":"1083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-23T00:47:02Z","last_seen":"2026-08-03T23:52:54.235062Z","times_seen":9879,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/jquery.fancybox.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/jquery.fancybox.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 12 Nov 2018 01:52:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34739\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154104,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T06:24:27.74796Z","times_seen":3547,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/scrolltop.min.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/scrolltop.min.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 13 Mar 2024 08:51:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 329\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":799,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (799), with no line terminators","md5":"7659661aad689dbdfda68967ba95d4aa","sha1":"8d1ac94fe3d2370f25beec76a6e523daa90341c8","sha256":"64144149c414bd3ad306e32b89e86b6adfdcafb71d8d43cd6bb6d025670578de","sha512":"017d820636a2177af04ae84196b758cfe8d10b5e2f141a66b6eafd96b30943c9eea8e2eb317325d19f16ebacfa92e38cf90945c33c5f2588fca6157c214f9e92","ssdeep":"","tlshash":"c501af146140d4f452fa507ad2b72ba17932a47f770711c4151a68b63406f3d5b93fe0","first_seen":"2025-04-01T13:06:23.879576Z","last_seen":"2026-07-27T14:18:32.403295Z","times_seen":121,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/elpath.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/elpath.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Aug 2022 02:30:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6220\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"20717265905dbe9b881fffcc02cf8592","sha1":"bce4f6bb81a2e628405aa39f6090d8149affff61","sha256":"6e68d23fe58a350fbded94f9eda2bc0b28a3f39ff7fd47e159f2ec00935ed340","sha512":"041a52922cfdfb271977aafc1bf8e35cb6cce96c771ebd226ec7ae1be1496d391316f0b3206d8948272aa31e363a83f5a8c44348e0e363171142f0053f77f4ae","ssdeep":"384:JhtR1UXm4yl19bLqQGz1k3TPs20ZjcFXNCCfMsW8ys2s6sgJro0Z5Tdsw1O/TdcC:bSX40rJt1K","tlshash":"fe4354ceded1104993b5afb2c7f51a65ff4c11e30d426592bae02886cfb799d00a2dc9","first_seen":"2023-12-20T17:58:58Z","last_seen":"2026-07-31T11:56:19.128374Z","times_seen":182,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/odometer.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/odometer.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Mar 2024 02:43:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 374\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3038), with no line terminators","md5":"5a8afb3e584415473c1744609d78b129","sha1":"e660357f6f4854028b10790de9f69057d7244c51","sha256":"d2d72bf86ad852196bcaa13111c08bf5b778a66f665ad85539751851d7e47e5c","sha512":"5b22c822f67a8ff047e132441934225281029ebda5e63c049bb7fda1eff1572b7ea96040ba1de37c1ce317ecb46862228d41c30cf30b311ab8cf42dbb3116cc3","ssdeep":"","tlshash":"7451d0154f91136863367506bac81b60befce9015223e98e735da54bcf43db9e398b0b","first_seen":"2025-04-01T13:06:23.839982Z","last_seen":"2026-07-27T14:18:32.41263Z","times_seen":124,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/resource/banking-1.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/resource/banking-1.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Aug 2024 01:07:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69475\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 535x436, components 3","md5":"024a43a0c559847e785d7957ba973eb4","sha1":"34d9479802501c0a9815cb2f032b95c451a63654","sha256":"e1845a414053a616a89c651e81cfaf21cc3d4c9acb31a9806ae52f57cf179891","sha512":"9a847d257969183bd6dd8b48ffafc85c71cae74e6dd44d980a0e74599fe8d77be68a20d529d395b1b877012f2f56d9601be7e4f80cbefc7812dce6e991f28686","ssdeep":"1536:OtmvCILhDVZW3xFPdV2VOVr1/KJ43Yj6wexE5Ylh7r/qaKrjTOMYTGaJxPhR6ex:O5IhW/dV2WKJj9elnLxP+C","tlshash":"0d630200e8cc1c74bbbdda1a65d7642d3644646f0ac0ff6b85ef88933998b3cac1b810","first_seen":"2025-04-01T13:06:23.788512Z","last_seen":"2026-05-30T14:24:20.097944Z","times_seen":26,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/resource/growth-1.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/resource/growth-1.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Aug 2024 05:59:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22808\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x170, components 3","md5":"134dea40b1bcf1cb7f212d119c3cc18c","sha1":"3a433effdbae9c3496e888633df2a02c15c43970","sha256":"45c7b02342df9af7566a23d26b881e767ad9a86392406a1e7b47f40e327a517f","sha512":"21ac4aee0f5d60a08657edaa9a1bee066c9f87072245e2711b737e6345a88bc2873c05c06d3dd37a1e729d8ba50c138726d0faeb247908c1597a7d9306773681","ssdeep":"384:0kedONPmjpCk80UsTHpGI1jdX/3C8tOKM4XdxrmDt5+PJwuiXQnC+edy0NBn:7MuBsTsI1jdPyl0Nxrm3m+uiXQ1sD/n","tlshash":"afa2e02eae512d4042c0e10c36a5fa2b3d5059d0b8f7bfa441e49348bee11a385ac8cf","first_seen":"2025-04-01T13:06:23.823036Z","last_seen":"2026-07-02T01:36:02.734848Z","times_seen":29,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/fonts/fa-solid-900.woff2","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/assets/css/font-awesome-all.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 13:28:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 156496\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-03T23:58:18.388736Z","times_seen":49503,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":507,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:18:07.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Sat, 14 Feb 2026 02:18:07 GMT\r\nserver: LiteSpeed\r\nlocation: https://fbfoffshore.com/index.html/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41506,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T01:30:21.968587Z","times_seen":17700196,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/font-awesome-all.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/font-awesome-all.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Mar 2024 07:03:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22940\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140738,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"a7aa3f8e45fa05eacb1611ba122bdd20","sha1":"dd6a2c18985e95f4014b88e04b6a5b4451d998a2","sha256":"ac338b6f307e6f362709830d571e2ace3d3e01d2334f9ae597e1e9707466db44","sha512":"e657152087446da8f3a8977c42771b841c1ca1486c14e7718ab7a5c8b38df1440ff7e029dd0d4c5105300a453252bbf8c22aaa76ff84a4b79985013c559ba1f7","ssdeep":"1536:icmSm4mSmKmSm/mSmHXmSmumSmymSmLspOUB7WwHFJeJsEypx5nOxdFnYn5+Wqh+:VPB7WwHFJeJIlgYn5+WqhoFazvPW","tlshash":"33d376fad0ff10d48311e0892647e3a4b739b62c9c4a4c58e2a67d8de6c165cb1c6bdd","first_seen":"2025-04-01T13:06:23.824627Z","last_seen":"2026-07-27T13:48:37.803788Z","times_seen":56,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/responsive.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/responsive.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Sep 2024 11:04:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4046\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31034,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3901034613082e51966c48a836470857","sha1":"c86f74c0d6fda6483229f19a9b0da57366d2617d","sha256":"555b7cc90013cd4207ffb589d94ab2402d2e537793c01d0d66a5ccc04e789f31","sha512":"d6d3c946cbcad9fe991c1c24a41e286b58d2eb4d617de79953783ec0c499c99afffbd70d3d8146ad00c9450d014b477ae58c52f9630ac461dfcffee09e6c72b2","ssdeep":"192:bHrd3HZs/Ko/vm/sCDwxHBQxAM95akCfqWWsMyPKODpNus8EYp3O2BQHZzkRrCzB:MAOTAp8Zed2","tlshash":"d4d2870ce9022c0962f2b746efab7249db539073db4101c5baf5d144cfb9198868afde","first_seen":"2025-07-13T07:01:05.234415Z","last_seen":"2026-07-27T13:48:37.831711Z","times_seen":22,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/resource/growth-3.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/resource/growth-3.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Aug 2024 06:00:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26795\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x170, components 3","md5":"f070a1537c893391cf4702fc3cd4b5a8","sha1":"aa50ed9002a054223da4b856db0dc6407c45b44e","sha256":"3ef8006c34144b4d8787647318fd590182e398cf0294365b9ec1e98dc4cf51f0","sha512":"4064d2638ef9dd8b69f42f74be2d196bb454ff02178cda3d22c3e9a3b73b37d52511f108680e88e0a78792d10e32c7675edf686b8ec68ca5c566420f773a4dfb","ssdeep":"768:aJ0Pocq6ZFRa7liZYMGspGFSQ5mDHg6BUpUTbUwEtm6Sx:Myo/p7liVGHFSK8Hg6upUTbUvtFm","tlshash":"7ec2f2075c416c069289ddef7be4d7b6c82b1432e5e9f150d4c6c062a8420bfea7dd95","first_seen":"2025-04-01T13:06:23.814657Z","last_seen":"2026-07-02T01:36:02.817829Z","times_seen":29,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/appear.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/appear.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Dec 2018 01:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1234\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5a457d262e3c32d25c003ca412ee7fe6","sha1":"b08e23c986259073419a7068fcd36296a91b1ae4","sha256":"46fb2235bcf84086a9b939ae509ecacc01bb31c68ba94e6473e31d8adebec3eb","sha512":"826945d028efc7a9f95c22c5f4d34dfab6704b75f45e7d6fc2e93e2b42f7078aaf7b8508f9155b36dd15ca759a765fff3b4550f17e3b187e79285f63de455d53","ssdeep":"48:3l3Xwqhd24ayV+zFLAPftUIeohhR9zIreFfFoBSxMEh1u1cq6KjD4W7j9:V3XWz1zFkmDo7R9cr+YSpTocqBksj9","tlshash":"7391db4a759b2ab54877722a9f2fa20cd721513b1202c21138eede6c2f71c50a197fdc","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T19:40:53.884906Z","times_seen":4160,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/banner/banner-2.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/banner/banner-2.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Aug 2024 04:01:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 230638\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":230638,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1145x761, components 3","md5":"070b2b8c2d2ef3290388a40a377c9790","sha1":"8d004d6030ba1f2c5f81e40cbb1b4a8204b123d7","sha256":"4cefdd4e363052531d24c6c1b6ceaafd058d107425ec41ebe6e8e386cff526f8","sha512":"2ea178bc44a27691b94d1964e81d05a6cc076d68c78f6a81658cae8c3cb0693efc9069f123eff085fe747de599036af6270ea8bfe8148023ecb65e2474a7c107","ssdeep":"6144:I/LS06PjnjLiufsDSauGK0jWkFy1dS3jZR7Jt18e:gcjLi0scGYuId6tb","tlshash":"0e3423fd1aa010d9bbb48bf6fe390d9ead17dc57aecac3929858cc51d6013209126f46","first_seen":"2025-04-01T13:06:23.855314Z","last_seen":"2026-05-30T14:24:20.071301Z","times_seen":19,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":511,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/flaticon_flexibank.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/flaticon_flexibank.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Aug 2024 09:58:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 612\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"70a61a6fb34d45202c94adc38606e30a","sha1":"418e2bb1ae8ed90be8b3ec52f34e1307c5f676c8","sha256":"fbe2700c73fd6b13a764829e6adf83017bce716c2465edf5dd0299708b240ce6","sha512":"44d8b3b49d350bcdd97ed1ed6925a873c031606890de315b4da78a927e4f64b5799c1c61b2d19d3a9038ff0a0d9fef0a463560b0c35949003a17f1aa34abad2b","ssdeep":"","tlshash":"fe4115a844ba1450575099e626bb6326ef08701b9cc4dc6db249ae9dfff2e91c3613cc","first_seen":"2025-07-13T07:01:05.218381Z","last_seen":"2026-07-27T13:48:37.843058Z","times_seen":17,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-17.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-17.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 01:12:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1391\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced","md5":"5cddfdffd5b244f467121693fc2f6558","sha1":"9cef0fc135b3c75b3eb3ede2078d5f8d9bdb4003","sha256":"8f5402555e619fbbafb10aad57680203fc5c2e775a83beb9284b09a671bcead9","sha512":"f353dc1cfa3c43967fe039daff7898cad31ba307905fded5174dcefe9e2bc42f6ac8e4e9f85d25e4f9edf6f149252c3e095be08a3fc13f5b6d580a837db8d5f9","ssdeep":"","tlshash":"5621830fea41b801c588ee912cf3a82749628241cad0f8a578dfc4971db41ba8b5e6c7","first_seen":"2025-08-08T07:36:26.357606Z","last_seen":"2026-07-02T01:36:02.77704Z","times_seen":14,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/resource/growth-2.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/resource/growth-2.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Aug 2024 06:00:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26624\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x170, components 3","md5":"0393e20ae534bd97ccae6e4305d99c75","sha1":"3b4f9b46f7e56d01909af9f19d45d739c35871fb","sha256":"1bdb0bbe5e3383481ef6413b4a2a05b5de5330e8bbc10d38d63500321ae39cb8","sha512":"223cf2a70dec1306d317ccf90f6a52fa55d9ce1d11e35f1b6f95f4f4a817e93e4fcc56dc412972d4a796e10a8983de40a46f32b434bf91e3088075a1569dab53","ssdeep":"768:CbkzZilih7LoFPqQpN4Vk1sDNxwKpwo0MIedG:Jiy/oYPVkiBxhLIp","tlshash":"91c2f11d85995e3052e0947f0edac92e1b2b31704eeb4994eaee5ce5f070df128ee14a","first_seen":"2025-04-01T13:06:23.818156Z","last_seen":"2026-07-02T01:36:02.755032Z","times_seen":29,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/banner/banner-1.jpg","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/banner/banner-1.jpg HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Aug 2024 04:01:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 204456\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":204456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1145x761, components 3","md5":"175b2fb9dd362e5e70a3a164576058eb","sha1":"788ae4cdca8a49c434f280b263637b4f4d738159","sha256":"2fd4c8fe0fec5cbc30bcf98599c1a26be49e122140c8eb7da1f8c5782f89d24d","sha512":"9a8b8c7ec01ba4cab6c1c3dae04d3833e8cbd5d06687b3cdac7632e09d43fb92987f6143b5da4d941ef2303174e9dfb3eb7c04ab506be2214c85d8edc169750f","ssdeep":"6144:KmjS5wXBrSOxf6yK8fJDqt1lbo585x5UF49:KJOpSmfxf4jxEm","tlshash":"ed14236369177c85628d1bf2006ae682f539dfea1c31ac261e30a45fff7d81bd902365","first_seen":"2025-04-01T13:06:23.826137Z","last_seen":"2026-05-30T14:24:20.097325Z","times_seen":19,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":500,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/bootstrap.min.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/bootstrap.min.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 21 Aug 2022 00:15:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15506\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60104,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59825)","md5":"e6f488c5766fb06169100bdbd2b4fdbd","sha1":"f7365985962f78092d8eeaca6d6633d6fbf75583","sha256":"0ce9de398de7e7ec63e836b70090643c7c5a3f29ea4a519a67defdd206c13ac1","sha512":"f18f1e18af76773a2ec2944e229a70afed243dabaed2aaad9f365934417c3dab79b6e44d2712570a46d07c9d079541b7cb51c1df3d7c0922a6528ee2db370fa6","ssdeep":"768:KZYN+vOLYakObgUDZj8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnl+G/AX22b+:Kk9PXht8xm+Yx2UPnAe","tlshash":"2443a5563244b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863276bbc","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-08-03T12:36:05.894982Z","times_seen":674,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/nav-tool.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/nav-tool.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Sep 2019 01:17:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 318\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1086), with no line terminators","md5":"e28a1be506d3151bad02d20a7751f09c","sha1":"d0a106cd4d593b36c86c3740d26b6d332c740207","sha256":"e35de31330187c0f62603f8b770e2969cbc3fe0d885aa02c7dcdd6fbe5134691","sha512":"e7faae5c7937eb0e2569b90d0dd804b6f0a5c72d30f148770f36c5bde1fec88fe412be41416f91d1caf5fdf6a07059a31119673bdd003ec9f70789eeb9c84455","ssdeep":"","tlshash":"ae11aa68b830e2fd01fb631930139e40c23a0dc5ca2c1d95982019882e6bdcf41eb7fe","first_seen":"2023-03-07T12:02:54Z","last_seen":"2026-08-02T23:53:25.958915Z","times_seen":944,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/bootstrap.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/bootstrap.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Aug 2022 00:15:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26683\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":237895,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"f189b04d1500e419b2211b3ef44d8a84","sha1":"c16117a762fdb67487c6ddd797e5bb57711047c4","sha256":"331672725bdb0b9cc1d6a4b2244c02473cb0f59121802292ac3327b76c166b91","sha512":"c66cf553b0d1f063e86b2298397633deb83bddd9595645a4cbc099ae66a6072238f1490cc1fb823e89268e77a728fbf4fd6061d49390817b791a00a51e31c5f6","ssdeep":"1536:fBK5SE0/geRhzzT7K3HHnC9Df5E9guYSN5g1yl9SB5/k7uptIjNbPZb:flgeR47uptIjNbPZb","tlshash":"cf345458fdf12828387b9259649abef9bb7c5082c60dcd75b5d32224cf893d15ca29c8","first_seen":"2026-02-13T14:17:05.177006Z","last_seen":"2026-02-14T02:18:33.967164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-14.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-14.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 01:02:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1829\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 30, 8-bit/color RGBA, non-interlaced","md5":"47d6e0057672536ea306f65c0a45fe45","sha1":"7cf8023d37217e67745774d5c54180b88a48cafd","sha256":"e5992c0631250aad4d1760d9ef93978ee81c483ace8370851411a9cf8bc2b04b","sha512":"9d75d16b6db812ae540cb1dc1438c740f571f478c9409fda4d97948eeec9bed7d73eb16c487d23f4dc075c63f5321a00c899dcbd4d43b00d79ddab17a6f48f50","ssdeep":"","tlshash":"3b31b74eea847c41f654bbc53cee54236e710a51db91e5a4bd8fd0136e641fd45880cf","first_seen":"2025-04-01T13:06:23.839057Z","last_seen":"2026-07-02T01:36:02.828988Z","times_seen":33,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/wow.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/wow.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2015 18:30:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2037\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6300,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269), with CRLF line terminators","md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T22:31:25.272791Z","times_seen":5469,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:18:07.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/ HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fbfoffshore.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 21 Jan 2026 17:30:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4712\r\ndate: Sat, 14 Feb 2026 02:18:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}],"data":{"size":41506,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f2a6ea6a392a2c6c571f6a3fde460279","sha1":"2f45e203363a2ac3a5d9ab5e70b132ed0d80abc2","sha256":"3634ba99e04e519fc6ec7ed5e687e07b6267ea702c14f9877095b2b9a000fbca","sha512":"e008e113b150187317d18f16b52398ae1cfb4ea55e54eb7df1493bc6e082aed471ced49919f61752d7284f81b5d18f6d1de0302233b4b69464104c98d94ea165","ssdeep":"384:IvZuJvOUw3D1yQrCrrrpurpYrpoaaNkplF06:KZZN1BW/06haNkplF06","tlshash":"c913be3254f1506711a380d96a616f0b6fc2da07c95b8a0472fc4fd82fe3e86cc1bd6a","first_seen":"2026-02-13T14:17:05.122842Z","last_seen":"2026-02-14T02:18:33.971628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/owl.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/owl.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2019 12:49:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1210\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5688,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7ec7e3d9f969062bf0805bdd99d7f885","sha1":"3af9183b94c5bc6de219c5c935c83b158952a107","sha256":"1cce5c51b827342a7d688af05f164d3eacdb73b1e3220d8866c17c37323f1f0c","sha512":"cca74b042322212bc3c42c2f2151af694aca2310d8ba4d3696f67ecfca766cf8db4967aca1de713f9e699a1a5089d9c2d548f1639294cb490fb29745abad7b48","ssdeep":"96:2VhwmIexMx+i+ATjFG1oVtcjxYfmIeHHcN:2VhwmwjT8JjYm9n2","tlshash":"4cc111ec1221114d64378ba41b9d961a7e3d94a1ee02058cb9ef671283dfe5c902ff6b","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-07-27T14:18:32.449391Z","times_seen":281,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/owl.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/owl.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Jan 2023 23:55:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19365\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-04T00:14:54.81725Z","times_seen":12657,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/isotope.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/isotope.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 23 Jan 2018 13:08:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9890\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37779,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32039), with CRLF line terminators","md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-03T22:31:25.27964Z","times_seen":3278,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/script.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/script.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Sep 2024 04:29:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2882\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14841,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a27e46de49a9494789d6722e63adc1d7","sha1":"15ff74f8701ffe54c181bfdd2d4af522242c2ba1","sha256":"72b3b5fd6a6e71b0317d92653d20ed98f0d278874a4695b73c3c895992e39bfa","sha512":"0167ddbea94ad97d6464c4367c7d1ff9c92c3afb8e109a38e8a73697c84e23a93b59d429f08dc911f967e41281f472bd96d43e933a47205c51a9f09a70d188dc","ssdeep":"192:H+Taj3LFtCLVR0I9Jwau3DRKfhMLs5rMLC56M1g5iQMPM5aWMf4w5hpLMdQK5hpG:H+vhR0IT4MPfU5egObN5cFggzREPHZ","tlshash":"6f621fc0b36e56af12fb3352913d5940af6cc436c18160faf4fe25286be834932a5e5d","first_seen":"2025-07-13T07:01:05.2389Z","last_seen":"2026-07-27T13:48:37.817053Z","times_seen":19,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e153-4684\"\r\nexpires: Sat, 14 Feb 2026 02:23:01 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:23 GMT\r\nx-77-nzt: EwwBuUwJCgH3AgAAAAwBuUwKCQH3BQAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f75420e9c0e4b060db8f69ff10a938\r\nx-77-cache: HIT\r\nx-77-age: 2\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":73,"dns":32,"connect":7,"send":0,"wait":8,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/shape/shape-3.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/shape/shape-3.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Aug 2024 10:32:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284281\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":284281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 430 x 603, 8-bit/color RGB, non-interlaced","md5":"17acd0de3b9831abfe9f81bbf095f27f","sha1":"adf2ac3f0d795c125ce79c36a1fcedd59d7dd837","sha256":"a81e89bd73ec13eeab9752449dee870d6818204af38c0060c871dec259adf077","sha512":"28a8daaa97eaf5519ea998784ddf85a6e81655c0c47ed9ceb108cf78085af69a1e158f6507f6b6683a5fe59cacf1d218bf13d4ea747a068c41b30d16fa5b88f7","ssdeep":"6144:C1ic6Exmdg/sYWKuIt2drS4JwmDGVPIfxtbFzBK230cu9d:CIixAg/vEFNDGYxthzBKnd","tlshash":"665423e52d74f8752951604a00f5fb918948c37294ea11ce09adbfe77a78eb33d10be2","first_seen":"2025-07-13T07:01:05.126441Z","last_seen":"2026-07-02T01:36:02.801585Z","times_seen":15,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fbfoffshore.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:33:59 GMT\r\nexpires: Tue, 09 Feb 2027 20:33:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 366250\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-04T01:04:21.972424Z","times_seen":23911,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":113,"dns":0,"connect":20,"send":0,"wait":48,"receive":2,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-33.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-33.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Aug 2024 11:43:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1276\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 15, 8-bit/color RGBA, non-interlaced","md5":"d161b23aec185fe7227fd0172dcac7f4","sha1":"1db72abf7b72e30af82f32322bdf91a9a1ef1b6c","sha256":"e377df84c3520eec2c37c24267b586091b6d53b34f4b07cb1e78a188588b1863","sha512":"fe0c7c0a3b015e2e258a3c33822d71c0612d644423a944d4cfad7875c39a19f314cbd0957488895ee588104dac586964c69cd469376e5ea40f557333b2f76591","ssdeep":"","tlshash":"9221754edd017a41915ce9c13ceb0427d9634640d5c5f5a07ccfc557ae302ba455a9c7","first_seen":"2025-07-13T07:01:05.132255Z","last_seen":"2026-07-27T13:48:37.90233Z","times_seen":19,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Hanken+Grotesk:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Hanken+Grotesk:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 02:18:08 GMT\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bb39fa649a77fed657938f63e0b4f8ae","sha1":"bfe30b0adc944d1d38d80f372cd4007d24bc0935","sha256":"9babb6a4abc7125f730fd571d0506bcaed51c5e38ae55ed217ddf9c27961cd1b","sha512":"d3c67eb8fa7e262f0523d01464dbb4f1930adc3c947d30b35c8fbe63f57870859b7d75de99fa56dc68c79c2e5e46cf6692dcfec21a363ab06a7f3acde54ef179","ssdeep":"","tlshash":"7461f09104679158ea831cc233dbbd36ae0fe614b044867a7ffe648aac9bd516350f2c","first_seen":"2025-09-10T07:25:06.865029Z","last_seen":"2026-08-03T05:58:31.649349Z","times_seen":168,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":132,"dns":1,"connect":27,"send":0,"wait":94,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/nice-select.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/nice-select.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Aug 2024 23:59:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 782\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"674848dd55ad4513f925ec46023ec259","sha1":"28bfae567038caa99ed67c48e438dd71a9b3d957","sha256":"a2e80af54aeb5722550dea00f4475b5db5e787842baa3ac2d33d50cbd3e0e127","sha512":"cbc0fc8b15b738df3a7606ff40aab21b7808e4107af85b8b2adadcda06c6d3d6b8f1f07114955075cbba4588b8ddc47a21a7476a858d5bdc1859e05b5d93ecd2","ssdeep":"","tlshash":"4351c166d7530552206e467f7fd66a48233dc003b436ce6cbbcc96078f0e59868e5747","first_seen":"2025-07-13T07:01:05.112532Z","last_seen":"2026-07-27T13:48:37.926151Z","times_seen":47,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fbfoffshore.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:44:42 GMT\r\nexpires: Sat, 13 Feb 2027 00:44:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nage: 92007\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-08-03T20:52:44.554338Z","times_seen":1391,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":62,"dns":0,"connect":7,"send":0,"wait":8,"receive":8,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/jquery.fancybox.min.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Nov 2018 01:52:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2938\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-03T19:40:53.913262Z","times_seen":7052,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/card-1.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/card-1.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Aug 2024 11:18:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51045\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 452 x 285, 8-bit/color RGBA, non-interlaced","md5":"eda5c62245a562242ae6638f8a427d79","sha1":"e06f32ac247dce2ef3c190d1ae6059c106b67c34","sha256":"d816ef9bb2725bfcc01cc0139eafc44b90b281a4c9e0e65e341adc9adc5618ff","sha512":"a49d9936640f7e3191816b5e341612a26fb300ca3bc3b0cd6a76c1b20aa9f4e2d6a62ae064be0bb2af391b2ae74f38dab929db386be178b71ffaa46c468887c1","ssdeep":"1536:E26y40h49tXTCSFQZZBjh2tp3K9ysbIibVy1sWogZ+f:/6yVkxTiZZxhs3KHbVTxh","tlshash":"b93301cfd02159e1f084a47265717ca6e85bd6de86b4fa4430be7812ff296720c8d6d3","first_seen":"2025-07-13T07:01:05.204017Z","last_seen":"2026-07-02T01:36:02.668671Z","times_seen":17,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/css/animate.css","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/css/animate.css HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Apr 2021 08:49:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5127\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87995,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7f13658d912dd28dbcc9cae913c6da9e","sha1":"0911bc3520e476c1bd78f3dcfd22bc0392c553a7","sha256":"ecc3ec4d5270b6c94a9a52e909dd8b0a100b4745d9b6591758b127e10eb85f2a","sha512":"f59e790c15f4ab82ef466cccccdc7ab5fa3b29d24554a5617dc156caf4cb34972323f7c3f9527cd3b642f7e9349c2f5665741edb5b3f04307e82a5da8d75510b","ssdeep":"768:I1A1vYyY21f1NYtY7XXYzYtYOYrVDV5YMYvbYql:dYyYaYtY7XXYzYtYOY9YMYvbYql","tlshash":"f3832d5a1c41118447724b29d7de8f28eb3d957318222eee73c2588b8fb6fa853c9d47","first_seen":"2023-05-23T15:21:36Z","last_seen":"2026-08-01T04:36:03.176402Z","times_seen":374,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/jquery.nice-select.min.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 31 Dec 2019 07:23:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-03T22:30:56.023904Z","times_seen":10433,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/shape/shape-1.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:09.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/shape/shape-1.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 18 Aug 2024 03:38:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 208541\r\ndate: Sat, 14 Feb 2026 02:18:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":208541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1044 x 761, 8-bit/color RGBA, non-interlaced","md5":"9d274eaeb3f25d03dead48150c5ecd8e","sha1":"3cff467f3140a2420a778f44ef52bfb9ec1dfc9f","sha256":"17a6001d01f207067bff25d05ea0e10858d436879d8a8d1e8fdb84eb72e2d715","sha512":"55b68c3fe1ae9f10ce74f950e3b199afec22dffbe8401fb8460f91ccc09f1a5560815fe7781acfccd895f69e40ef85f94244d7e5c956abd009140744dd8badfb","ssdeep":"3072:FR837LlsCUxEnOKjsyHIHzcHfjnCUYEdcMf8bHEdHBq+MZ1QJeAHcara:AL+Cmysy+MfTnYUa7EdhqJ1tWa","tlshash":"4714135fa177ef9c00587a2033cde2c3834da3a1178fd6d61ba50b758a288f29355b5e","first_seen":"2025-04-01T13:06:23.835983Z","last_seen":"2026-07-02T01:36:02.672834Z","times_seen":33,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":507,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-12.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-12.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 01:01:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1963\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"bcb7b4307638e081a463b7cfccea3199","sha1":"87bd52ca83f5fd46648ebfdfd975c755eade8a01","sha256":"b0e6a33759360d9c1963af1f77494560904527d90b02e2afa3a999f6038e32e1","sha512":"e01af23d89a44ee89b134691b38d1305696c09ca1db61350ffdfa56354a36b1e11b995e98164d7429bedc8dc51636daf476cb253f9e072edac85be3d69e881ee","ssdeep":"","tlshash":"6a411d4fc8813501d408f9d626dae1267e174951c384f892fcafc89d1e3d1ac47ae8c7","first_seen":"2025-07-13T07:01:05.178916Z","last_seen":"2026-07-02T01:36:02.815862Z","times_seen":33,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/images/icons/icon-13.png","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/images/icons/icon-13.png HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:18:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Aug 2024 01:02:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1669\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 30, 8-bit/color RGBA, non-interlaced","md5":"b69fd6c68fdbac4a1d312b6a693a4486","sha1":"2f8ef87a210aab6115fb9c6eab885126cd19d89d","sha256":"14478cf622155cc60cf02af117f7c88f0b23942308a9fe104dda2c615add547a","sha512":"a5d22ee7efde8ebbf92d95c53ef679d1ac81a52ba80b04aca7626d851c789f5a10e28bcc48ab059a2050406530736da8ea9cea15c967f46df12dd2903980a4d5","ssdeep":"","tlshash":"f431b84df3506443e594bd9224f6e11fab930a90a8c5b4a1fcced40319262f8022d6c6","first_seen":"2025-04-01T13:06:23.813716Z","last_seen":"2026-07-12T16:44:01.47699Z","times_seen":38,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/validation.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/validation.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 20 Dec 2016 08:43:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11747\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36157,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20948)","md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-08-01T04:36:03.170543Z","times_seen":1171,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbfoffshore.com/index.html/index.html/assets/js/odometer.js","fqdn":"fbfoffshore.com","domain":"fbfoffshore.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbfoffshore.com/index.html/index.html/","date":"2026-02-14T02:18:08.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbfoffshore.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 15:06:57 GMT","end":"Wed, 15 Apr 2026 15:06:56 GMT"},"fingerprint":{"sha1":"D7:FE:94:92:62:93:A9:CA:87:44:B4:3C:05:76:AE:1A:69:A2:B9:B1","sha256":"51:B7:FD:35:04:71:77:59:8D:8E:DD:4B:4E:D4:6E:3F:A4:07:7C:C0:93:B1:6B:4C:D8:47:DC:6F:9D:C0:AF:59"}}},"request":{"raw":"GET /index.html/index.html/assets/js/odometer.js HTTP/1.1\r\nHost: fbfoffshore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fbfoffshore.com/index.html/index.html/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9BUEVWWCtoQkhUb3o5RDNkYzhXb0E9PSIsInZhbHVlIjoic1U2eGZtcHloOTRNdGpCRm1zR2VPMXRzNyswTHpIOVdLK0F3N3hJbHFnZFdHbm1MSnZGeTM5S2pKdDVLSThYY2sva3p2SVNwYUV4Uyt3SUU5ZzNpUmh5WFhYblVtZGF1cGh3QnBNRmtSWG5aRk00bUtvUVEvQXFWZThiMTFpYnQiLCJtYWMiOiJjZTU1Yzg1OGIwZGNjOWI5MDQyN2FmZGYxMWVkZmUwNjQ3YWYzZWFkMjc1YzVhZGE5ZDFmMGYwNDVkYjYxNjQyIiwidGFnIjoiIn0%3D; fbfoffshore_session=eyJpdiI6IlovbFVwN25OaWc2NG1wTkxDYWhIRmc9PSIsInZhbHVlIjoiWC8rSk9RbHhNRy95RjlwZmxDUzZNZzd5N0thaXRIZDdxdk13bVZ0T1htRy9tZFhhTThRb1B1aFhTNTZ4MEF1NEl5MlREVkcwSHE2U01nVlUyb2piT3MzS001cXlCaHIxWVVLTjROK25XMHdwMWc3bC9PcitQUFViaDZmSCszWTQiLCJtYWMiOiJkMDg0MTQ5MzZhZjVmNTMzYjhmZGEwYzE4OTg5NTY2YjMwNDFkMDNkODIwNzNjZTQ1NTZlNjIyZDI3NWYwNDc5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Mar 2024 02:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3374\r\ndate: Sat, 14 Feb 2026 02:18:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9896,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9874)","md5":"519a5777444f5965b6df23e26c69f037","sha1":"fe5beb60997c84ab2f91b54535c4221443cdd21f","sha256":"03c1e188b884240e56a79c39b6918e16e9cfdf9b4ed4e84d5d8efe71fef778ae","sha512":"3ee200bb01031ea959bad625e2294fdf810b5a3d667d8c69330780be938c2a07734cf3a6c42b942bc9b28142c1e1d2787a835c1afd16089eea2dc9dccda29f83","ssdeep":"192:xABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:aBhvk8QecCa07z+Wd/T","tlshash":"80129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","first_seen":"2023-03-07T01:14:43Z","last_seen":"2026-08-02T07:58:54.669125Z","times_seen":1554,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fbfoffshore.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}