{"report_id":"8e438dc0-5e06-4c7d-9852-785cb981673c","version":6,"status":"done","tags":[],"date":"2025-11-04T11:06:04Z","url":{"schema":"https","addr":"fartcoinairdrop.live/","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fartcoinairdrop.live/login","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"title":"$FARTCOIN Airdrop Dashboard","dom":{"size":4435,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2304)","md5":"b369bebd2457e73d292cf31cd0b63da9","sha1":"399fe82060959b289e5c8cfec4e660a7ad5dc167","sha256":"036893606a5dc9cf424869438ad8d358940f3cab88607dce6c3e25db72e67991","sha512":"f045a89ac4f49f81e863a43bf7692897444ebdbc0ca7c138bcf8b61995dae70eca0619baa3210b33be7bf47fcde4c365cec578b2f165833dd234efe225db1d1f","ssdeep":"96:tAC3FA1cgx+M73sQ8egsBPmmzD46XX/kBrK6P8xrLRfQi:t61NmmwqRhfj","tlshash":"a29153be450a187b6113b935f5a0be47042ea20fe5fbc490b1d78a57e9da7c6cc12d38","dom_hash":"domhash8a26264b4538b617c320b36cdcd7d740","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"https","addr":"fartcoinairdrop.live/","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-09T11:06:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"fartcoinairdrop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":2,"received_data":115038,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":1,"received_data":144732,"sent_data":1796,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fartcoinairdrop.live","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-04T11:06:05.284337Z","last_seen":"2025-11-04T11:06:05.284337Z","alert_count":5,"request_count":5,"received_data":406440,"sent_data":2248,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fartcoinairdrop.live/assets/index-C6cynb4s.js","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f80e01fe93114e4bc5f669f03ce204","sha1":"ca81ceea5648d976847843acd111c67af675a18e","sha256":"c9d40152c820876d0fb7b7b8820801e8a3ed5e29ddbac7d468bae870741c18bf","sha512":"c87b826abb37bc708c3a5012b9c0b6f2d3f44af2bf15c8a04b55014973db8ef4a2b3c3c2b2e8aea204f6072ff06b9317a4b35d7984fbb6e95678ee9848a5deec","ssdeep":"6144:bbw0VZqcL1n/S+9YSALnq2LSw3rs3EJst1yosLb1nOVtyXuXmgP:o+qLZrs3EJ8IL+Xt","tlshash":"34644bd830a6b1756bf386a1503f410a733d2912780d8460f12deeaa7a75506d2bbffd","size":327464,"data":"","first_seen":"2025-11-04T11:06:10.404712Z","last_seen":"2025-11-04T11:06:10.404712Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:43.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fartcoinairdrop.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 11:05:44 GMT\r\ndate: Tue, 04 Nov 2025 11:05:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144046,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"43bd1cbedefef5de267808b11cb7f248","sha1":"6ca42583724c4b56a943c398c215bfab9aab10d1","sha256":"5fe86da07b3c2fca4bdf2345409e9381b7e3efcadfd67dc2f910dd6a5bd0ef52","sha512":"1b4e06488f28ca1c7d62a628fa1c80a3ba78036c19ee83adc76b080171127e3f01a289c78942d7c717a3e82aee0c1e277947e68d0b98807c61914fd3540ee5ce","ssdeep":"768:CHFCevmEAr+DCS5xFJNGo6n3wafwe0utoEA3mkn/1GPl2/fZJxFGtffNQYAEm3Et:0VXPNohdiCNqHvDyWNpQ9","tlshash":"35e31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2025-09-17T23:15:24.834785Z","last_seen":"2025-11-14T01:59:56.516124Z","times_seen":73,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":136,"dns":1,"connect":27,"send":0,"wait":61,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fartcoinairdrop.live/favicon.png","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:44.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fartcoinairdrop.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 08:34:05 GMT","end":"Mon, 02 Feb 2026 08:34:04 GMT"},"fingerprint":{"sha1":"8F:6D:F3:8A:2F:40:8B:25:C0:28:33:BB:45:00:B9:FD:B6:49:B0:17","sha256":"95:83:84:95:59:C2:FB:C9:5A:14:E7:5F:03:1C:77:33:23:C0:C7:2E:17:6F:ED:B5:28:C0:84:1C:61:08:2F:69"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: fartcoinairdrop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fartcoinairdrop.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1145\r\ncontent-type: image/png\r\ndate: Tue, 04 Nov 2025 11:05:44 GMT\r\netag: W/\"479-19a4e3d0448\"\r\nlast-modified: Tue, 04 Nov 2025 09:40:13 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8f7a9a330b07715ae0f0430107053df2\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ed6740d90cd839744d48523d4991a6f7","sha1":"a8e4f5b4d7be660dc6f5279389a88b0c95f5f21d","sha256":"b6acb73abb0b7e8e808d72c016e81d97860bc7e7e0eb4f06ff76ba1d16a5b04f","sha512":"d22ab125bfc6197c15d72e5119e6621e82dc0f841fde4510406ef791e0b311826c9d2d80f39230ab3f64f27750cd6da26ebd8180e455cd9a430601e386f38faa","ssdeep":"","tlshash":"6d21c64ff321e8628d9d9892290397640c11ebd0bd49308f480a5ff17572ab0878e654","first_seen":"2025-10-27T15:21:57.79985Z","last_seen":"2026-08-14T02:41:30.738369Z","times_seen":298,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"fartcoinairdrop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fartcoinairdrop.live/assets/index-DhKon988.css","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:43.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fartcoinairdrop.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 08:34:05 GMT","end":"Mon, 02 Feb 2026 08:34:04 GMT"},"fingerprint":{"sha1":"8F:6D:F3:8A:2F:40:8B:25:C0:28:33:BB:45:00:B9:FD:B6:49:B0:17","sha256":"95:83:84:95:59:C2:FB:C9:5A:14:E7:5F:03:1C:77:33:23:C0:C7:2E:17:6F:ED:B5:28:C0:84:1C:61:08:2F:69"}}},"request":{"raw":"GET /assets/index-DhKon988.css HTTP/1.1\r\nHost: fartcoinairdrop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fartcoinairdrop.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 73350\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Tue, 04 Nov 2025 11:05:44 GMT\r\netag: W/\"11e86-19a4e3d0830\"\r\nlast-modified: Tue, 04 Nov 2025 09:40:14 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 23ab50ecef8a3ff1e0f0430107053e8c\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":73350,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"44cc607f4a381c524c9f7d5eb819c71e","sha1":"e70236fc647f46691748267543a1ca58abb703b6","sha256":"a24261313ff5a1fcbdc060760e789a9953e8fb6a1a19c951c450e60c0479544e","sha512":"a441586f6ae7c785d16cd6ad0c5590eb4858548a5e53f813adeb35c2071ceeab48bd48451a40791ac4b9dac245e0025f2e0a6cd9c5af9491ff86a86bd705f349","ssdeep":"1536:bofh+BKYiw8YUWO+47zBHx9O+47zBHxZ4MGpfC378VQZkt5FxPbJ2b:bofh+BMw8YUWO+47zBHx9O+47zBHxKMl","tlshash":"5063962db918503f2d6790f4d38cbaaca10af1c0de3e05e6be9a413166c37f25da7654","first_seen":"2025-11-04T11:06:10.404016Z","last_seen":"2025-11-04T11:06:10.404016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"fartcoinairdrop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fartcoinairdrop.live/assets/index-C6cynb4s.js","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:43.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fartcoinairdrop.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 08:34:05 GMT","end":"Mon, 02 Feb 2026 08:34:04 GMT"},"fingerprint":{"sha1":"8F:6D:F3:8A:2F:40:8B:25:C0:28:33:BB:45:00:B9:FD:B6:49:B0:17","sha256":"95:83:84:95:59:C2:FB:C9:5A:14:E7:5F:03:1C:77:33:23:C0:C7:2E:17:6F:ED:B5:28:C0:84:1C:61:08:2F:69"}}},"request":{"raw":"GET /assets/index-C6cynb4s.js HTTP/1.1\r\nHost: fartcoinairdrop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fartcoinairdrop.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 327464\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 04 Nov 2025 11:05:44 GMT\r\netag: W/\"4ff28-19a4e3d0830\"\r\nlast-modified: Tue, 04 Nov 2025 09:40:14 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 84a997c98e32c474e0f0430107053c46\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":327464,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37527)","md5":"58f80e01fe93114e4bc5f669f03ce204","sha1":"ca81ceea5648d976847843acd111c67af675a18e","sha256":"c9d40152c820876d0fb7b7b8820801e8a3ed5e29ddbac7d468bae870741c18bf","sha512":"c87b826abb37bc708c3a5012b9c0b6f2d3f44af2bf15c8a04b55014973db8ef4a2b3c3c2b2e8aea204f6072ff06b9317a4b35d7984fbb6e95678ee9848a5deec","ssdeep":"6144:bbw0VZqcL1n/S+9YSALnq2LSw3rs3EJst1yosLb1nOVtyXuXmgP:o+qLZrs3EJ8IL+Xt","tlshash":"34644bd830a6b1756bf386a1503f410a733d2912780d8460f12deeaa7a75506d2bbffd","first_seen":"2025-11-04T11:06:10.404712Z","last_seen":"2025-11-04T11:06:10.404712Z","times_seen":1,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"fartcoinairdrop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:44.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fartcoinairdrop.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 13:12:55 GMT\r\nexpires: Fri, 30 Oct 2026 13:12:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 424369\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-14T00:03:40.125166Z","times_seen":2856,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fartcoinairdrop.live/api/auth/check","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:44.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fartcoinairdrop.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 08:34:05 GMT","end":"Mon, 02 Feb 2026 08:34:04 GMT"},"fingerprint":{"sha1":"8F:6D:F3:8A:2F:40:8B:25:C0:28:33:BB:45:00:B9:FD:B6:49:B0:17","sha256":"95:83:84:95:59:C2:FB:C9:5A:14:E7:5F:03:1C:77:33:23:C0:C7:2E:17:6F:ED:B5:28:C0:84:1C:61:08:2F:69"}}},"request":{"raw":"GET /api/auth/check HTTP/1.1\r\nHost: fartcoinairdrop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fartcoinairdrop.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 23\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 04 Nov 2025 11:05:44 GMT\r\netag: W/\"17-VIEFRCuHQRfwSbpuk4+iLdGeWgY\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 50ff34e27e363bcfe0f0430107053736\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b538cc239310cb0c764843f559467a99","sha1":"548105442b874117f049ba6e938fa22dd19e5a06","sha256":"3e58c6fcf10a31770582814c2babfd1ff71bb1a72cae32cdb1c1a428f406d47f","sha512":"d148955397ace842fcb8251fcef77b2fd8a331b3f45d0b02294f4a6083f871f75e12ba62f9b72319c89c90290d5e446863b31a11c15168d292f6c0a9dd04f653","ssdeep":"","tlshash":"e2700020c2800c0acb0002a08300028202002e30a0a0280880022820208b00880a8082","first_seen":"2023-06-04T09:43:36Z","last_seen":"2026-08-14T02:09:21.835183Z","times_seen":2282,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"fartcoinairdrop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fartcoinairdrop.live/","date":"2025-11-04T11:05:44.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fartcoinairdrop.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:34:45 GMT\r\nexpires: Fri, 30 Oct 2026 09:34:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 437459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-14T02:26:02.26016Z","times_seen":31982,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fartcoinairdrop.live/","fqdn":"fartcoinairdrop.live","domain":"fartcoinairdrop.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-04T11:05:43.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fartcoinairdrop.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 08:34:05 GMT","end":"Mon, 02 Feb 2026 08:34:04 GMT"},"fingerprint":{"sha1":"8F:6D:F3:8A:2F:40:8B:25:C0:28:33:BB:45:00:B9:FD:B6:49:B0:17","sha256":"95:83:84:95:59:C2:FB:C9:5A:14:E7:5F:03:1C:77:33:23:C0:C7:2E:17:6F:ED:B5:28:C0:84:1C:61:08:2F:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fartcoinairdrop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2072\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 04 Nov 2025 11:05:43 GMT\r\netag: W/\"818-19a4e3d0830\"\r\nlast-modified: Tue, 04 Nov 2025 09:40:14 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: eddc0aa00c1188bc1a29fc74c1db1648;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"69d97ac905f7745a57f08e414e7e7924","sha1":"3a6f0a275636d1bc88421c6a9334d8665f5887bb","sha256":"c9b21ea9f2e9a1877d627ad8aca2421db9a65ba2d53320245a6f2db93b228b39","sha512":"ddac328062cf5b40cc9d8c031d6b46801cb2f84da06e7287de7c178664dac5fad9420c03074d5058e8b167cc29e306ad903ae1e1853dfadf0567e4bb07b20d88","ssdeep":"","tlshash":"07417ddf895b48a67020b179b8e1be17040bb44f5bfa98a0b493e857cdc97cdc857e18","first_seen":"2025-11-04T11:06:10.407005Z","last_seen":"2025-11-04T11:06:10.407005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":106,"dns":65,"connect":12,"send":0,"wait":174,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"fartcoinairdrop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}