{"report_id":"957b8dcb-75af-4317-a8ca-0c348b2a951c","version":6,"status":"done","tags":[],"date":"2026-03-01T17:28:50Z","url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"104.21.25.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"title":"Felix | Holders Event","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T02:24:27.635691Z","times_seen":17771271,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"104.21.25.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-05T17:28:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"felixevent.network","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-01T17:28:51.158291Z","last_seen":"2026-03-01T17:28:51.158291Z","alert_count":7,"request_count":7,"received_data":7781690,"sent_data":3799,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":2546,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":1,"received_data":13347,"sent_data":552,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af78694d3e35683c3427de9ea7f73d09","sha1":"8edc679760892fe07c6475ad293fed7843e6d7a0","sha256":"b293d6809dee3f4bcea11594bbcf4ac18470f0842fad17aa0dc0c78c081aa7a0","sha512":"718f5a857b48b13008bbd6bed0f6b2806be3fb82f018a28ce71a06d98d2350edebf3143d677e9dff588867b97394104c2e5e50657ee9d4bb030b6b3c22e55dce","ssdeep":"96:F0URvpbDcGz7bOVGxlrMqAZkgGUbnbuyKpUJfGTsEUjNYCxxY1Rxe+E7rxuVWeWF:OIhbDpXqoXMqapGTMlY1Rxe+E5uVUs/o","tlshash":"31d11d446f416c74276f2bb76327b8d5db8a4d049e744d8ec31dac50b0a6a2fced1a32","size":6271,"data":"","first_seen":"2026-03-01T17:28:07.194037Z","last_seen":"2026-03-05T08:06:47.5276Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1a721873be46ef804d1cadafad28971","sha1":"d71fa20f90ced9af73900c8a9f8424a342579b59","sha256":"6fa0beabf686dfc2d4b6de916af5030ab1d0d5a4da4a3360ff54c7afbac7b93c","sha512":"1d73def9444ec5ddcad5d849798e1ea02b859d8d0d31abde03d596c786d04fe27cba1a85aac64629af1d902ad10dadb7076d88e1f0972a915c5c4058c3d1601a","ssdeep":"","tlshash":"d7519e4a75e2207608b362be1b9fc24d7a650093448dc9213cbdc9095fd2af55a7bfc9","size":2999,"data":"","first_seen":"2026-03-01T17:28:55.709932Z","last_seen":"2026-03-01T17:28:55.709932Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a08418f65c4312b50e8ab7743abdea3e","sha1":"d8d7f26fa8d53140a3485d605ccab49ee878d984","sha256":"3562c0a4e11cff264392fd5191422a42c3869600c132114564bf90c0251fa027","sha512":"e638e389bd877accf438314f1e3dcec39ad8ff4153a2bad5e0a50f7f013ce0ca4aa0c953531817c15c13a822299fcfbb66392534b34137e282d0b4d5576fc02e","ssdeep":"","tlshash":"6d31a6e43360b9c1b5c2cdbe9d195de0722b34a3bc8e70c8159b7c68645a280e3cc869","size":1655,"data":"","first_seen":"2026-03-01T17:28:55.723687Z","last_seen":"2026-03-01T17:28:55.723687Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T17:28:26.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /claim HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\ndate: Sun, 01 Mar 2026 17:28:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: id=o3u0s5sm; Max-Age=86400; Path=/\ncr=1772386106; Max-Age=86400; Path=/\nld=felix_input; Max-Age=86400; Path=/\nch=o3u0s5sm; Max-Age=86400; Path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owzzteeAk%2B3a6CGh4cHOwvzikYoXBK2kJ4h0hQ1iBeec2pPNiKKoOXnK1bEYDyfVyI4qv0O5kSHxopyohRF0JL4N3hvi98iuYHLI48F%2FunFNUQ%3D%3D\"}]}\r\ncf-ray: 9d59e0cf5bcb3ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2363,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2363), with no line terminators","md5":"b6402f1eba8029c92003c8c08ca07f34","sha1":"d5a536485244acef06dec3e202be8e4566b98862","sha256":"98fc0f578cb875c42da5ea04da6c0d225a6ec8af37b517d37c67b160736df17e","sha512":"c3ff016da836f05b6f2a88fc6e890927b179ced470100900a537e9337e3a0f4e0c6557911159704670eaf5820dc8d04e0703e4e8084cc6a682a799380302b95e","ssdeep":"","tlshash":"ea415e7b324e5a4bae00bfa105973c888615d5d02da3abc8e1df82ec948f7171c84b6d","first_seen":"2026-03-01T17:28:55.661349Z","last_seen":"2026-03-01T17:28:55.661349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":78,"dns":50,"connect":8,"send":0,"wait":144,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/claim","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T17:28:27.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /claim HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: id=o3u0s5sm; cr=1772386106; ld=felix_input; ch=o3u0s5sm; chsol=ed48c771f440fb374a639df4f35163a4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Mar 2026 17:28:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nset-cookie: id=o3u0s5sm; Max-Age=86400; Path=/\ncr=1772386106; Max-Age=86400; Path=/\nld=felix_input; Max-Age=86400; Path=/\nch=\"\"; Max-Age=86400; Path=/\nchsol=ed48c771f440fb374a639df4f35163a4; Max-Age=86400; Path=/\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfrqt4YWnBzD57yNQHSKNJ23hK7%2BEWwEEMd9U6PDMHucdlJITsKPFhBuqsuxME4biaWiozYx%2BngxKJwOWBDTfXLXXw628zmcvXBjrldRR87nVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d59e0d37b34588e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23102,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6410)","md5":"7878a867561b52f0bde22a480400c1e3","sha1":"e886477be055c196ef429a668a5f2e9ff9b726b4","sha256":"d97032f33ceaa8d2ff2128d0d907855e33b027bdf3c20865c3d9a945f6e7a4f5","sha512":"628f7886802f928fe56b79cafe22d3df44b6f51fa4f4fb75e4bb17b12e5c6787247582aeb84af5dd21c84072f3d9bc4edefe8296fc3d1261675a96dc4a7f86f3","ssdeep":"384:8IhHpXqoXM1pGTMlY1RxQ5kUs/h9rtsXRP16sn:8IhHpbG0TMlY1RxQqUs/nrtg16sn","tlshash":"19a2db4517a310351927a1b62bab775ab7d49403cd09cc187fac904c8fc6ae6ede37b8","first_seen":"2026-03-01T17:28:55.66863Z","last_seen":"2026-03-01T17:28:55.66863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/felix_input/assets/eleven.js?d=2","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:27.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /felix_input/assets/eleven.js?d=2 HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://felixevent.network/claim\r\nCookie: id=o3u0s5sm; cr=1772386106; ld=felix_input; ch=\"\"; chsol=ed48c771f440fb374a639df4f35163a4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Mar 2026 17:28:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Feb 2026 22:04:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57ZIcelvb80OemHASB4D4pZuQHca835rPBH%2FEvCvhVf2iuxXwZZcDAWuiJbjn1%2F8fpvcPwlCT%2FW1v0qT4ETjn0YBStU8MB%2Fb8dzvbAhNNpQcTw%3D%3D\"}]}\r\netag: W/\"69890856-764325\"\r\ncontent-encoding: br\r\ncf-ray: 9d59e0d3ec24588e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3da65c187a23f1a6d8d51f23810b2ae0","sha1":"7061de0e6f09d4ed1a69c2a3209b6501c9904c8f","sha256":"8ee5c7ae26904c3aac81c5de792f3a8e3a6de0d3b9037d31e91c8a033338e6bd","sha512":"62c139e3938c8faed7c50044eab73b4297ea13cb408631533db5bdfd20a7b00235f2683cff5f766ce61e94131f7f8ff82a14baf45051b37e4a2c46b895d6d3e0","ssdeep":"24576:428tHPYfbu7W152TlNJvleNRlPpg+8r/QR2OFnniOflYTwrJfowV7HJ8X36r5lD6:42I9tkpPpg+8r/QR2OFnniOflYTwrJfW","tlshash":"0d25f8ce2d99e56e015239b73d27209be06edc08715ccae0fb99bc34f85831d58b7a58","first_seen":"2026-02-09T00:41:26.532086Z","last_seen":"2026-04-30T11:04:05.824262Z","times_seen":134,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:27.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://felixevent.network/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Mar 2026 17:28:27 GMT\r\ndate: Sun, 01 Mar 2026 17:28:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-08-08T02:07:16.115982Z","times_seen":1503,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":91,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/stat?op=1\u0026id=o3u0s5sm\u0026i=0","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:27.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /stat?op=1\u0026id=o3u0s5sm\u0026i=0 HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://felixevent.network/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: id=o3u0s5sm; cr=1772386106; ld=felix_input; ch=\"\"; chsol=ed48c771f440fb374a639df4f35163a4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Mar 2026 17:28:27 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NXjCGb0chpQUbS%2FTDnWBecydyY%2BDF09LuMjDY%2Fa%2FSRHdpkLB96VSiqNtgHBdFFp8xwwG69hWUukxBgZTd3L%2B7EKTzrk3n45QGzAS57cm0HNfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d59e0d3fc4a588e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T02:24:27.635691Z","times_seen":17771271,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/felix_input/felix.png","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:28.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /felix_input/felix.png HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://felixevent.network/claim\r\nCookie: id=o3u0s5sm; cr=1772386106; ld=felix_input; ch=\"\"; chsol=ed48c771f440fb374a639df4f35163a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Mar 2026 17:28:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 474\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 16:49:48 GMT\r\npriority: u=6,i=?0\r\netag: \"6990a7ac-1da\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zh%2FbEjR0vtHFdOU%2FB1iB7xMm64xNJ2eeJZCrD9r8zrtyhhx5KxeCYXgOlT%2Bw3qTGmloY0fmdEmt8NkiVbhEZ8Jjw5gudzPu5UiaW%2FWI%2BBGHlmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d59e0daac74588e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 336, 4-bit colormap, non-interlaced","md5":"66ac8ea7ef1da4216a298593c7e4b0f0","sha1":"10841a2200ec717e9076a33513f63e4d067bf452","sha256":"c382c0d4f20996b2d9ec1f266ee437b5f3b4fecf84ba0b28cadc7f99bb97a5b5","sha512":"2cea9730cef1f2d812d15301284d4d975444657449cab118e40e9be3494626eada6aec11ad5dee5e28a607f9f327a7886e5841ae6d67fd20a4f5b3602084a063","ssdeep":"","tlshash":"7ef0abfcfa7108e0b713c334a0284ef49ef6004bd0951c4dd1e968d24ca276082d901b","first_seen":"2026-03-01T17:28:55.688958Z","last_seen":"2026-03-01T17:28:55.688958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/favicon.ico","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:27.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://felixevent.network/claim\r\nCookie: id=o3u0s5sm; cr=1772386106; ld=felix_input; ch=o3u0s5sm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 01 Mar 2026 17:28:27 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FHJE0AWG2zwJTjBAKg0arT4aKS1OJ2O4jDd961hZ6zH0zqFfDCnhN6fIcE4L9%2FKQG%2B%2BdWL8DEZEUTjRrNT4%2FPcayiPMgKN043fzIZrK1YfeqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d59e0d21fd4588e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-08-07T23:29:22.719598Z","times_seen":5799,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"felixevent.network/felix_input/felix.png","fqdn":"felixevent.network","domain":"felixevent.network","tld":"network"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:27.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"felixevent.network","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:57:11 GMT","end":"Fri, 29 May 2026 18:57:10 GMT"},"fingerprint":{"sha1":"6E:98:61:B2:14:04:52:D6:E0:53:01:93:A0:F6:4F:7F:CA:AD:F4:D6","sha256":"61:6C:FF:5B:0E:BC:BD:ED:2F:E4:6A:36:18:01:1D:C2:95:D8:4A:C6:CC:F2:B6:B1:DA:51:84:A2:7D:79:7E:60"}}},"request":{"raw":"GET /felix_input/felix.png HTTP/1.1\r\nHost: felixevent.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://felixevent.network/claim\r\nCookie: id=o3u0s5sm; cr=1772386106; ld=felix_input; ch=\"\"; chsol=ed48c771f440fb374a639df4f35163a4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Mar 2026 17:28:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 474\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Feb 2026 16:49:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6990a7ac-1da\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpAXtZ3vpizpiwOmx7PgnhmRwoOSy%2FVJhfPREH2WjSel%2Fy6PMx7PM9Dj1Sz1%2BUrh5Wc0iS2cbArtjaOeeHVLFcpn%2BfzlZJffS1T3I%2FxvyKpAcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d59e0d3ec2c588e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 336, 4-bit colormap, non-interlaced","md5":"66ac8ea7ef1da4216a298593c7e4b0f0","sha1":"10841a2200ec717e9076a33513f63e4d067bf452","sha256":"c382c0d4f20996b2d9ec1f266ee437b5f3b4fecf84ba0b28cadc7f99bb97a5b5","sha512":"2cea9730cef1f2d812d15301284d4d975444657449cab118e40e9be3494626eada6aec11ad5dee5e28a607f9f327a7886e5841ae6d67fd20a4f5b3602084a063","ssdeep":"","tlshash":"7ef0abfcfa7108e0b713c334a0284ef49ef6004bd0951c4dd1e968d24ca276082d901b","first_seen":"2026-03-01T17:28:55.688958Z","last_seen":"2026-03-01T17:28:55.688958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"felixevent.network","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pressstart2p/v16/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://felixevent.network/claim","date":"2026-03-01T17:28:27.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/pressstart2p/v16/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://felixevent.network\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12512\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 06:11:37 GMT\r\nexpires: Fri, 26 Feb 2027 06:11:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:21 GMT\r\ncontent-type: font/woff2\r\nage: 299810\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12512,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12512, version 1.0","md5":"5c7e04d0202b58d3df25dd6ed69ce9b2","sha1":"87ab8daaa6e2c9db3778cdb299670e5edf1db828","sha256":"afec86997fdaf54af1f59358fa2c1e2a0f1d04146edad18e5cd141d0384a7548","sha512":"d08a56ec3c4fe4ad1f7bfe2191d30ad810c660b62bde9ed3de5d2c8a9d3c87f75546ef839394f084cb798d1675a2c0ebace5220ab2d1ca28bec60e0fdba4ee11","ssdeep":"384:udJAGR6YO7fjJ0ApzehQKffM30rHn3e7WV:CRNOD7zehk30Ln3e7a","tlshash":"f842bf242856c0ff26b918b759bc1744a99be23613c28912f90698e7ecde4355c3d2d2","first_seen":"2025-09-17T02:54:26.586694Z","last_seen":"2026-08-08T03:20:19.429093Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":9,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
