{"report_id":"9cd014fb-7c03-447b-9855-8b81510bd833","version":6,"status":"done","tags":[],"date":"2026-02-01T20:28:02Z","url":{"schema":"https","addr":"www.filightersdex.xyz","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"ip":{"addr":"65.21.174.205","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"www.filightersdex.xyz/","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"title":"Account disabled by server administrator","dom":{"size":9202,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2149)","md5":"0c8e22543d6b41aad1d1bec0221adac7","sha1":"c88fe5ac8b94e658efb1c8fc9f705141a3fc53aa","sha256":"16c9b8749a9e2275af10197adaba0192432b4d6b41048f2a38d3fafae20ccf15","sha512":"19ba70e45841fbe3ee162777111b3d10266cb7449a785c22e6483067ef86f1af97d8175e2a6fe7ae5f5f0c28887f6049316bbfc359e867813ce1d40166dd21d8","ssdeep":"192:fcg/dd7U8F/r1XRSGYYV+ZrDSKOVJtObn8IN6jBP08PRZWImRK9iT9i2H0XIuB:fcYd1xV3KOrj9tsSJmRK9i5imu9","tlshash":"fe1285bc1bd23065ad1794e5db6053882c29d8ab4717c660b3cc3a9cdfd90d9cca62c5","dom_hash":"domhash7b430fc66206cbe0c8992d649a7ad2c1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.filightersdex.xyz","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"ip":{"addr":"65.21.174.205","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T20:28:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-01T20:27:41Z","timestamp":1769977661,"ip_dst":{"addr":"Client IP","port":52822,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"65.21.174.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-02-01T20:27:41.296794+0000\",\"flow_id\":918541960036314,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"65.21.174.205\",\"src_port\":443,\"dest_ip\":\"172.18.0.39\",\"dest_port\":52822,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=filightersdex.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"06:B6:72:AE:AF:07:36:0E:1D:41:3F:F5:9A:FC:42:8C:55:08\",\"fingerprint\":\"d5:eb:12:db:a2:e7:cf:e0:90:9c:b6:dc:e5:eb:85:51:fb:a2:50:ee\",\"sni\":\"www.filightersdex.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-29T17:52:59\",\"notafter\":\"2026-04-29T17:52:58\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1206,\"bytes_toclient\":3491,\"start\":\"2026-02-01T20:27:41.212954+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"www.filightersdex.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"www.filightersdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.filightersdex.xyz","ip":{"addr":"65.21.174.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-01-31T20:45:49.491287Z","last_seen":"2026-01-31T20:45:49.491287Z","alert_count":2,"request_count":1,"received_data":9085,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":4676,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":2,"received_data":67102,"sent_data":1080,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.filightersdex.xyz/","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"ip":{"addr":"65.21.174.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-24T12:39:12.420686Z","times_seen":24994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.filightersdex.xyz/","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"ip":{"addr":"65.21.174.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"26b1593828c11580b547b51b842ed25a","sha1":"6efc8568ab53ecb187f676e918c04f08977dd6b2","sha256":"abd38624f60fbad576e38244d4b49f43aeaf972fbfd9b8ea525996de3a3bb15b","sha512":"d1e142a80054ddef3c8f79709300d7681f298efb55c7cfe5f89833ebaf331fcf9c78303f2cc8cbfe9207a7365283abda4920b8dca5d645b1ff6d38273e609bcb","ssdeep":"","tlshash":"4301cb8f19920831222bb07b58490e4138b0040f0f0eb9c53a6fcd428fa7c1015f77f6","size":737,"data":"","first_seen":"2025-03-03T03:33:04.33117Z","last_seen":"2026-05-28T08:01:48.397713Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.filightersdex.xyz/","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"ip":{"addr":"65.21.174.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5cfa91b9dfb4a7d3068847664a0022b","sha1":"2b2a8001595784490b41feccba6528e11c1425a1","sha256":"30ff2504985534881af8fd78750c7dad33163328ca1ffba3ea3f586481329d5e","sha512":"afbb3b718ed7f33f3550912bf58967b1c8559384557193dee69bfea368a91eb37e7f9e315f7bb69e7a0f76d02e8b480191949e2a4848338e4086f0f522b8b608","ssdeep":"","tlshash":"a7e023f08d13a055f15a8c36b010d4604c27f0b17b11b109a4ce363cb0c5f41bfa5b69","size":434,"data":"","first_seen":"2025-04-07T11:27:40.157565Z","last_seen":"2026-07-07T22:57:35.31999Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-07-23T01:39:44.874962Z","times_seen":27518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"94306de0c5259bcf0f60520a9399f9f7","sha1":"48a65a19a41bd57445252bd800afdd60dc4c8440","sha256":"953b66e23589e11f278e11f2082db5e5beab5a52b64b6b683d875217c6283d27","sha512":"85a47a9bdb7107cd517e003575a07b7f59e0bd10ec0e7221a4d542221682534ef36037c90bdc8a617e73149385a765dd78141e3abb3885ccfd8b756cff8e5056","ssdeep":"","tlshash":"8bd097298a46c088f320c048f144fb309003b08c86a2efcdecb91d3ed14f6a2d8d0bac","size":254,"data":"","first_seen":"2026-02-01T20:28:04.116462Z","last_seen":"2026-02-01T20:28:04.116462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.filightersdex.xyz/","date":"2026-02-01T20:27:41.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Ubuntu:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.filightersdex.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 20:27:41 GMT\r\ndate: Sun, 01 Feb 2026 20:27:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3990,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"22cce6352abcd2a662c5df91d4f08467","sha1":"5794325af105d7ebf75098f9d6a38779a1a0491f","sha256":"7ef876ed402661873b0700dc02bcf266a709098baf5435e6aa1d9f4a75e0b601","sha512":"d63c955613a849409589be939ff63415c51a90621ff4f9932c15715cd98088d15c1bd256323bfed4182fc0dff9f7e54200498d7ca1b1aeca7265c2369c101ee7","ssdeep":"","tlshash":"b181ada214579404ea434cc223cfbf369d8f21556445c5ba6ffe1cd8aceac3a435ab4d","first_seen":"2025-09-04T13:12:47.739127Z","last_seen":"2026-07-24T13:24:58.453717Z","times_seen":954,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":84,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.filightersdex.xyz/","date":"2026-02-01T20:27:41.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.filightersdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:17:36 GMT\r\nexpires: Sat, 30 Jan 2027 13:17:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 198605\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-07-24T09:53:22.242201Z","times_seen":11267,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":1,"connect":10,"send":0,"wait":8,"receive":6,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.filightersdex.xyz/","date":"2026-02-01T20:27:41.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.filightersdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 10:41:37 GMT\r\nexpires: Sun, 31 Jan 2027 10:41:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121564\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-07-24T13:24:58.455086Z","times_seen":21068,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":49,"dns":1,"connect":7,"send":0,"wait":10,"receive":9,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.filightersdex.xyz/","fqdn":"www.filightersdex.xyz","domain":"filightersdex.xyz","tld":"xyz"},"ip":{"addr":"65.21.174.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T20:27:41.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"filightersdex.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 17:52:59 GMT","end":"Wed, 29 Apr 2026 17:52:58 GMT"},"fingerprint":{"sha1":"D5:EB:12:DB:A2:E7:CF:E0:90:9C:B6:DC:E5:EB:85:51:FB:A2:50:EE","sha256":"EC:AC:82:AC:20:CD:6C:0A:5A:CD:FA:6F:E3:DF:A3:1F:32:21:41:7C:F5:9A:B4:99:D9:B6:A4:38:0D:25:FC:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.filightersdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx/1.26.3\r\ndate: Sun, 01 Feb 2026 20:27:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 8912\r\netag: \"67acecdb-22d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8912,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2143)","md5":"326282bb0dd0461d52337f15458e56cf","sha1":"ec712923ebee8485cdbdc514ab4e470230bed140","sha256":"5a401934b7e5c290d02d44857417a35a12b17b2c1de428927b41944744c1138e","sha512":"6e749a41c751683c4815aebfe6679504ca83606ec082062dff9542c234f26d5421130a59ea6ec8e7f57a0ee1c4bb107aa9d07a2ac1f43781ae41eb530ab30350","ssdeep":"192:9cw/dd7U8k/r1XRSGYYV+ZrDSKOVWtObn8IN6jBPP8g0xW4ERK9iT9i2H0XIuU:9cod1xG3KOMj9tXl0ERK9i5imuY","tlshash":"3a0264bc1bd23064ad1794a5db6053892c39d8eb4717c670b3cc3a9cdfe9099dcaa2c5","first_seen":"2025-06-03T10:10:19.636918Z","last_seen":"2026-03-19T06:42:09.767813Z","times_seen":6,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":158,"dns":81,"connect":26,"send":0,"wait":27,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"www.filightersdex.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"www.filightersdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}