{"report_id":"c3c32c82-595f-413c-a825-93c0e0dc536c","version":0,"status":"done","tags":[],"date":"2026-07-02T13:11:20Z","url":{"schema":"http","addr":"fnscan.live","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"172.67.220.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"title":"Fortnite Inventory Checker | Epic Games","dom":{"size":163750,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22797)","md5":"38e2860169e85b04e90e89670627ddd4","sha1":"e8a25ac4feeeced068683e22b0814a3242e5defe","sha256":"9bb80da36dc06f4bc904598145a5a4d58b49be06a0e4c2ea2c13b0fbad38f8e9","sha512":"005ba51a25b05225197893a4315e3cc053336443e061b96718718c2637f5c7c1196aee2540e8cc1ea43ef9f11c5c7b655f9a386be2a38dc42ca680486edc6dcf","ssdeep":"3072:NH994nFh3mAHdC0v/1c0GRuV42GenlTcDiaOcNHQKjHk5GI0tD5PybtGGenlTcDD:NHf4nFh3mAHdC0v/1c0GRuV7","tlshash":"bcf3f8b452f202b2514383f0a691ff1b3559971bda17e598779c08623fcfc8a4866bbc","dom_hash":"domhashe6c256c2ad0458ad3009b7d58bd3bf2e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fnscan.live","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"172.67.220.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T13:11:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fnscan.live","ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-02T10:19:52.788837Z","last_seen":"2026-07-02T10:19:52.788837Z","alert_count":100,"request_count":20,"received_data":2913128,"sent_data":13265,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":3,"received_data":148032,"sent_data":1710,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-06-25T13:15:25.067661Z","alert_count":0,"request_count":2,"received_data":18693,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-06-29T07:57:36.057616Z","alert_count":0,"request_count":2,"received_data":408707,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-28T22:30:22.905773Z","alert_count":0,"request_count":1,"received_data":238494,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"0a25a1c70efae8e610228e68dfc0ccff","sha1":"1373c273267770076feb27c30249f71efb37f576","sha256":"6bd33a4e9286a6241ddd5b3a764ab2122b235ec09dff70a6a469a11b52cc8c43","sha512":"26bea773178c749b53ff65533f515d8faac4930b370d6e1cd716a2d4282960991093ad026e08d5db8d37976fd0b22a5db7bd18b4f3fd72dcdba4bb93abbaab10","ssdeep":"","tlshash":"eea002d52a2e56440e8c92144c942b1a7166180c56d0f60eac206db6465edec39347f0","size":71,"data":"","first_seen":"2025-09-21T13:17:51.337089Z","last_seen":"2026-07-02T13:11:24.03462Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cecad62a4193211ff2686925b883d230","sha1":"829b1532f4dba7150ce298c8fb01f59a3ad6d91a","sha256":"525763435bef957c764a46544f3f2d87e67303d35b9d448fb35e3a9b17d98085","sha512":"da614189a4db589edd2200843daae17c5c0e33243fafed954ae689ccce3ae1f379eca0a6553d2107b0bc45eaf6fb062b2fbecc0dff94363bb2d2ce669cf77e95","ssdeep":"","tlshash":"c321d92cccb32e53120321a4a5e70941b63d41cbae2dbcbd3b1ca9144f0d41e23b83ad","size":1251,"data":"","first_seen":"2026-06-11T00:02:00.371138Z","last_seen":"2026-07-02T13:11:24.041237Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdc0474ce86f1574d3b456c3c182ba10","sha1":"10cf1b6359c0d0ee9b754e523f8184ed809a415b","sha256":"e2b10ccbb968305c71ddcc25ee70e41340cc8076c765bc8c3e2a6c75b09c4306","sha512":"7e04bac728b1929ddeff5936eb20ca46bebedcba2327887aaa0a705f12fb9a170131217ddfbe5e3e25d0bd12ec813c108b430c3c243614eb6331d4a29979b3cc","ssdeep":"768:22c5Xw6uH13Dbg9PtARw7InAmvGFWIwB0tAMxSqg:2Vdw6uH13DbMPtARw7InHvGF8BsHxSb","tlshash":"c4d273a6d4a1095a51438757a224ba45210f99bb9f01b0f9379e84173fcde0fe0fb8bd","size":29956,"data":"","first_seen":"2026-06-11T00:02:00.372313Z","last_seen":"2026-07-02T13:11:24.04178Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"855c27782663cd125e09dbebdcc92000","sha1":"ad7c73221b629490b77483c7abf49b2ecd56fa6e","sha256":"5561155a875db20879cd57156204b9611cf55235c36740a27b551529b2581a26","sha512":"652b240b8cfb2db68ff209e7434d71cc7b85f01b1bf9c87435829153aeb790506b32128d4f6e22b07f6a23e13605be773a5813313fa673025f43377caee4c010","ssdeep":"","tlshash":"478004731003c0314f7cd14410513105431d5f47c5c3cd144cc04004113574404101d0","size":35,"data":"","first_seen":"2026-04-04T15:35:16.192782Z","last_seen":"2026-07-02T13:11:24.042338Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a550d7f5ae46e8d72f833684cc789c70","sha1":"078a4788793906d0d3d8db205ddaa0e99bc9d113","sha256":"5e5bf04812c52f311df70d9f8f10c232e7f630dda4498899a98a0bac86af2ef4","sha512":"1c7b77011e23a0ffb53f229a206af1f4399cab0adad325d6d9837f58b2b99bccb7c65e364dd1c456472a6d9599cf9fdf6e04acae5b8bd48474731ce4d1834d2d","ssdeep":"","tlshash":"e01125683caa3c28936996ea377fc3cc517924277461cc80d40ec8341a67d871483aad","size":1002,"data":"","first_seen":"2026-04-04T15:35:16.195645Z","last_seen":"2026-07-02T13:11:24.042858Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfd8ccfee74746cd26a124747302f8f","sha1":"f76d62cd48d7abd863f92469f79fe77421eb23c7","sha256":"2ee50a99b61b4e9f8f4d582c1266adc8bc8c9d5aef73d909a1c865f37168ec81","sha512":"7cb83dce1207cc8455d93c143916b7ff98ce9f1bfce2ba40b70bb9b4d7b82e466002f81a1b72b6e3a37dd6b75d9cb5dcf35d3be8febe4c7afb8763945b9c58d2","ssdeep":"","tlshash":"54f00e5c0c0fb97103365aac73be89c83656010c25414944ca66c13065a08db6896b4c","size":504,"data":"","first_seen":"2026-04-04T15:35:16.198644Z","last_seen":"2026-07-02T13:11:24.043363Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e7505fe892d48d65a9fcbc15e53081","sha1":"de9a2a1617665aa3375bf6fd1aaa58dbacd20dda","sha256":"728b0006af24f92a8909559fed79bc2e862735c676979ab3443ff81f40abdc97","sha512":"aacc10a7a0cae58db3387f0194836cc3e15306b748ee8492c279136efa5abe3e977bdd58d7763faa12f02aada33c39183a11a0884517dbfb2ae3ac71c6b45e52","ssdeep":"","tlshash":"19e068ab3885093912bab9be32b7660430131118b40c4618db55b370e574cc68b4580d","size":379,"data":"","first_seen":"2026-04-14T13:27:05.580507Z","last_seen":"2026-07-02T13:11:24.04391Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af1b021ea565dce430a083e4deee054","sha1":"ca4ba492f88b85bdd52289e7d8887e2ac95033c9","sha256":"e5206351c812a92de9690cf522fc9a3d92d3abca06d17139163c9a4d355ac7c2","sha512":"f8530995ccdead23bba129159210a3469f7809e2e11d7df22ea896aec0fd8b468d73e2b05209f703f8a335cba3bc5248930efb4689392d7fec84448b87761f3f","ssdeep":"","tlshash":"99e0f1e833828eb042a95a0933bff34db1e3201c88854810c97e687cbf38e93c324d80","size":431,"data":"","first_seen":"2026-06-27T13:27:28.236331Z","last_seen":"2026-07-02T13:11:24.044495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b4dfc3697fde075739a273cdf023e2e","sha1":"214a5c71f863b19bf8b80a647c2413e7a37ad743","sha256":"d8a29fe5024fb8c2f7637fb995d44630ff59155b013ddd28ede0f703b703b9b1","sha512":"c6ea8756c0feb69ca3242d9ce97bccd4dadabff8d8a0a49a39384a9488bd8c26f26783a95a74c43ae314e0f79db1909abb412a0c9d008fb21f15772cdbea529a","ssdeep":"192:i1T56fa2rA4vSx1DcPJ1LZBBpqH56GfxRo97z8Sp:pyx14PJ1LZBBp2oP","tlshash":"ded13e69e5a31c7001e7a16e6f9fe70534a011036c09be087f5c875c0f9ed6f91b5aad","size":6753,"data":"","first_seen":"2026-06-11T00:02:00.376795Z","last_seen":"2026-07-02T13:11:24.045069Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-02T20:03:18.311478Z","times_seen":42829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e8355c1fcf70107446f0597edb45a5","sha1":"4b3134ee641466eae5f14ccf42598b6d016352ba","sha256":"be9b2529321e81fc22cf83b02fa37f21b048fb37d1687320c648830d57ff1fb2","sha512":"fc1761e3273659f5c8385d1a3f5c00e53cacf27d40d79c825b17fad83de8100b8cf971b9d4abdf4cbcb39f619f0a8b6fa742fcdbc7a54a3ca77a911c3f0affad","ssdeep":"3072:dVOEPf7pvs/rxcC8/S0rkzsQ8tDWWDdPh8n/lofn4PacfNfTfkQFfm6y4d9:5Lpsdy/jQOu87c5TfkQFfT","tlshash":"87341acdb3d670669393b5b8903f014bb27a79a2b84cc8a4f182d8c42e746594277f7d","size":237845,"data":"","first_seen":"2026-07-02T06:57:46.039188Z","last_seen":"2026-07-02T15:13:51.148769Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711},{"level":"log","text":"Detected language:en-US","filename":"https://fnscan.live/","line_number":1328,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/6.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.366Z","timestamp":1782997856366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/6.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8Hh4a0uGOifQfaayGHUG%2F7zn0AEKf6dcQLbs%2FGU8y4vBcPn451vlMMAA8KMMbSrh%2FMyZ0ZLw6z72k66Q6nLYcArdCV65kuKp%2FAaC6phuBlcpvVhnJ%2F%2B2nq4cmmI3Q%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba4e8e56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":935,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/3.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.354Z","timestamp":1782997856354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/3.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIQq%2BuXNl5934NaYy78p5N5U%2B47BaCNdxAuXGk1FqXqVuCv%2FmIZkAa2pyorfc3QO5bc%2FSaN3aJOwJ2WrYQ8NpbMA72aMZTQjtkYtRD8GY0M%2FL%2BV6RiNyvo2tsh3nnw%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba3e8456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":935,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/10.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.357Z","timestamp":1782997856357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/10.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BvWbroIaGe05kfJRP%2FrHC9QQssIeIGl9DnEnesoi9%2FuElhfXGftMbVSBOteQaKUjkwDcfrTtJO3u%2FNsGJUy2MNakcQbMoxO%2BzxGqyKO6mYx3oeHEdS%2B59YotnZ%2Bvg%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba3e8856af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":937,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/4.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.360Z","timestamp":1782997856360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/4.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S61YavlQCNPB528sBltJxKn%2Bu2DKplwnHI%2FBtSib0CrSl%2B6KzGU20C3yfjqY9R6SNqYInVwBaIk01ZsfcLZv4yR%2B%2BgBnNCCwe8kXX%2BlBOxc6acKqaChLr1rSLqKsFA%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba4e8a56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":935,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.460Z","timestamp":1782997856460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnscan.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T20:10:51.910044Z","times_seen":224992,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/5.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.362Z","timestamp":1782997856362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/5.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rS6YYfF%2Bv9ldQlg3w1xuWHWAYXBYLA96LAPJrcRrPVWAq9Wq6ULfQm2D%2B8O3GHYFEi59hmcyecnfPoRVuUAbx7i5D4xrDbElS2QRy9S%2F8Kn4%2FYcGDuS%2BT8lC%2B1cGug%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba4e8c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":935,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.704Z","timestamp":1782997855704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Jul 2026 13:10:55 GMT\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e6b2beb5d2bb6df88bf2fb90aef55ea","sha1":"57299d704f0414dd1794fa2d00f662a6d68b721d","sha256":"7f5c718efb8ff6993c546f94f732e813c8379e615e79f553bc5ef9026856d244","sha512":"f86b2519ba151eb35b585be5d94cdd2bb27f84dc349ae08f00b7e4fc429e7c30b9b8a0dcfcbde73cc4d66993da77e73067229d4e9f460847d77877607f143d98","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGYNCbOO3Lxxgx:vXuM1+RQK","tlshash":"65227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-17T10:11:41.831391Z","last_seen":"2026-07-02T13:11:24.026922Z","times_seen":492,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":37,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/fortnite","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.706Z","timestamp":1782997855706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /css/fortnite HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 455284\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUBl5kqEdkx7qQGzi7v%2F53eZZuY2%2FfRrQN3%2F5X6ugVpcrTlkWtwlYcSnQ%2FB%2B2yg2WRHPIVmqCot3F5McFP%2B4mL28FGYOV%2BkRw8V%2FrNgQp5fXZGSghPvnNZfglz2w6U2DQlWPJX4%3D\"}]}\r\nlast-modified: Sat, 27 Jun 2026 06:42:51 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a14de4b65cda0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":871,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"d98ef3e15f4b7b5f30b7cffbd05d41aa","sha1":"5349badba63402895e15f338e792ce2643ba665a","sha256":"ca798a5738886afa0c00902e038cac9bb20cd7a1a88d71f858f7726102c3a80a","sha512":"d55e27726627405a3b7bbc2393e6a122edd051597d4fd88ac02960cf309f140e939cec464b511977fd58168c27352934d342c99231528e627fda14349fe23dee","ssdeep":"","tlshash":"41c012550597b40669200c8e375f75140d4e9037a14dc9753fbd2d489eaf42912d671d","first_seen":"2026-02-09T11:26:57.701974Z","last_seen":"2026-07-02T13:11:24.027537Z","times_seen":325,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/21/Frame-55.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.296Z","timestamp":1782997856296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/21/Frame-55.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-bac27\"\r\nexpires: Thu, 02 Jul 2026 13:19:26 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 10289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaMEe0gFKdqbZHXuUSJ4k6jxTAtsuPQuYNAs9BIpgB6AlIO2qK6DseHcrdT3sXb4z7a25lm%2BYwzLY4gke8zS%2Be9Y9LkXQnpHGvClc%2B3TKWWXwfgq2s5KBBSglcJ86A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b9de7e56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 764967\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764967,"size_decoded":765874,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"6b7b6a6275e89c911c047704ed6995e0","sha1":"dcde5124cfac35b29a1c0c19fd58e6bc21d47c9a","sha256":"08eedfd10cac9050f01fa737b93f9e9fdf931ebd59fa254c2ac93bd99cdaf717","sha512":"7f6a5be90ea62e2a921348694bf54eb05a6138847c30d0fa8ffe1e69071317c65d31407a00b42c20cfe3cb4eceb716dbf188887caf5c0589a7df8fcc1094538f","ssdeep":"12288:kygZWKd/Fa2kGEMJHZHlS3h1jTXqU+AyucvcuozdXiIZmJj5iSsMQHnvRoymfi:kXvNFaz/6HXSHvXqUxycNdNZmDsMKvRV","tlshash":"3cf423424a4682d8c0da11f60733bb35ce46f3ed020bac3a4b5956597e51a1fb9cf6a3","first_seen":"2026-04-13T06:40:28.793102Z","last_seen":"2026-07-02T13:11:24.028035Z","times_seen":174,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/1.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.368Z","timestamp":1782997856368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/1.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rkMsAW8FIVIPzogL8ryvtKdlyCBhvmRl1%2BffA4OHX9RDDs6aUhbqxK7UCvda071pYB1lpkqA1h9TFXMMdScauZYVIpT%2FCgVDPa4low0%2FhP3cQVzaeG3SpNzWh1Cfg%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba4e8f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":929,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/dop/aura.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.717Z","timestamp":1782997855717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/dop/aura.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 10 Jun 2026 13:44:15 GMT\r\netag: \"6a296a2f-3cebd\"\r\nexpires: Thu, 02 Jul 2026 13:19:26 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 10289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUHdZPihzqPC992udPLsLDj2PySugwEti7ACC7335Fcwf%2FEzeF0dWjCVYJyTa9YljzS9UKeKij9A%2Fhu3wnLqHnyxSwnxmE6kgyxsguD2%2FgwKhSLD4ZIcc%2BtadbVfNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b63e4156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 249533\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249533,"size_decoded":250442,"mime_type":"image/png","magic":"PNG image data, 597 x 748, 8-bit/color RGBA, non-interlaced","md5":"65333d2ab086ab906825e04f19bafc88","sha1":"e983d8d6b503ff45a011a20973efd4f3d3c58c05","sha256":"d60bc3b7f545aa92c852e6dcd568582ffcf0decf6f2496c3e4eced66598f5bb3","sha512":"516d2ccebc1f4b38ef6cac9d12034cff82d3664ec2ce463b4866db0187dda80b0f873e14114830cfb56b831fccec41ea6dbaf6ab0ea9107d14d19901de2db86a","ssdeep":"6144:DNCbZhcJLN0OGQwKoftufIu2BpKDnkmPDcu+/1lacO5McBb:xAILuPQPoftYv2Bp5WK/bacO5MG","tlshash":"1a34235096456db9f69254f1fa1bce84ffeb31791d02b4cbdb8ab4885b0806c9c9cdc8","first_seen":"2026-06-11T00:02:00.36467Z","last_seen":"2026-07-02T13:11:24.028591Z","times_seen":70,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.831Z","timestamp":1782997855831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fnscan.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1851227\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjfkhwNyMbEx1%2FCGao7VV30DhDNtxxbbh5BeAu95RwNINRqpSLVOYVuBYtjdUZDgD1Q6J7QJyNDrxa0ZWde%2F5dPMj1d%2BDYIWU674rv06%2FzHwZIZFwFN9Rgb9N7sGCSVKOYGyQvY%3D\"}]}\r\ncf-ray: a14de4b6fc0b56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":127122,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-02T20:03:18.311478Z","times_seen":42829,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.317Z","timestamp":1782997856317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnscan.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T20:10:51.910044Z","times_seen":224992,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/2.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.361Z","timestamp":1782997856361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/2.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6kr04YTijsSSOkL8x0LH9fnM99Ahxb3V1i4%2FbQwxFceh4y4EmVtH5SBsQvh9dDqPLMoxBX%2Bu3QfIP%2FuyNiKUGJb5OZbsEnUZNmUChwSEPDCoIRDIZMNdFJKN1iL9A%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba4e8b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":929,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/Epic.svg","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.423Z","timestamp":1782997856423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 02 Jul 2026 13:19:27 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvTmwnoHWueVGGh9W7h2bwdDGkT57GaQ%2BzvqQ5%2FbrAsZU9xPWHSJewN0Umo5OOFO3bNpTTEq0%2Fsk%2BJQEIPCzVjEesBBGNUCo1ZqCB%2BiBFhT7P%2FbkSmHB6ORF6mweug%3D%3D\"}]}\r\nage: 10289\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a14de4baae9256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3524,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-02T13:11:24.029575Z","times_seen":486,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/dop/Frame.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.725Z","timestamp":1782997855725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/dop/Frame.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 10 Jun 2026 13:44:15 GMT\r\netag: \"6a296a2f-591e0\"\r\nexpires: Thu, 02 Jul 2026 13:19:26 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 10289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWXtJe4806iuEeaX0UuEBE71DWb0vmI7HpUJbf855ZLOg%2Bcwp5zZHeVEeZEDuQZd7ZMkShppVntGP3ssiD%2BIPWiJy%2FRheJwE525ayybkzMqXKMZsNQ%2FPMZx4%2BtmSBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b64e4356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 365024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":365024,"size_decoded":365937,"mime_type":"image/png","magic":"PNG image data, 755 x 361, 8-bit/color RGBA, non-interlaced","md5":"7ce1777f930ab6548ae6784a0569429c","sha1":"f8166c0b7b8a33e90317bcfb8f00057b72069e42","sha256":"1dc96c341348f02b92d752b2a299245df083895008bc0b31484bc2dbfc35e270","sha512":"fbf3a34c24bc3971cedb116fd06cac5ce14adb322e8f4be0b3ed3a6381f9b6692c83144fedfa1e614e83e77cf0869d8653bdc96096eff65df75ad67b4722cf77","ssdeep":"6144:mabfze3M5NBD44v0GEPUovfH8ZIadgF8oKYgxjIJR2/9mBbmkLqHQlLWVAX8lvMq:lbek9dc58C/8ZI+gKokjCR2/gFLq4iKE","tlshash":"0a742384ae5d0ea499301e7879b3e2c65491f2bcbc0b047dc4625464fc57ba26b3db8f","first_seen":"2026-06-11T00:02:00.365925Z","last_seen":"2026-07-02T13:11:24.030108Z","times_seen":70,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/8.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.355Z","timestamp":1782997856355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/8.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOBy%2BtenMW6j%2FNeQCl1KNZO8Gh7ptxV5YrrhhOUYpDWXDxnPGpnpn%2F2YYLsxr2E76dM7DTt87m%2Ff6U54mi2cSDoqQVQu%2FKVOXdowFwcHsuvBjXDm9kRdTkFY4zfFCg%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba3e8656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":933,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/Frame-18.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.298Z","timestamp":1782997856298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/Frame-18.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-638b0\"\r\nexpires: Thu, 02 Jul 2026 13:19:26 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 10289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZ9fiDw%2BUEpCRHOxyCHZcXFJv3QNqFTBMXkxKVMsQcvVszP8uveOM8qcOXMKpGT%2FjiCfok%2BX%2FbgumPfSBuhxMRcE85zS%2B6W16bWilCvHOlxY0zh6B%2FRU6XX8ZUlLBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b9de7f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 407728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407728,"size_decoded":408641,"mime_type":"image/png","magic":"PNG image data, 1280 x 350, 8-bit/color RGBA, non-interlaced","md5":"c9f004c80b8dde35a8b16b90197eaa78","sha1":"65e32dde135458448cac14e01cc1fab79042fac5","sha256":"4e80b918e5254ab06a9971a11bb12cedb6906ceede987d30547cfd6666dfcba0","sha512":"0f0e318c608e6b7792d2f6fa908ca58e7905c1f262c4090dd4b3b4c838ac6fa509dac47aa809436be7436b43ecb7314783423613cdefea90a6cab18336b978cd","ssdeep":"12288:CKopDp7+fH7a0W/M/uTv7JayC0VOurMDfOgPUMHuJ/cwjXIP:Jolp87UfjMUMCgjQ/Jq","tlshash":"418423d84e10076cd9a4076061e865e67fe23aa5efec5c273d326915bf1e9f1fe01818","first_seen":"2026-06-11T00:02:00.356249Z","last_seen":"2026-07-02T13:11:24.030635Z","times_seen":73,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/118753/Fortnite.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.320Z","timestamp":1782997856320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/118753/Fortnite.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnscan.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/fortnite\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 22 Sep 2024 15:22:03 GMT\r\netag: \"426c-622b6d5962661\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 10289\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9lAUTT1mnmGUWyLsM3zUc2CBkFssJkBsTwSQRJrbo5MAyvcjN6X5xAFBbykjfp0%2Fb%2BfPSuRsACzpJpoCXP84E%2BDdTCMZD6ABMWgs75qyaJWnD4D%2BLvjZG%2FngEveNVHoB8eSC0M%3D\"}]}\r\ncf-ray: a14de4ba19b5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17004,"size_decoded":17755,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 17004, version 0.0","md5":"7375b68b2b6206e83cd2dbeaea40dc67","sha1":"41efa554e7b949efd1c97aee555117c21a76c07e","sha256":"79b761d9595324fdbcd4b7177b8fa73df9b74558603db072e1e2ae0bfa86f887","sha512":"c172c4b5fe504e2ae2d697af5adb22ded533e1d4858ae5b9bdf70d1e2c09fe6f09b0a4a024a1a599f6621733a2e331dac923a99d9780cb9824792a96fd209512","ssdeep":"384:6IG5/+sEEKmTKiGaUYRqUF2tq4LxTL+kj2SOzWZ:vU/+shKAPRqUFb49Lj2SOm","tlshash":"9472c0d8bf74c914dc1caaf0196baf48cbf8b14b217341ce49144d198ddaa584f47b66","first_seen":"2025-11-18T04:00:01.705623Z","last_seen":"2026-07-02T13:11:24.031151Z","times_seen":118,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T13:10:54.994Z","timestamp":1782997854994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Mon, 29 Jun 2026 15:27:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtDAq5m%2BR8FRWxKAsPhno3dpzOch9xtmCoeQZBKZms6IX59RGWbM14vGipRbSr7UNkL9Q%2BBhtvi6QULOtxhlZiOvUEeGi0WGg63RWQdrG2yrF3HsbccPd%2ButZboFlg%3D%3D\"}]}\r\nset-cookie: pixel=; Path=/; Max-Age=31536000; SameSite=Lax\ntt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax\nclarity=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_id=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_label=; Path=/; Max-Age=31536000; SameSite=Lax\ncf_s=0x4AAAAAAC0-BFzuR9gKzdcf; Path=/; Max-Age=31536000; SameSite=Lax\n_user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs; Path=/; Max-Age=31536000; SameSite=Lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a14de4b24e1c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":83605,"size_decoded":29878,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2445)","md5":"f7a8e719f176223969cbaa7e8dfcd901","sha1":"43697af8a40dc16ccb1d3e75b98be6bc028719b5","sha256":"0cc9b749c78f66bf37c21b3dfcc7641418674557697b2cac142c9b5f0ef2f3d7","sha512":"61477e90d9d4134a36edfc9de2413a110a31b0b47d954de82d95519939697085be73747820ab609fd7793cb995f523530cbf2d49d1a5ad6d95059c200086bdd7","ssdeep":"1536:O/LfBVdw6uH13DbMPtARw7InHvGF8BsHxSpQGcHQH+6wEKgd+ASFpYK/L14o2:vH994nm4EKgdZSFrjQ","tlshash":"5b832ba096f105e4500783a59626f908365a65abee06f4ec73ac44173f8dc4fc4fadee","first_seen":"2026-06-27T13:27:28.227425Z","last_seen":"2026-07-02T13:11:24.031629Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":48,"connect":36,"send":0,"wait":76,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.708Z","timestamp":1782997855708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::hmgf2-1782996994791-2f54e652d068\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BAFJ2CEif1ci8I6HzSbcdPAF6XZfqPhyszrSB3DQXOMO8bZCLAA6BdtJF5U1SSSmy5C0NzKEMq95jcd6W%2Fp4WY2QvLiiO2z0%2FzKB5iPu0ZLcjgZdXID%2BBJR6ANc66k%2FRGQ0JeU%3D\"}]}\r\ncf-ray: a14de4b65b7756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T20:08:22.483338Z","times_seen":16921891,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/dop/123.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.721Z","timestamp":1782997855721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/dop/123.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 10 Jun 2026 13:44:15 GMT\r\netag: \"6a296a2f-ad468\"\r\nexpires: Thu, 02 Jul 2026 13:19:26 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 10289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2j%2BXBVPtfVNCLPPkafZ%2Fhzvc%2FB3tiOoZh%2B6pAvtf3aNGMDRR4dETy0KOfRsd8ABEU%2BRJ5hOSVqCVg26yW1ua8IQUbpuhPJ6S8UALFrU5Ustdpl8ujRujWitXnqihEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b64e4456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 709736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":709736,"size_decoded":710647,"mime_type":"image/png","magic":"PNG image data, 1024 x 640, 8-bit/color RGBA, non-interlaced","md5":"2766af6dabd92a987a43a3958b819324","sha1":"dcab0a069ddf92a3021c82fd60969134673daf62","sha256":"0d7176d8d236aaba1bf6755d0b10b3b744a9a020cdef7ce4fb5c311f59588897","sha512":"020358d320e79c05a18d04c210f83b0d8d63ea6812757bbc67a200e0067bf330fc715683fbaebdf6a178ada4487e580809b8bf3c70f890b3c867735b4c1183fc","ssdeep":"12288:Kr4uFk9KaTdV477SsmoEc5JH7ipRnOljelaBhffBSQiAu7N02+etHair:vuFk9KaTdGQczH7ipRnO4laBhcZNl/6Q","tlshash":"48e42357f2069b81d08a2fb45e825e737f731a0480a167b6de4cb69f04f727c06a885b","first_seen":"2026-06-11T00:02:00.362569Z","last_seen":"2026-07-02T13:11:24.032607Z","times_seen":71,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/visit","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.981Z","timestamp":1782997855981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"POST /visit HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fnscan.live/\r\nOrigin: https://fnscan.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://fnscan.live\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QCck3DFeKHZEFIbOfIOqdH4%2FKVfZAP6m6jXMK2UJIbHb3K9O7uY%2BadQLSY6UD6N23WBjglp7zezQX35aS9VKcdKpKblj7AbmVhgWgYQJz1c%2BTwywB1vU7yi57jUbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b7ee6156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":683,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"72054d9a6fbdcc7df012e19f32345b65","sha1":"52dd4c74c813db3790179c4f236ceadaca3467a8","sha256":"c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334","sha512":"5305bacdfd7c9bb525ff6c40d3ffa23c3f82eb5268ce3037dc353fa1a043ae31b239eed46db0fb043d61c55d57b97c5f00c308f92456c51c44069f23fda40317","ssdeep":"","tlshash":"5f30000000000000000000003c00000000000000000000000000000000000000000000","first_seen":"2023-03-12T08:54:09Z","last_seen":"2026-07-02T13:11:24.033122Z","times_seen":3323,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/dop/1.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.719Z","timestamp":1782997855719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/dop/1.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 10 Jun 2026 13:44:15 GMT\r\netag: \"6a296a2f-48a4c\"\r\nexpires: Thu, 02 Jul 2026 13:19:26 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 10289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGLgtLo%2Fd2K1xO8Mzd9EHVWPYGwB97uwPr27XrAjap2%2BXYTlc9HuPxVz25Zg%2F3QDjeokh0sibB%2B6zpcxNRCb9oH%2FhE2fLRNM3ibE9y0%2FZnf1JHYP2XfrixnwOd07lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14de4b64e4256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 297548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297548,"size_decoded":298461,"mime_type":"image/png","magic":"PNG image data, 581 x 748, 8-bit/color RGBA, non-interlaced","md5":"c1d715a1b70cbe60afd6b4e185f88265","sha1":"134044c3f7268b394dda2c5fc111cc9bac839dea","sha256":"f1a0c497c2caa5da2982ea0b9ba9e1b07953538c625c68966767861698aeac93","sha512":"27508fbd4b6da864509028b0d7c209ec1ea1288095aea383aefc1cbca558e7f2d1bc6e5e82f14978214e02761db1fd7cbc99eba1c467883f104c2be3e071957a","ssdeep":"6144:Ph/FTu0PzLf2TCzbfEmdp+Kp9guSYql2YPPITzyAmht:dFzbLfhfH+Kp93SYTYPPO5mht","tlshash":"5a542245dcd01a9bda08fbfe875c0795e52ad2e8b798c53b92b7e80c73d60d53a1420d","first_seen":"2026-06-11T00:02:00.368663Z","last_seen":"2026-07-02T13:11:24.033616Z","times_seen":70,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/Epic.svg","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.424Z","timestamp":1782997856424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 02 Jul 2026 13:19:27 GMT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1N3TKMpnptiIDC3Tic3UPxNcRpmXhMpWHNr5lRe1wwX%2FXu2LGW7Kk%2Fnz0ipeBunIhEwYj3CveOlF1Yh9T4WNO6b2uU%2BcGZcKDw8R%2FDTqS%2BvpMuxqDofkbQBEjy84ZQ%3D%3D\"}]}\r\nage: 10289\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a14de4baae9356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3522,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-07-02T13:11:24.029575Z","times_seen":486,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:55.989Z","timestamp":1782997855989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\nexpires: Thu, 02 Jul 2026 13:10:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 02 Jul 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 88971\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237845,"size_decoded":89620,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4770)","md5":"22e8355c1fcf70107446f0597edb45a5","sha1":"4b3134ee641466eae5f14ccf42598b6d016352ba","sha256":"be9b2529321e81fc22cf83b02fa37f21b048fb37d1687320c648830d57ff1fb2","sha512":"fc1761e3273659f5c8385d1a3f5c00e53cacf27d40d79c825b17fad83de8100b8cf971b9d4abdf4cbcb39f619f0a8b6fa742fcdbc7a54a3ca77a911c3f0affad","ssdeep":"3072:dVOEPf7pvs/rxcC8/S0rkzsQ8tDWWDdPh8n/lofn4PacfNfTfkQFfm6y4d9:5Lpsdy/jQOu87c5TfkQFfT","tlshash":"87341acdb3d670669393b5b8903f014bb27a79a2b84cc8a4f182d8c42e746594277f7d","first_seen":"2026-07-02T06:57:46.039188Z","last_seen":"2026-07-02T15:13:51.148769Z","times_seen":10,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":32,"receive":32,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.315Z","timestamp":1782997856315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fnscan.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T20:10:51.910044Z","times_seen":224992,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/7.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.359Z","timestamp":1782997856359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/7.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBgvzGV9%2BhlzI6NJeCcZizz21BR3vxAzbRhbGT7MAwLs%2BDY7CeUkUrG%2B6vyikYFsw43d%2BxatLJU9i5pBFtvcktGaGKj0daVtfrdZjXoo2dyX2N44KVc8mbLQMhlsEQ%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba3e8956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":931,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fnscan.live/assets/avatars/9.png","fqdn":"fnscan.live","domain":"fnscan.live","tld":"live"},"ip":{"addr":"104.21.62.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fnscan.live/","date":"2026-07-02T13:10:56.364Z","timestamp":1782997856364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fnscan.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 15:25:26 GMT","end":"Tue, 01 Sep 2026 15:25:25 GMT"},"fingerprint":{"sha1":"9A:C6:B5:EC:48:4C:19:E7:60:02:DE:66:58:C0:3E:D5:34:D9:F8:90","sha256":"FE:C2:CC:E3:B5:51:64:58:95:39:16:D6:7D:1A:AF:EA:8F:17:E6:F5:5D:CC:E1:38:9F:9E:46:0F:DC:FF:D4:CF"}}},"request":{"raw":"GET /assets/avatars/9.png HTTP/1.1\r\nHost: fnscan.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fnscan.live/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAAC0-BFzuR9gKzdcf; _user_c=1782997855:195.64.118.152:9Fw8LFto5lqBfjRv1w0-T1LmUnIyafjfMKlyo2R15Fs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:10:56 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2y0qLBCuHZxw8PaQ%2BrvkirF3bBZlwVP8lwFH8er5BB7Ghfgswh5ZQLLdC29lFwbyF7cUwL3HvDBpoopYJbXqTlHQARU8s6tjR%2Flg7huP61s2SVpY9%2BFBmaK8ug0jA%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=14400\r\nx-cache-status: HIT\r\nage: 10289\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a14de4ba4e8d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":929,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad76203cbb9feb6a77342842816f7b51","sha1":"12150fb48e15b3daa031a2ad5f3d011976a1c068","sha256":"a980b60a8922f510d2da527e74ec9443a57dcc65444dbd6a3ae87dceb28090eb","sha512":"85b1bd5c232a000551ca69d9832ecfba1ae61c42ec8e91847de76b4b711f5a39aa3d0bf71f4062f855584c64b3b526d4d11885309f7abcdb42c7cfefefcab088","ssdeep":"","tlshash":"46f0909f5f12287f2e238471f4c35169cf680a17fb9925e28748011f7aca04549f1fad","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-02T14:19:28.571276Z","times_seen":829,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"fnscan.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"fnscan.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}