{"report_id":"c466ec18-f998-4e09-b980-03ddec9cd788","version":0,"status":"done","tags":[],"date":"2026-07-15T01:24:31Z","url":{"schema":"https","addr":"ff-io.co/","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ff-io.co/","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"title":"FixedFloat | Easy Crypto Exchange | ff io","dom":{"size":30046,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1979)","md5":"4bac809a0a10916aae771728187e28bf","sha1":"6773e26e6dc61271462cfb88ee408be5904e8305","sha256":"551bc79b5cf8454bd1b4bde252253e862df8ee746cf566a4ab32f4c276a220a7","sha512":"3f847f01146faa3dc00b54bb2d9c55125cd63f4d9dff3630fb1a5ca8e0b00ee459060e83d2c00f1f7a46e870558e5d4ee618d35f64b486847ea162ff68b3c36e","ssdeep":"768:+CgyLqrZM3EY7DS+6GEEis7Ti+6GUdkB3a9:jX7DS+6GVis7Ti+6Gr30","tlshash":"fcd28421344c3ebe1543529a667122caa56fedb4f72280e9f2ff425017d3c949537ae3","dom_hash":"domhash66494a0c2a32019df3c331d6832240e1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ff-io.co/","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T01:24:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ff-io.co","ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-24T18:31:19.068349Z","last_seen":"2026-07-15T01:17:13.450642Z","alert_count":24,"request_count":12,"received_data":2822188,"sent_data":7851,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ff-io.co/favicon-16x16.png","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:56.133Z","timestamp":1784078636133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 802\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: \"6a4bd276-322\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1050,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"79b9e5a6a0be665a78265cb5546e2a3b","sha1":"8ef1a75870d0fad544e53ff4af9f15b55577e6d5","sha256":"3fd65ba39ddbe670c31d3de88170b4343e39db1575b1483b28150baa223633a0","sha512":"0499fdf5da9fd7385058aed6dfd96a0a2ae518c1a8756a128e9dffbaef5b901750bb79af9c795837694e44910665dae086aed3b4a51ebb3518986828dc17a96c","ssdeep":"","tlshash":"1b0175ebc0b8cc29ea0b23158a2f2167d87bc3166757011c684be6955ec8bccd894ed6","first_seen":"2025-08-31T00:05:50.306962Z","last_seen":"2026-07-15T02:52:51.39901Z","times_seen":54,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/media/poster.ff25224b.jpg","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:56.212Z","timestamp":1784078636212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/media/poster.ff25224b.jpg HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"6a4bd27d-126b\"\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4715,"size_decoded":1563,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7d2ad0568dfaedcabd6e6b74b36247c0","sha1":"0e4445e7d1d63b230e6f8bcac9f4b75157f54560","sha256":"23f88f237a4c480d8cb166ba9fba1922c201f4e6b1c38725873e417656ecba48","sha512":"f5c84740ea3468c491c29ee7db3dc07e6447b60ff7ed8ab23754bda2955fcf741b24a021c2cd115785129c5ecde07df78f32cbb99fc1eeb9a0e913a2aa74c268","ssdeep":"48:Rv/tst8rGyE8+FjA7cTy7+jwZ/5R59u6bzedsOoxM0SFH+ixYkATKqf5ipmYytZf:F7rI8+FjAIErWHoxV/K9+I/d3yYAA+2M","tlshash":"eea1de8e57334212a4d3abaae7ef6a5921e48003e84bcd3cbfde1178cf841105d42b8d","first_seen":"2025-07-01T22:26:06.862741Z","last_seen":"2026-07-15T01:24:33.819521Z","times_seen":94,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/media/WiseSans-Heavy.4bf7de7a.woff2","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:56.242Z","timestamp":1784078636242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/media/WiseSans-Heavy.4bf7de7a.woff2 HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/static-assets/app/_next/static/css/84d094f7a1b77744.css\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 54124\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: \"6a4bd276-d36c\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54124,"size_decoded":54376,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54124, version 1.0","md5":"aa6dedf688ea383edbd9dc5958a346dc","sha1":"70e5a63fa9c4e2d97c6b1f11088617bc7aa6f0c0","sha256":"837adcb3f4c474f3181d08c28ed1c78bedea3e7fc71f76316bf42aebeb0b89ee","sha512":"ce6c155f7f5e5d49a1b0fb493293d3b80acb36b15a5f73ede19af3cd5056bf0dd62c48f033081f3cc56a5eb55fa949604897e2e2050e641f6239c5fb68ea5988","ssdeep":"1536:AuCP8VMkUSSWjicXwSVpjRHAem4b5CWEYMfO:AuRVESbDbp1c4tCvdfO","tlshash":"1e3302716fa0a20f3afaf2f42eb3883279516552c3cb1975b0517398116c1a2e7f4e1e","first_seen":"2023-12-03T02:45:50Z","last_seen":"2026-07-15T01:24:33.820264Z","times_seen":71,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/css/84d094f7a1b77744.css","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:55.974Z","timestamp":1784078635974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/css/84d094f7a1b77744.css HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: W/\"6a4bd276-18da11\"\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1628689,"size_decoded":223139,"mime_type":"text/css","magic":"ASCII text, with very long lines (61673)","md5":"9d5cd7305163bbc7f05a9f9dd21f525d","sha1":"7f261cc4c9e83706ae70bd9e1babb2d3d7579c1f","sha256":"24f114565b2333024a93fa28dc85847dddaf03d9cfe5bcf33100733303edb3f6","sha512":"8b58bbc5a53be6dc090f40bffb02037cb00275b3dec5bdf082fa88157ac14e29d437fab54594eef793133411cf842f8607016cd8e6d1877401f6759585c26029","ssdeep":"6144:p61tHmbCV2YnQ0fGYpM0lUjJmtN6wwJCDDVhPKINa4TiV/oF45gINaVYNrE:utVM0iBINJoqUgINcYNE","tlshash":"e0250898f550b2796c27d12592e4e6ad5b14a042fb321ffbfe06a1018bc66d70373f29","first_seen":"2025-12-07T16:49:32.415777Z","last_seen":"2026-07-15T01:24:33.821327Z","times_seen":18,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/css/982aeaf6fda37547.css","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:55.975Z","timestamp":1784078635975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/css/982aeaf6fda37547.css HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: W/\"6a4bd276-65ce\"\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26062,"size_decoded":5763,"mime_type":"text/css","magic":"ASCII text, with very long lines (26014)","md5":"412f9cb637aa1cc286771c06b170fafc","sha1":"0bd60d952bb5c2fa48edd1e1704f78f4873f35bf","sha256":"d9f80458107d7e8ea87ae231aa99ed9a5bed95805b7fced602e55ef9c951901e","sha512":"a82b1377dfb579102660fad6684a985c9522f8403068cd64bbcee28bad5134ce76d9a5fb4a9404649ddbbc90ba744bb12c7b2133aefdab30d35dca66432b4422","ssdeep":"384:Ffsum+6HrGCJgYk7Lk4m0sR+cGyFUaDepeVfZiH:Ffsum+ptYk/kXLGyFUGfZiH","tlshash":"5ac284b5f2d0a37c6a27d23953dce2dc1135d542d8120ffdba16a1694bc3ee702b216a","first_seen":"2026-03-06T11:33:11.741208Z","last_seen":"2026-07-15T01:24:33.822378Z","times_seen":11,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/css/21bbcf2bbef83169.css","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:55.977Z","timestamp":1784078635977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/css/21bbcf2bbef83169.css HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: W/\"6a4bd276-8a37\"\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":35383,"size_decoded":7249,"mime_type":"text/css","magic":"ASCII text, with very long lines (35335)","md5":"616a618d3b037056a63d4b2c0b5fe1aa","sha1":"5ceeb142c165c8f8b73565ad2bf2ac15b181b2f6","sha256":"3da6bf9c93b916b42f3bc4b42f5a570789b3fee1d59df5def5f31b1718225032","sha512":"8c57c057ef26af9629e920427cecbdd5e55ebc804c63c4126da84840e1c48c38a2b984299b203f198e78353e6ad46ff7dbcc1897670215505cfbb9330477205f","ssdeep":"192:Yc53C121OX4D4sX57eiCQw/n5KTlO9EMrjIByCmYxeb2xC8mHcpspapMpmpfpaFW:vCs45K0nbF4eXbppHXHZLpIkcvBtEi","tlshash":"e9f2a876a651b23cfc2bac1c439995ac4664d601ee0b2ef5b921682687c37f3067317f","first_seen":"2026-03-06T11:33:11.733473Z","last_seen":"2026-07-15T01:24:33.823061Z","times_seen":11,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/favicon-48x48.png","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:55.984Z","timestamp":1784078635984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /favicon-48x48.png HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2716\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: \"6a4bd276-a9c\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2716,"size_decoded":2965,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"f29b3f8ac1e76879fcd48faf5dc46fc7","sha1":"13891fa26c80785b3d05969b2d767844aca3c6ae","sha256":"33cdb303cdf13662e8e106fbd519d4f3515c73d205f905bb75ac083484d50424","sha512":"e55e58b0aadb508507593a64efebf67ff8e59a0e2bf13e45b8c9d65f59e01bb037530ffc7872f6bda8c99e396c1c0bb36923c078ec15c3dc142d10ff60841939","ssdeep":"","tlshash":"52515cdea5e0e664bc2f02275d0a6492f9f385416b33200a1cd9a2857ac0f541a5dfe0","first_seen":"2025-12-01T18:10:52.331518Z","last_seen":"2026-07-15T01:24:33.823607Z","times_seen":18,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/media/inter-latin-variable-wghtOnly-normal.40c45725.woff2","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:56.240Z","timestamp":1784078636240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/media/inter-latin-variable-wghtOnly-normal.40c45725.woff2 HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/static-assets/app/_next/static/css/84d094f7a1b77744.css\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37924\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: \"6a4bd276-9424\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37924,"size_decoded":38176,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-07-15T01:24:33.824153Z","times_seen":3666,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T01:23:55.320Z","timestamp":1784078635320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; path=/\n_token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; expires=Tue, 17-Nov-2026 01:23:55 GMT; Max-Age=10800000; path=/; domain=.ff-io.co\n_subid=18uumd0.84.f9h0f; expires=Tue, 17-Nov-2026 01:23:55 GMT; Max-Age=10800000; path=/; domain=.ff-io.co\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":30126,"size_decoded":8437,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1979)","md5":"9304f0ca52a898416b0b06e8583a9c35","sha1":"6ba26abfe2a065b975b12b760857321edaaafd34","sha256":"ab0e3dc0eee594bcdf8fd9a68fa39b0f90fba6ff8d6d0a4d51564d46fb631768","sha512":"d1c6edf392535d3d2facef1328c2b34ab9508718538c09650dc75ab270390571dbf259df9109d73ec3709e7a0579f325c7a6f94d2c91c1cfb92a79e0f68d6b7b","ssdeep":"768:D0gyLqrZM3EY7DS+6GEHis7Ti+6GUd9BBaj:YX7DS+6GAis7Ti+6G8B+","tlshash":"98d28421344c3ebe1543529a667122cea56fedb4e72280e9f2ff425017d3c9495376e3","first_seen":"2026-07-15T01:17:12.05298Z","last_seen":"2026-07-15T01:24:33.824711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":277,"connect":19,"send":0,"wait":89,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/media/poster.ff25224b.jpg","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:55.990Z","timestamp":1784078635990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/media/poster.ff25224b.jpg HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"6a4bd27d-126b\"\r\nx-cache-status: STALE\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4715,"size_decoded":1565,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7d2ad0568dfaedcabd6e6b74b36247c0","sha1":"0e4445e7d1d63b230e6f8bcac9f4b75157f54560","sha256":"23f88f237a4c480d8cb166ba9fba1922c201f4e6b1c38725873e417656ecba48","sha512":"f5c84740ea3468c491c29ee7db3dc07e6447b60ff7ed8ab23754bda2955fcf741b24a021c2cd115785129c5ecde07df78f32cbb99fc1eeb9a0e913a2aa74c268","ssdeep":"48:Rv/tst8rGyE8+FjA7cTy7+jwZ/5R59u6bzedsOoxM0SFH+ixYkATKqf5ipmYytZf:F7rI8+FjAIErWHoxV/K9+I/d3yYAA+2M","tlshash":"eea1de8e57334212a4d3abaae7ef6a5921e48003e84bcd3cbfde1178cf841105d42b8d","first_seen":"2025-07-01T22:26:06.862741Z","last_seen":"2026-07-15T01:24:33.819521Z","times_seen":94,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/static-assets/app/_next/static/media/3d-globe-72a5cb0edcbe31cf385aa34558b1c435.webm","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:55.995Z","timestamp":1784078635995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /static-assets/app/_next/static/media/3d-globe-72a5cb0edcbe31cf385aa34558b1c435.webm HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: video/webm\r\ncontent-length: 977639\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: \"6a4bd276-eeae7\"\r\ncontent-range: bytes 0-977638/977639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":977639,"size_decoded":977888,"mime_type":"video/webm","magic":"WebM","md5":"9a3f43eec883cd26491adfc71d16c250","sha1":"ff23bacbbc3a4bb51c454bde7d2e27a96d291253","sha256":"6a7794a53fa714cd47e36fc98693eabe1b303976cf9ec00a83dfbebb1106b53c","sha512":"e9e4580e0315be292b646bb5bfc659c9f1062dbb1a32fbb7d91efc1ef0bcb5b2b9805069e1aae17b9e3d0fdae16e24a64709702771d39a13433ba19bc56be3e6","ssdeep":"24576:AsXsmUMnduY1FcEpXHq++nRa2JHu8QG3M2SI:jXXzduYxXHq++IB8QGWI","tlshash":"d32533aafb6416d6c815623a3d3a38d9b9e63891009dd758b11bddf1f3d18212e01ff8","first_seen":"2023-08-18T01:01:41Z","last_seen":"2026-07-15T01:24:33.825386Z","times_seen":40,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-io.co/apple_images_180x180.png","fqdn":"ff-io.co","domain":"ff-io.co","tld":"co"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-io.co/","date":"2026-07-15T01:23:56.132Z","timestamp":1784078636132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-io.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:32:40 GMT","end":"Sun, 11 Oct 2026 12:32:39 GMT"},"fingerprint":{"sha1":"E2:1B:9D:56:3A:00:3C:58:45:4D:8E:C5:38:E9:C7:BB:68:66:B3:6E","sha256":"54:D4:3B:9E:55:42:2E:02:C2:38:54:C8:3F:8B:94:BC:0B:2A:55:44:80:1F:BA:11:A7:7E:E2:2B:96:CB:D3:06"}}},"request":{"raw":"GET /apple_images_180x180.png HTTP/1.1\r\nHost: ff-io.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ff-io.co/\r\nCookie: PHPSESSID=0ffef31c88c61b65156062d4ea788990; _token=14m1eet1rnbi5c.1784165035.2.96ec6fce8242d50117b0398f34e4668d; _subid=18uumd0.84.f9h0f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 15 Jul 2026 01:23:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 15972\r\nlast-modified: Mon, 06 Jul 2026 16:06:14 GMT\r\netag: \"6a4bd276-3e64\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15972,"size_decoded":16223,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"55a56916ae9ad44cdb0f8c591c1a8a97","sha1":"2c9448961b1d839208c569d6a9fa919cd4785b80","sha256":"658c757766ce851f8cf591119d018a5269f1b4af7441bb9ca9aaa50c7b0ad604","sha512":"e6a3a58cdcaae9a0bd89a8adf26b06ad9c18957dec43464b54aed221f4dd5abdc89492726d78c8e2846b75f8888933029efee0f433f0ad6b57c4efa50f8c2000","ssdeep":"384:g1+U1qDmMnJ/LNDPoCmoxyxfE6H6PjGB68ka7bAkEnCdX:g4U5Mn/7rL+fE6sGB3w+dX","tlshash":"ee72d1b7e548ca79fd8433299d8b49108ed0c1e38f39655caf50c0b04cddf257a76a88","first_seen":"2025-08-31T00:05:50.329682Z","last_seen":"2026-07-15T02:52:51.395038Z","times_seen":71,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ff-io.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}