{"report_id":"c6e59136-4162-4199-9f74-42a1bf26fe34","version":0,"status":"done","tags":[],"date":"2026-07-15T01:22:09Z","url":{"schema":"http","addr":"ogstat.one","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ogstat.one/","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"title":"403 · Forbidden — SilkGuard","dom":{"size":12077,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611)","md5":"8dde928131316e4589b269699e29f074","sha1":"299dc8e686d2e0c8e3fe2a312adb4971b8242dda","sha256":"0c37552863728d90f48f2bd485f9d8411839c058666a1dbdde49a4e45c972463","sha512":"24b211f102bd3fe4845d8c833715fcfa67817e6de82eabbd6e8cce1e91e15e3e61214196b5d8b8ecf804ecdd09f67fd2ea8825b98132ff6aa05961e49727d4fe","ssdeep":"192:Qg0adqflIEkwHWR8QudTtdQDxWEXUF33Lg7VSiySeLDCo/O62MG3u:DCkfDcmg","tlshash":"7f42b86623730135b833aaa577db6b0a7160e403c406ddb53edc0258cf8aafda6d274c","dom_hash":"domhash56b1fc2b30f987be6dc585ae94307f78","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ogstat.one","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T01:22:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ogstat.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":13320,"sent_data":604,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":5,"received_data":121724,"sent_data":2789,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ogstat.one","ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-11","domain_rank":0,"first_seen":"2026-07-15T01:13:11.24409Z","last_seen":"2026-07-15T01:13:11.24409Z","alert_count":3,"request_count":3,"received_data":24746,"sent_data":1353,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ogstat.one/","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"473d5479d1552f2effd785c2bfb8e730","sha1":"8650f0f79632520093a485a37a9a3c8fa21ffb0f","sha256":"85cff4e42601cd6b402eac1e7312e5702163d8499ddf39f21eb6dfa8718d24ad","sha512":"9ecbe588d047e095101d15d77e0e4bbf173b246088f28e8661d7c7730bd5e4a97c7e658c2faa7c35abb521e3e01828d6bf81f278412f8923b14ad4519e26fb58","ssdeep":"","tlshash":"fab0124031c004808aae0101c1c32503325ed20144500441284b840a2029c9a33298b2","size":88,"data":"","first_seen":"2026-07-14T21:11:46.946004Z","last_seen":"2026-07-15T02:05:38.999435Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogstat.one/","date":"2026-07-15T01:21:43.506Z","timestamp":1784078503506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ogstat.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 07:44:18 GMT\r\nexpires: Fri, 09 Jul 2027 07:44:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 495445\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13768,"size_decoded":14581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-07-15T04:13:45.842395Z","times_seen":11207,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogstat.one/","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T01:21:42.962Z","timestamp":1784078502962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogstat.one","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:37:19 GMT","end":"Fri, 09 Oct 2026 13:37:18 GMT"},"fingerprint":{"sha1":"F4:CA:1C:D5:78:4C:B0:55:F9:CE:A5:BE:83:CA:A5:B3:FE:63:96:79","sha256":"07:99:F3:C0:D6:5A:52:9F:BF:E0:22:1E:7D:B7:9A:9C:19:24:C9:E7:7F:41:AA:C5:C7:F0:5D:14:C3:93:82:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ogstat.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 12064\r\ncache-control: no-store\r\nx-incident-id: euwest1::1784078503-GkTuFhSUTBl4sRP628UMtydAA1DNB8X2\r\nx-edge-action: block\r\ndate: Wed, 15 Jul 2026 01:21:43 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":null,"data":{"size":12064,"size_decoded":12331,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611)","md5":"eb59fc8a8692c56a38c7354d97db9b28","sha1":"b305f6e90fb2208e01729f5d7e21d8ae2cf4a5a9","sha256":"95b2cbff8c6992947cfff912492017ad44a1c3f95867c5a92ae498651fab288e","sha512":"34af01260a1dc15b579bb8ad63d1dfd2ca742dd49201ad2384a0d133412ed0be4721290523cb822c421e88c914ffbdea75fa5a1f8bf8ce0e9a4aa16db1080dc0","ssdeep":"192:3sg0ShqflIEkwHWR8QudTtdQDxWEXUF33Lg7VSiySeLDCM/O62MG3G:FWkfDQmg","tlshash":"2f42a86623730135b833aaa577db6b0a6161e503c406ddb53edc0258cfcaafda6d274c","first_seen":"2026-07-15T01:22:09.546719Z","last_seen":"2026-07-15T01:22:09.546719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ogstat.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Instrument+Serif:ital@0;1\u0026family=Geist:wght@300;400;500\u0026family=Geist+Mono:wght@400;500\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogstat.one/","date":"2026-07-15T01:21:43.357Z","timestamp":1784078503357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Instrument+Serif:ital@0;1\u0026family=Geist:wght@300;400;500\u0026family=Geist+Mono:wght@400;500\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ogstat.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Jul 2026 01:21:43 GMT\r\ndate: Wed, 15 Jul 2026 01:21:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12636,"size_decoded":1670,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e093c07c12b741e1e1bfe74fc4c04849","sha1":"3782b98f392b0e85e3bb0dfb4f90167f7ae647a1","sha256":"fb4e662a0ce9f009a4894501d47654051761ce2b2a75ba2a1c7f53ab332f3784","sha512":"8021f79e0c9568fe7e1a22b04e4b2276715add5b39c4fa5a87c119c07f64afa92ee8e5c7c461941ae36b445b23254493a34a4dffbc2e02de3d75bbea5a4dc00f","ssdeep":"192:K1/YtKJLVtkXtrJqotZwtEJZvtqogkj3AzktiygLc3AsLtR3OvWJOvWNHA:tQC14+iYA3IA+dq","tlshash":"ae42fc91046bd400eb931cc237cf7e36ae8e61157444d57eabfe08dcacaac265365b2d","first_seen":"2026-06-28T14:19:33.209461Z","last_seen":"2026-07-15T03:50:08.500082Z","times_seen":91,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogstat.one/","date":"2026-07-15T01:21:43.477Z","timestamp":1784078503477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ogstat.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:09:19 GMT\r\nexpires: Fri, 09 Jul 2027 01:09:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519144\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-07-15T03:50:08.500772Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogstat.one/","date":"2026-07-15T01:21:43.499Z","timestamp":1784078503499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ogstat.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:09:19 GMT\r\nexpires: Fri, 09 Jul 2027 01:09:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519144\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-07-15T03:50:08.500772Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentserif/v5/jizHRFtNs2ka5fXjeivQ4LroWlx-6zAjjH7M.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogstat.one/","date":"2026-07-15T01:21:43.502Z","timestamp":1784078503502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/instrumentserif/v5/jizHRFtNs2ka5fXjeivQ4LroWlx-6zAjjH7M.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ogstat.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:07:18 GMT\r\nexpires: Mon, 12 Jul 2027 12:07:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 220465\r\nlast-modified: Thu, 04 Sep 2025 17:19:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22128,"size_decoded":22941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22128, version 1.0","md5":"bc891bdd08ad55f22a545508466f855b","sha1":"24e6c99ca08b1e5acc92cf106c586f491ed15151","sha256":"5a51946dfffa82972bc98745359c46761515641fda557c25116459a9f83da4a7","sha512":"50f56f74de747ac5e63de8000dad47fe758d14f77a6f196938ea075e836ce29e01f98884e37f278e0a36ce50a03874af239ebf36e4c7480b3e05021b1b70f9a8","ssdeep":"384:KgIqm88WU0pMFLBCqOeANVwepCcyQxODsiuRdjccBgqirziD/pOk5Tuc:dnm88WyFlJc7CcRxOArecGqVDRF6c","tlshash":"71a2e1d844d527e287e4b4b5e530b8a6ac7ed9da8e3b266330f3a999b8484827343410","first_seen":"2025-09-11T04:20:12.966234Z","last_seen":"2026-07-15T03:50:08.501305Z","times_seen":1492,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogstat.one/","date":"2026-07-15T01:21:43.504Z","timestamp":1784078503504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ogstat.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 00:41:02 GMT\r\nexpires: Wed, 14 Jul 2027 00:41:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 88841\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23156,"size_decoded":23968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-07-15T03:50:08.501841Z","times_seen":406,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogstat.one/","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T01:21:42.606Z","timestamp":1784078502606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogstat.one","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:37:19 GMT","end":"Fri, 09 Oct 2026 13:37:18 GMT"},"fingerprint":{"sha1":"F4:CA:1C:D5:78:4C:B0:55:F9:CE:A5:BE:83:CA:A5:B3:FE:63:96:79","sha256":"07:99:F3:C0:D6:5A:52:9F:BF:E0:22:1E:7D:B7:9A:9C:19:24:C9:E7:7F:41:AA:C5:C7:F0:5D:14:C3:93:82:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ogstat.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 12064\r\ncache-control: no-store\r\nx-incident-id: euwest1::1784078502-6RTNH7jCOHESBumPrYBSifyFAq57W6OQ\r\nx-edge-action: block\r\ndate: Wed, 15 Jul 2026 01:21:42 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":null,"data":{"size":12064,"size_decoded":12331,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611)","md5":"4b3ac06972a4e581b98e0be2a7243e0a","sha1":"a7c6587a166cf9a88d522f94374436d264424c7b","sha256":"5ef498416142f543180182b2a975400acd80fd1a502cd45f444e9d5703f1f8a1","sha512":"35945dfb9505d93fa3ae8fab0c90d705feec4299b15c4e9f6f79661a493b875fa440525cdfc4c3e4643e0e5094d2089f654c0595717f7489527a56b379ec38a1","ssdeep":"192:3sg0ShqflIEkwHWR8QudTtdQDxWEXUF33Lg7VSiySeLDCM/O62MG3B:FWkfDQmb","tlshash":"c142a86623730135f833aaa577db6b0a6160e503c406dda53edc0258cfcaafda6d274c","first_seen":"2026-07-15T01:22:09.554527Z","last_seen":"2026-07-15T01:22:09.554527Z","times_seen":1,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":3,"connect":66,"send":0,"wait":66,"receive":6,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ogstat.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ogstat.one/","fqdn":"ogstat.one","domain":"ogstat.one","tld":"one"},"ip":{"addr":"193.187.110.3","port":80,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T01:21:42.928Z","timestamp":1784078502928,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ogstat.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\ncontent-length: 0\r\nlocation: https://ogstat.one/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T04:18:35.662958Z","times_seen":17255548,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ogstat.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}