{"report_id":"c70ebb0c-1522-4fcd-acc3-aa6cc683f7de","version":0,"status":"done","tags":[],"date":"2026-07-12T18:49:35Z","url":{"schema":"https","addr":"fortmie.com/","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"fortmie.com/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"title":"Loading","dom":{"size":2435929,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51216)","md5":"229d77b5a27cb6348f2926421d673803","sha1":"9118a7ce6b36d3aee4d7c30ba7962fc079d3e0bc","sha256":"dc0127ef2f641aa14764f3dd194bc36c067509a60e272c9df40447af3ae3283d","sha512":"764f7c4bd84b5c77045442805d7f05e79578a55b38415d83499913739a301ec3ad4ade951758acc12ae92d1d4763f1f2840fd0c0c0ec56edddbc13875889607f","ssdeep":"12288:onZthdSLsgnB/xjSXe4NvhwQUA2w/z0cCrRvCTRGmcA874SN7csswgOicHzGXoYo:ojhdEnYNvA1","tlshash":"24b580d63591b59e048787323a4e5bf558bfc501c5cba08ef9889eedf0dce6229883c5","dom_hash":"domhashd9fedc4cc384579a446a5266c87bb20c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fortmie.com/","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T18:49:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"fortmie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fortmie.com","ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-07-04","domain_rank":0,"first_seen":"2026-07-10T09:37:50.139712Z","last_seen":"2026-07-10T09:37:50.139712Z","alert_count":3,"request_count":3,"received_data":2236421,"sent_data":2402,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fortmie.com/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b427470c20e12aceb03c352b7d244b","sha1":"6a9b4c564fb393fee494243f3e5bb1f0c7f17ca2","sha256":"2b70871b9573fa39b839ef518ab7cc5d04df36858d0263b4b7e23e24eb9b89ed","sha512":"f4204206ae7fdd1989ebdf71a3c2874d60a9fc2e7f279089204040dd171dca6d6891917794824ba0a888e1273310c51337b831b4d289534f6a0db9164717c10a","ssdeep":"12288:9QUA2w/z0cCrRvCTRGmcA874SN7csswgOicHzGXoY1nfKesQWArhJbO+2rEHAVxI:nk","tlshash":"d2a52dd63591b59e048787323a4e5bf558bfc505c5cba08ef8889eedf0dce6229883c5","size":2132097,"data":"","first_seen":"2026-07-12T18:51:28.584901Z","last_seen":"2026-07-12T18:51:28.584901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://fortmie.com/","line_number":746,"column_number":214},{"level":"debug","text":"","filename":"https://fortmie.com/","line_number":750,"column_number":57}]},"http":[{"url":{"schema":"https","addr":"fortmie.com/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T18:49:06.528Z","timestamp":1783882146528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmie.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 10:07:38 GMT","end":"Fri, 02 Oct 2026 10:07:37 GMT"},"fingerprint":{"sha1":"88:1F:51:C6:92:D4:AA:E9:CC:55:98:6F:A1:AA:06:EA:90:9F:69:A1","sha256":"60:44:FF:80:9F:DD:BD:F9:50:08:5C:C8:E1:7D:97:02:A3:A7:22:13:E3:3F:19:82:45:10:08:1A:F7:67:CC:2F"}}},"request":{"raw":"GET /.rt/challenge?tier=captcha\u0026return_to=%2F HTTP/1.1\r\nHost: fortmie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmie.com/\r\nCookie: sil_ses=00582c904c1118dee5537ff94f87f48a; __Host-sil_ses=00582c904c1118dee5537ff94f87f48a; sil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQDyj5-lDdwz38yu-dng.ZU4IkHkuq4gvW9JI0sasBRsSuRA6kILyVNcyxPxlw5Bue8ya28bDDyae9-P1FMXNmqRX2m_ARYlQuZwTmPd8AQ; __Host-sil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQDyj5-lDdwz38yu-dng.ZU4IkHkuq4gvW9JI0sasBRsSuRA6kILyVNcyxPxlw5Bue8ya28bDDyae9-P1FMXNmqRX2m_ARYlQuZwTmPd8AQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 632920\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: sil_ses=00582c904c1118dee5537ff94f87f48a; Path=/; Domain=fortmie.com; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=00582c904c1118dee5537ff94f87f48a; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQH0j5-lDdwz38yu-dng.a8hEHUV2_jCrRZQlX44-ZNbWKUnr68kVOteYdHIdOM3L1D5W7mZg4sxQ6k3x-JIxC6P_d2Ub2Y-ibbHERDbQCg; Path=/; Domain=fortmie.com; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQH0j5-lDdwz38yu-dng.a8hEHUV2_jCrRZQlX44-ZNbWKUnr68kVOteYdHIdOM3L1D5W7mZg4sxQ6k3x-JIxC6P_d2Ub2Y-ibbHERDbQCg; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nx-edge-action: captcha\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 18:49:06 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2148161,"size_decoded":633910,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49179)","md5":"6d3087cdae843e9fa7034db51ff4ed9c","sha1":"5c1837b87406d5843bdd5dba847457d41452a566","sha256":"6e4bcb42973d55246a99d835757c1e91bc147d59382e659f01335132f068ab20","sha512":"7533c3fed023ba65791d7f01f581473e9124a4032a1d2488d854c20dd44dbbbd312a73aee9134c50902364167e1d54a7023d20439606673e0c0205c85151e41c","ssdeep":"12288:0QUA2w/z0cCrRvCTRGmcA874SN7csswgOicHzGXoY1nfKesQWArhJbO+2rEHAVxj:O","tlshash":"9925e9d63591b59a048787323a4e5bf5546fc905c5cba48ef8889eedf0dceb239883c1","first_seen":"2026-07-12T18:51:28.580891Z","last_seen":"2026-07-12T18:51:28.580891Z","times_seen":1,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"fortmie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortmie.com/.rt/ce","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortmie.com/.rt/challenge?tier=captcha\u0026return_to=%2F","date":"2026-07-12T18:49:07.294Z","timestamp":1783882147294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmie.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 10:07:38 GMT","end":"Fri, 02 Oct 2026 10:07:37 GMT"},"fingerprint":{"sha1":"88:1F:51:C6:92:D4:AA:E9:CC:55:98:6F:A1:AA:06:EA:90:9F:69:A1","sha256":"60:44:FF:80:9F:DD:BD:F9:50:08:5C:C8:E1:7D:97:02:A3:A7:22:13:E3:3F:19:82:45:10:08:1A:F7:67:CC:2F"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: fortmie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://fortmie.com/.rt/challenge?tier=captcha\u0026return_to=%2F\r\nContent-Length: 139\r\nOrigin: https://fortmie.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=00582c904c1118dee5537ff94f87f48a; __Host-sil_ses=00582c904c1118dee5537ff94f87f48a; sil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQH0j5-lDdwz38yu-dng.a8hEHUV2_jCrRZQlX44-ZNbWKUnr68kVOteYdHIdOM3L1D5W7mZg4sxQ6k3x-JIxC6P_d2Ub2Y-ibbHERDbQCg; __Host-sil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQH0j5-lDdwz38yu-dng.a8hEHUV2_jCrRZQlX44-ZNbWKUnr68kVOteYdHIdOM3L1D5W7mZg4sxQ6k3x-JIxC6P_d2Ub2Y-ibbHERDbQCg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"p\":\"init\",\"cid\":\"2c5498c9d6487f4ad809eea85249b111266cdb96389d5fdb29f1d753059c0a56\",\"kind\":\"slide_puzzle\",\"subtle\":true,\"t\":1783882147293}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: nl1::1783882147-05n1I9C9YA1wkBoFLEt84bJGSwL1XNTF\r\ndate: Sun, 12 Jul 2026 18:49:07 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1258,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T10:17:50.754787Z","times_seen":17210635,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"fortmie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortmie.com/","fqdn":"fortmie.com","domain":"fortmie.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T18:49:04.721Z","timestamp":1783882144721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmie.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 10:07:38 GMT","end":"Fri, 02 Oct 2026 10:07:37 GMT"},"fingerprint":{"sha1":"88:1F:51:C6:92:D4:AA:E9:CC:55:98:6F:A1:AA:06:EA:90:9F:69:A1","sha256":"60:44:FF:80:9F:DD:BD:F9:50:08:5C:C8:E1:7D:97:02:A3:A7:22:13:E3:3F:19:82:45:10:08:1A:F7:67:CC:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortmie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 23815\r\ncache-control: no-store\r\nx-edge-action: challenge\r\nset-cookie: sil_ses=00582c904c1118dee5537ff94f87f48a; Path=/; Domain=fortmie.com; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=00582c904c1118dee5537ff94f87f48a; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQDyj5-lDdwz38yu-dng.ZU4IkHkuq4gvW9JI0sasBRsSuRA6kILyVNcyxPxlw5Bue8ya28bDDyae9-P1FMXNmqRX2m_ARYlQuZwTmPd8AQ; Path=/; Domain=fortmie.com; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASAwMDU4MmM5MDRjMTExOGRlZTU1MzdmZjk0Zjg3ZjQ4YQDyj5-lDdwz38yu-dng.ZU4IkHkuq4gvW9JI0sasBRsSuRA6kILyVNcyxPxlw5Bue8ya28bDDyae9-P1FMXNmqRX2m_ARYlQuZwTmPd8AQ; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 18:49:05 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86121,"size_decoded":24779,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12636)","md5":"9d278d16667527cff5a6343c027a07de","sha1":"3c1856ed061660a216d9496b790a37e4224e05db","sha256":"985ddf3689db29b9397841decad7ba99a2ae931afe6b39ef1d2ce51c5acb0c65","sha512":"0f7ed19baf00f1951d7d274d3ce87c604f6202a184bb03bdf5816c3740ba0585936e3e918cf97cf134ee9aacf873fcffa964eaf62149e4860c17cddbd9172b9b","ssdeep":"768:GUAQ/p6WajPgGY+w66TrZ42NpvNM2IG4bc6WDdOTOwEfmuYc7wM8pasdgmwcL/a+:w2R4kpv22BW/TO6TlpHZUH6KRnAh","tlshash":"a983a5e53271342e80233b75661e22d719bac865d8c6c0e8fa4cdd5c67ee97309d9bc8","first_seen":"2026-07-12T18:51:28.58322Z","last_seen":"2026-07-12T18:51:28.58322Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1306,"timings":{"blocked":-1,"dns":235,"connect":60,"send":0,"wait":876,"receive":65,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"fortmie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}