{"report_id":"d3c5b733-d77a-45ea-a263-25d2b8d34bb6","version":6,"status":"done","tags":[],"date":"2025-09-17T03:30:41Z","url":{"schema":"https","addr":"ftsplatform.net","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":0,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"ftsplatform.net/","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"title":"Important Notice"},"submit":{"url":{"schema":"https","addr":"ftsplatform.net","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":0,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-22T03:30:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2025-09-10T23:22:35.103694Z","alert_count":0,"request_count":1,"received_data":141860,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ftsplatform.net","ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"domain_registered":"2025-02-17","domain_rank":0,"first_seen":"2025-09-17T03:30:41.951142Z","last_seen":"2025-09-17T03:30:41.951142Z","alert_count":10,"request_count":10,"received_data":490974,"sent_data":4411,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:4.1.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-10T15:11:19.040403Z","alert_count":0,"request_count":2,"received_data":83342,"sent_data":1074,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-10T15:14:38.264059Z","alert_count":0,"request_count":1,"received_data":5879,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ftsplatform.net/static/js/bootstrap.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-01T19:43:13.584991Z","times_seen":28244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/script.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c670a7ae7ffdb00acb33b5ad1c1ec1e1","sha1":"bf7f19fc75e0fe04507997b662070c6604d65c5d","sha256":"3083a1f991a34809d6d2b872df76ceb97bbb83c2ba2e3dd7ee136847beff2eda","sha512":"7f4a7fedc7d3b641e440eef851d4116e086555668113411fa684230c741a6b5a1f2436a9962d61e2b616c6189c489342228e51a90ca31fef876f8b8fb7c18679","ssdeep":"768:9d70M8a+/nKzCZYoDvSO3Eimi/lOzPwORFjgjPPTXFY9sMBH:bvuK4tDKermitiw8FjIXFRMR","tlshash":"7333ffb29066049b2083b556cb087f067c1a437f2ea39fe6357c582cff9e0a1917de59","size":54644,"data":"","first_seen":"2025-09-17T03:30:44.253641Z","last_seen":"2025-09-17T03:30:44.253641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef37ef2bd1c618c3155283322e452ee9","sha1":"0a39188b4b24c69f163d53bd5af56495f29f60b1","sha256":"81d4e4adc1ae7a4d4c474647432d1602d8763e4df4c5f5fbcc556634fa9fac2e","sha512":"17ffc0bbc037ae23a0d6596b874efc15eef8565d66466b59083629ee7d3df0d630766954330ee90af40150ed30ec1fb37f14850c5676f1a384b84841c164481a","ssdeep":"","tlshash":"be6000000f30c00c30030c30f30000000c30300333003c00000c00c000c00c3003300f","size":16,"data":"","first_seen":"2023-03-07T01:39:23Z","last_seen":"2026-07-20T15:31:25.685922Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/redirect.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1264407e37f5ae626ba5cf0b05b636e3","sha1":"d9544127959e801e436dfa5a7c8623d85ee3acd9","sha256":"854c66f6f4966f7c6757ab4f05fce4e79f84e9e7f1b7af6ff3d9e0c9352fc361","sha512":"937e52d7d78b28e2e15a85b1b2186e6f4f9c23a0bedc9584837af5ddbf6371ee8ab9bcc7c75635f83068194564183b232056752e621a1caa8e364b26e6a99173","ssdeep":"","tlshash":"1d413b0891fb9809341628383f5a06073c3081c329c8b4a83faea9d05f5c67f457a7bb","size":2295,"data":"","first_seen":"2025-09-17T03:30:44.252614Z","last_seen":"2025-09-17T03:30:44.252614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/jquery.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-01T19:48:07.13609Z","times_seen":138200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/popper.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-01T18:56:05.833252Z","times_seen":110875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d7f337b421b3564152c99e1104d9140","sha1":"70d297f5365017b3fe86addf90f0ddba259f7bd9","sha256":"2b2493b0aae9c209644e4e5d25bd73a3a96a35a8bb48c43776fa5e24595c674b","sha512":"3258e4d490e41820aa1beb982794252cb2252a0b6128428b15e4f4b500f1b8e98b5460fea45bfc0fbcfdf86dfeec135679035527554b70189879249a6044b366","ssdeep":"","tlshash":"a41114210f8d6108032160664f4ef948ad7e417f7b2f51213197bb59bfd411c03aa04f","size":947,"data":"","first_seen":"2025-09-17T03:30:44.256905Z","last_seen":"2025-09-17T03:30:44.256905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ftsplatform.net/static/js/popper.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/js/popper.js HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:20 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Fri, 31 Jan 2025 18:17:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679d13b8-4af4\"\r\nExpires: Thu, 18 Sep 2025 03:30:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19188,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-01T18:56:05.833252Z","times_seen":110875,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/img/logo_7.ico","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:21.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/img/logo_7.ico HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nCookie: page_id=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:21 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 4462\r\nConnection: keep-alive\r\nLast-Modified: Fri, 31 Jan 2025 18:24:30 GMT\r\nETag: \"116e-62d04a7499380\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4462,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"06dd5ebe7a52e8eb39055f432c1143fb","sha1":"12c878d5c68deba574f34807d1a4a7c0b394713a","sha256":"02caf649d58ccc2b989cc5b7f3506e31a265540479e21ac0312d8f38096ad9ac","sha512":"93cdd377506230b5c5ea1acd99947b8726af022d22903b841c6f0f77411ca5cfe135fb2b2c6759aa3c581e54f9d1831bd8d66b80e8399e340a7999001c1da9ce","ssdeep":"96:Qf+Co7FmWlknNJuk1dHokHzNG0n43/GpXXKkHpSdBPmjW0jGwbvoASYM651t:Qfq7FrkndIkTASHqPmDlbvL9M6Pt","tlshash":"c8915ccd7d129c50e98e3a4929fd72c736b74e88a8a0b0521dedc947587013ceb1e9c3","first_seen":"2025-09-17T03:30:44.245237Z","last_seen":"2025-09-17T03:30:44.245237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/img/logo_7.png","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/img/logo_7.png HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 10922\r\nLast-Modified: Fri, 31 Jan 2025 18:18:57 GMT\r\nConnection: keep-alive\r\nETag: \"679d1411-2aaa\"\r\nExpires: Thu, 18 Sep 2025 03:30:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10922,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"6a2bd970cdd10b088851601deea45fb7","sha1":"4188b34312eedcbc47ff0eb0c510d71a1d7fb719","sha256":"f574cac280aa19f6dc0cb61570d181f51f86a742fb3e76dac643f89eb6cf154a","sha512":"872661bb088067ac83eecdf077c38c99c064c58581c64925b9038ed29c0ccc6b17e5ef426fd8037c55eb498d0cc1daab3f21332ac8455d61faa54d68127f8562","ssdeep":"192:NdgW7F8kn/IBvodIb+YR6WhcmsFP9kiJu/9zaGVZ9mlUF0m:XnNnqw8m+21kiJMzaQ0i0m","tlshash":"0732ae15ff839e9261f7748985f54283c363098a9581f0d9adcf56827f212cd8a398d7","first_seen":"2025-09-17T03:30:44.246649Z","last_seen":"2025-09-17T03:30:44.246649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/img/loading_2.gif","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/img/loading_2.gif HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:21 GMT\r\nContent-Type: image/gif\r\nContent-Length: 227718\r\nLast-Modified: Fri, 31 Jan 2025 18:18:57 GMT\r\nConnection: keep-alive\r\nETag: \"679d1411-37986\"\r\nExpires: Thu, 18 Sep 2025 03:30:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227718,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"a127583fd660559330a10684dfd3a401","sha1":"28426c6d02f433faafa930c4d677118f90a6b72f","sha256":"47913c0342b220b1e8c599cde49e6abeae16a7a7c967889118c0d35e4669fa1a","sha512":"e5be3912611e4d82c326d6a40b8f46e213bc76dd05560e2dde63fb466b061eb63b353fe808b408f1f08a8b93c1c4cd362bb3d1dcad28488c12bbc73637714b6a","ssdeep":"6144:9PmDki0qPlYtf2/hS/lMK6BrMXyH520ns3HwNXDKC5iGXhi:VmWMpMK520sApKC9xi","tlshash":"0824d06a83ae85adc01a02fa415af7c92879edb243dd8497176230667d4dbfc3166c33","first_seen":"2025-09-17T03:30:44.24771Z","last_seen":"2025-09-17T03:30:44.24771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":114,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:21.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftsplatform.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Sep 2025 09:58:58 GMT\r\nexpires: Fri, 11 Sep 2026 09:58:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 495083\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-01T14:13:35.860033Z","times_seen":5906,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":94,"dns":2,"connect":20,"send":0,"wait":45,"receive":15,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-17T03:30:20.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: l=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=ftsplatform.net\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:4.1.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":4356,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (307)","md5":"1802cfa0097afb8ee81392b88a3abedf","sha1":"5e4c63cd68fff789d79eeb07a301d899a9b3c59f","sha256":"914b8006aa904250c11cf9558c5a7da0f100451e591ad0fd769ca2853897429a","sha512":"4e39c0b43d8ceffdf477ab9c68dcfdba783a6ad098545679426e20fc10c5d5e5f3a05b3cb7777583cde068a4fc07c46142a67391609bbcf984d794a76f28c74f","ssdeep":"96:B6FiZDPX/wtNPqG7R3s/wtOmUtHnHyQ4ZpAz:B6FWPvwtNX3s/wtORdnHyQEiz","tlshash":"9c9182101d8ce82e012210827665b28fa4dfee3ba67bc491b6ff07716bc0d598d6708a","first_seen":"2025-09-17T03:30:44.249207Z","last_seen":"2025-09-17T03:30:44.249207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":205,"dns":8,"connect":97,"send":0,"wait":104,"receive":1,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/jquery.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/js/jquery.js HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:20 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Fri, 31 Jan 2025 18:17:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679d13b8-15851\"\r\nExpires: Thu, 18 Sep 2025 03:30:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-01T19:48:07.13609Z","times_seen":138200,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":121,"dns":1,"connect":65,"send":0,"wait":119,"receive":5,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Exo+2:300,400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css?family=Exo+2:300,400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Sep 2025 03:30:20 GMT\r\ndate: Wed, 17 Sep 2025 03:30:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5193,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"10c441c8e2edaeb5479126561b761e31","sha1":"67244b13b6bd8f6b2e0ffa8e83463898b288c70d","sha256":"a25e5d3d92308767403c45b3f957c1cfedf24fe344ff45693bf0c9549d0d8722","sha512":"fa720af96d541a2c249f0ef55003562cb2f40e8a2f1a9be4022a8dff84c86321e9018fc05bc8e5f92abfece4569507eb832adcc422debcf6750c03be9a6895cd","ssdeep":"96:MOWpcOWRCFZOhOWJ9OWBJc+udOWFNNOLpcOLRCFZOhOLJ9OLBJc+udOLFNNOCpcH:Ip4RHFTx2opBRHEexrtpcRHJXxiU","tlshash":"8ab1aaa0082ad40067971dca63ce3d3a9e9f7214b080d47a5ffd1ca8ace6d62536571e","first_seen":"2025-09-17T03:30:44.250928Z","last_seen":"2026-06-18T23:59:21.552324Z","times_seen":11,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":161,"dns":1,"connect":28,"send":0,"wait":49,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/bootstrap.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/js/bootstrap.js HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:21 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Fri, 31 Jan 2025 18:17:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679d13b8-e2d8\"\r\nExpires: Thu, 18 Sep 2025 03:30:21 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58072,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-01T19:43:13.584991Z","times_seen":28244,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":196,"dns":1,"connect":99,"send":0,"wait":200,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/redirect.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/js/redirect.js HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:20 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Fri, 31 Jan 2025 18:17:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679d13b8-8f7\"\r\nExpires: Thu, 18 Sep 2025 03:30:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2295,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"1264407e37f5ae626ba5cf0b05b636e3","sha1":"d9544127959e801e436dfa5a7c8623d85ee3acd9","sha256":"854c66f6f4966f7c6757ab4f05fce4e79f84e9e7f1b7af6ff3d9e0c9352fc361","sha512":"937e52d7d78b28e2e15a85b1b2186e6f4f9c23a0bedc9584837af5ddbf6371ee8ab9bcc7c75635f83068194564183b232056752e621a1caa8e364b26e6a99173","ssdeep":"","tlshash":"1d413b0891fb9809341628383f5a06073c3081c329c8b4a83faea9d05f5c67f457a7bb","first_seen":"2025-09-17T03:30:44.252614Z","last_seen":"2025-09-17T03:30:44.252614Z","times_seen":1,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":121,"dns":0,"connect":59,"send":0,"wait":57,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/js/script.js","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/js/script.js HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:21 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Fri, 31 Jan 2025 18:17:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679d13b8-d8d8\"\r\nExpires: Thu, 18 Sep 2025 03:30:21 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55512,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2294)","md5":"c670a7ae7ffdb00acb33b5ad1c1ec1e1","sha1":"bf7f19fc75e0fe04507997b662070c6604d65c5d","sha256":"3083a1f991a34809d6d2b872df76ceb97bbb83c2ba2e3dd7ee136847beff2eda","sha512":"7f4a7fedc7d3b641e440eef851d4116e086555668113411fa684230c741a6b5a1f2436a9962d61e2b616c6189c489342228e51a90ca31fef876f8b8fb7c18679","ssdeep":"768:9d70M8a+/nKzCZYoDvSO3Eimi/lOzPwORFjgjPPTXFY9sMBH:bvuK4tDKermitiw8FjIXFRMR","tlshash":"7333ffb29066049b2083b556cb087f067c1a437f2ea39fe6357c582cff9e0a1917de59","first_seen":"2025-09-17T03:30:44.253641Z","last_seen":"2025-09-17T03:30:44.253641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":204,"dns":3,"connect":103,"send":0,"wait":199,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:21.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftsplatform.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Sep 2025 09:58:58 GMT\r\nexpires: Fri, 11 Sep 2026 09:58:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 495083\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-01T14:13:35.860033Z","times_seen":5906,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":94,"dns":1,"connect":20,"send":0,"wait":21,"receive":26,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.1/css/bootstrap.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/4.1.1/css/bootstrap.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ftsplatform.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Sep 2025 03:30:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9805863fdf4fb505-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"a7022c6fa83d91db67738d6e3cd3252d\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:05 GMT\r\ncdn-cachedat: 08/01/2025 15:36:56\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 580a96140db7044f2ae0ec5eaa4d6c58\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140930,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"a7022c6fa83d91db67738d6e3cd3252d","sha1":"1ae238d0c533b209ea5becf4317e13237ed3d42e","sha256":"31df1e69ea3aece8a8bae5c08bcb7f5e977cb76f886897b301355359b66a48ec","sha512":"8aa45d7fed0a30598d66076c03ef1bcf53162085d005409abcf61549523cddf7157c7d98d8f9cda282cdd386e04cda14890bc8ce27622072407083ffb80115f7","ssdeep":"1536:ux1bwyUPAy+QYYDnDEBi82NcuSEz/9OOL/gIENM6HN26e:q1MbPnTLYIENM6HN26e","tlshash":"c2d372a7f5a0312da467c61960d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-05T10:27:23Z","last_seen":"2026-08-01T10:56:26.947905Z","times_seen":8487,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":52,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftsplatform.net/static/css/style.css","fqdn":"ftsplatform.net","domain":"ftsplatform.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftsplatform.net/","date":"2025-09-17T03:30:20.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftsplatform.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 02:32:50 GMT","end":"Mon, 01 Dec 2025 02:32:49 GMT"},"fingerprint":{"sha1":"86:66:BC:1B:56:FE:27:47:FC:D8:53:A0:1A:75:9F:CD:37:F7:E1:1E","sha256":"A8:77:A1:57:1E:2A:32:EC:56:F1:EC:D7:27:96:59:CD:AE:34:F6:71:2F:C8:6F:0A:F8:3C:58:E6:38:FA:22:8F"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: ftsplatform.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftsplatform.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:30:20 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 31 Jan 2025 18:15:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679d134f-42d5\"\r\nExpires: Thu, 18 Sep 2025 03:30:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17109,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"2cc297b68999317f7dce239a34120aa5","sha1":"5071640d02e5aa0ae15f68bbb404b72e10242120","sha256":"3e71fa94ae5c0c0a728f872f23e975b62bd75412e23b1004ae6f2e3f5c4b9393","sha512":"569314fb12de7f3e3767b7223d63499ae322e8b991a8b1cfee94f79642b43dd36efd7ae6b2753b0f31ef895c7f49cbcc0f0af34968f0d795f895da6996825a41","ssdeep":"192:W6niYyJtypR++4DMD1aIDJtrzzeZ8cJt5yOonqea8oylWMV2P:W6n1y/mRYw1v3zzeZ8/S8rVm","tlshash":"1b72741e5a502888a517e09c6fd66b85a36e8403af0ecd6fb655316cdfcd0d881f378d","first_seen":"2025-09-17T03:30:44.255242Z","last_seen":"2025-09-17T03:30:44.255242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"ftsplatform.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}