{"report_id":"da0adb11-389c-45b3-998f-1611c40e5a86","version":6,"status":"done","tags":[],"date":"2026-03-26T21:34:46Z","url":{"schema":"https","addr":"stealthgate.app/","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"stealthgate.app/","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"title":"StealthGate","dom":{"size":67326,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59962), with CRLF, LF line terminators","md5":"53422082e62312df6f29294c7924ec74","sha1":"f79399b971f0c6ccabbcb4491d37346f2ee623bd","sha256":"0f0e23d2bfb321d86c358cb77a036a551a4161611ffba825b73550e1c02adfea","sha512":"ceb1294c525b1c27a0c8f1d4dd5f8f41a19c8baebe2aa47e2019d1f47d25b042ba09e7d46afef389bec509a5fec3957e39c26c40952891fbaea015d6c3293bf4","ssdeep":"768:mvPIbZGaw7S0cpooInqXnn9Tclg6iz4bCmVmvHVgzIYRxLllTbc84e0dnGB7S0c7:mvPICSVZnNqIYRxLJSVt","tlshash":"7463d838a3510a7ea51746e9f2b0773da1add39bd70b885cf36c01716bc6c98dc622d8","dom_hash":"domhash8a5044229240f3df8331160bc5708201","first_seen":"2026-03-26T21:34:51.078243Z","last_seen":"2026-04-27T20:32:13.21639Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"stealthgate.app/","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:34:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"stealthgate.app","ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":518772,"sent_data":2217,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.fontshare.com","ip":{"addr":"16.61.9.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2003-10-01","domain_rank":604295,"first_seen":"2021-03-02T20:36:57Z","last_seen":"2026-03-20T02:03:01.931926Z","alert_count":0,"request_count":1,"received_data":3589,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"cdn.fontshare.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-10-01","domain_rank":681638,"first_seen":"2021-04-12T08:52:39Z","last_seen":"2026-03-23T13:13:17.304636Z","alert_count":0,"request_count":3,"received_data":80124,"sent_data":1791,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stealthgate.app/","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f26e157e2b4c9faa07f524ca043eaf21","sha1":"8dc0d4995c491ccd32edea6de12d4413d076248e","sha256":"7ac4b6653cdaa3882fc257f5f0fe8637bd50a6cd6c4d32cfae1b9576367dc710","sha512":"0c91f24c229535b174e139a83806303045ab785e58cb2548cb6606a812126fdb0f75e49055bafd90f61f3ec8926d251c752d77240b572cefdc9df583e08bbad9","ssdeep":"","tlshash":"baf0a2a4b61d56bb4269543f424bb7ce337dc07a6950601b3c84887d38f4dd43074c95","size":615,"data":"","first_seen":"2026-03-26T21:34:51.086607Z","last_seen":"2026-04-27T20:32:13.239877Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stealthgate.app/assets/index-QQiJ7TKa.js","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ac5ae273a8eb07653c70b8a87d734b8","sha1":"2b912d108048d0cf74df76fecb2b45608c8df4e6","sha256":"1d3e112732be4ab966d95e631141723ef454f1fdaed3c67fe76f27a2fb081c38","sha512":"f494cad68b804892c73096cc51eef4b3bf6c9d238f44de0c963c169eb6e2ddbed1f12839b0ded76d7f215669f27d901c79311ec2039394dfc1c8008d3afafe32","ssdeep":"6144:5rEr4He6qr/2GDXpTXvhh07mbRYWay95PJn7eX/Q30WjaDBVjtMCi4CfdI7:R9eL/TXhXvhh0CbRYWayQUjo","tlshash":"97a46cd872a5756547e284e4907f0503b33d2846740e8868f23ceddf7ab440aa67bfb9","size":479849,"data":"","first_seen":"2026-03-26T21:34:51.081622Z","last_seen":"2026-06-26T20:35:35.225554Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stealthgate.app/","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:34:21.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stealthgate.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 08:45:03 GMT","end":"Tue, 28 Apr 2026 08:45:02 GMT"},"fingerprint":{"sha1":"47:E3:88:74:CB:3B:9B:38:FA:01:93:EC:D7:2B:D3:BD:3C:31:B6:F2","sha256":"23:4A:6E:29:5B:0F:EF:9D:3C:A2:88:8A:48:41:FE:37:C1:6E:E4:2D:A0:DB:05:6A:44:51:8B:8C:8B:87:1B:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stealthgate.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Aug 2025 10:10:43 GMT\r\netag: W/\"702-63b9b6fe3aac1\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1794,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4411a378df8f8a7fc161468b4f7d668d","sha1":"27122bd461b299ce47cc3b4a118193f304027734","sha256":"499b23776e9a19a36f25179811ca71f138f9f69b1f34dea276e81aaf2604a320","sha512":"8dd84ef13c00df544ddc75aebb541d67a9f832c9180c80af0a2bbc3f90c65f01afcf238ffa4e853ac72480fd183ec417209b47562b284fae1782a32dbc19446a","ssdeep":"","tlshash":"bc318501a90c6b6f0238532b1663f6cd727fd17a6a80a95328c6583b2ce0fc441bcce6","first_seen":"2026-03-26T21:34:51.079858Z","last_seen":"2026-06-26T20:35:35.227127Z","times_seen":5,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":135,"dns":68,"connect":19,"send":0,"wait":19,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"16.61.9.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stealthgate.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GKCBs8uP2E8w2gYAGl3k\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkODg3OGRmNTctMjEyZC00YzA4LTg0ZDUtMjVlOTlkZDUwZjY2.ckVkXQl7eonOj1-bmG8prNFwXXRMeS_Jjk__hhw2whI; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":100,"dns":14,"connect":24,"send":0,"wait":29,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stealthgate.app/assets/index-QQiJ7TKa.js","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stealthgate.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 08:45:03 GMT","end":"Tue, 28 Apr 2026 08:45:02 GMT"},"fingerprint":{"sha1":"47:E3:88:74:CB:3B:9B:38:FA:01:93:EC:D7:2B:D3:BD:3C:31:B6:F2","sha256":"23:4A:6E:29:5B:0F:EF:9D:3C:A2:88:8A:48:41:FE:37:C1:6E:E4:2D:A0:DB:05:6A:44:51:8B:8C:8B:87:1B:31"}}},"request":{"raw":"GET /assets/index-QQiJ7TKa.js HTTP/1.1\r\nHost: stealthgate.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stealthgate.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Aug 2025 10:10:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6891d8a2-75269\"\r\nexpires: Fri, 26 Mar 2027 21:34:22 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479849,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37526)","md5":"1ac5ae273a8eb07653c70b8a87d734b8","sha1":"2b912d108048d0cf74df76fecb2b45608c8df4e6","sha256":"1d3e112732be4ab966d95e631141723ef454f1fdaed3c67fe76f27a2fb081c38","sha512":"f494cad68b804892c73096cc51eef4b3bf6c9d238f44de0c963c169eb6e2ddbed1f12839b0ded76d7f215669f27d901c79311ec2039394dfc1c8008d3afafe32","ssdeep":"6144:5rEr4He6qr/2GDXpTXvhh07mbRYWay95PJn7eX/Q30WjaDBVjtMCi4CfdI7:R9eL/TXhXvhh0CbRYWayQUjo","tlshash":"97a46cd872a5756547e284e4907f0503b33d2846740e8868f23ceddf7ab440aa67bfb9","first_seen":"2026-03-26T21:34:51.081622Z","last_seen":"2026-06-26T20:35:35.225554Z","times_seen":5,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 15:02:57 GMT","end":"Mon, 15 Jun 2026 15:02:56 GMT"},"fingerprint":{"sha1":"C0:A2:37:6C:05:40:31:FE:9B:9E:B0:42:85:15:41:A8:4E:07:ED:0D","sha256":"27:DC:9C:87:08:08:09:71:6D:BB:85:39:03:B0:58:17:36:FD:B3:D0:1B:E4:17:70:70:B2:B6:C4:41:4A:BD:27"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://stealthgate.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f90b3d91f7142a4c808a60e71abd9ad2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-09T16:21:15.905989Z","times_seen":3941,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":61,"dns":12,"connect":19,"send":0,"wait":35,"receive":16,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stealthgate.app/fav.svg","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stealthgate.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 08:45:03 GMT","end":"Tue, 28 Apr 2026 08:45:02 GMT"},"fingerprint":{"sha1":"47:E3:88:74:CB:3B:9B:38:FA:01:93:EC:D7:2B:D3:BD:3C:31:B6:F2","sha256":"23:4A:6E:29:5B:0F:EF:9D:3C:A2:88:8A:48:41:FE:37:C1:6E:E4:2D:A0:DB:05:6A:44:51:8B:8C:8B:87:1B:31"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: stealthgate.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stealthgate.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 05 Aug 2025 10:10:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6891d8a3-1672\"\r\nexpires: Fri, 26 Mar 2027 21:34:22 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stealthgate.app/assets/index-B1GQ4cTX.css","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stealthgate.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 08:45:03 GMT","end":"Tue, 28 Apr 2026 08:45:02 GMT"},"fingerprint":{"sha1":"47:E3:88:74:CB:3B:9B:38:FA:01:93:EC:D7:2B:D3:BD:3C:31:B6:F2","sha256":"23:4A:6E:29:5B:0F:EF:9D:3C:A2:88:8A:48:41:FE:37:C1:6E:E4:2D:A0:DB:05:6A:44:51:8B:8C:8B:87:1B:31"}}},"request":{"raw":"GET /assets/index-B1GQ4cTX.css HTTP/1.1\r\nHost: stealthgate.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stealthgate.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Aug 2025 10:10:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6891d8a2-5cf0\"\r\nexpires: Fri, 26 Mar 2027 21:34:22 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23792,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23791)","md5":"a8d786da105b2125f1a7f938a49b2272","sha1":"26d04de127924b0889786bfc930d065198f9591a","sha256":"0236506da6b5fde4b5157a45e308b9bed1a56d6455c0a51da069460c0febda3e","sha512":"ca2aeaa47d1742dae5a4b42cd3494024b9c032096ae7e421a9998abc2c23655567fee3d060aff29477e5dfd891f441a4b6ee9d83971382b2459fe147bc165be7","ssdeep":"192:O9JyW9JyyKDgC6A0urg+spTL/Ub0gmYNgaYL3LKWf1TZ/y/m/HZNUrzbsfx+6z6b:b0A0ig+spvUbz3NKTZ/y/m/HZNUrzyXC","tlshash":"f5b2662dab14003b6da780f6d5e5eb9df229b0c2df2d67e9b98216109bc67f70d53204","first_seen":"2026-03-26T21:34:51.084327Z","last_seen":"2026-06-26T20:35:35.220309Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 15:02:57 GMT","end":"Mon, 15 Jun 2026 15:02:56 GMT"},"fingerprint":{"sha1":"C0:A2:37:6C:05:40:31:FE:9B:9E:B0:42:85:15:41:A8:4E:07:ED:0D","sha256":"27:DC:9C:87:08:08:09:71:6D:BB:85:39:03:B0:58:17:36:FD:B3:D0:1B:E4:17:70:70:B2:B6:C4:41:4A:BD:27"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://stealthgate.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b1517974c2cfbc5dd2a39844ff86d4d0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-09T10:41:43.910438Z","times_seen":4047,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":66,"dns":20,"connect":18,"send":0,"wait":18,"receive":21,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 15:02:57 GMT","end":"Mon, 15 Jun 2026 15:02:56 GMT"},"fingerprint":{"sha1":"C0:A2:37:6C:05:40:31:FE:9B:9E:B0:42:85:15:41:A8:4E:07:ED:0D","sha256":"27:DC:9C:87:08:08:09:71:6D:BB:85:39:03:B0:58:17:36:FD:B3:D0:1B:E4:17:70:70:B2:B6:C4:41:4A:BD:27"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://stealthgate.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3590f0950886ba2f47093466ee4016c8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-09T07:05:30.486593Z","times_seen":3437,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":66,"dns":16,"connect":19,"send":0,"wait":50,"receive":7,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stealthgate.app/fav.svg","fqdn":"stealthgate.app","domain":"stealthgate.app","tld":"app"},"ip":{"addr":"35.214.205.228","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stealthgate.app/","date":"2026-03-26T21:34:22.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stealthgate.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 08:45:03 GMT","end":"Tue, 28 Apr 2026 08:45:02 GMT"},"fingerprint":{"sha1":"47:E3:88:74:CB:3B:9B:38:FA:01:93:EC:D7:2B:D3:BD:3C:31:B6:F2","sha256":"23:4A:6E:29:5B:0F:EF:9D:3C:A2:88:8A:48:41:FE:37:C1:6E:E4:2D:A0:DB:05:6A:44:51:8B:8C:8B:87:1B:31"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: stealthgate.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stealthgate.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 21:34:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 05 Aug 2025 10:10:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6891d8a3-1672\"\r\nexpires: Fri, 26 Mar 2027 21:34:22 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"stealthgate.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}