{"report_id":"e0490f93-4197-4351-8289-4a3be34a847f","version":0,"status":"done","tags":[],"date":"2026-08-30T16:30:52Z","url":{"schema":"http","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"172.67.210.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"title":"Fortnite Wealth Leaderboard | Epic Games","dom":{"size":190491,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34337)","md5":"eb7bcd197647faf519c544a568d8a374","sha1":"ab58b1f551ab53b62fc81c7a34ca62e701bb965b","sha256":"20faee86ea5d1ce17c1341b53c5fb59d457643be23df3ae06adfba10ae0b3b89","sha512":"019c273fdbe86cd0dfd08ceafd9ff268cc50f32a4d138ca3c677df0da2cb7397c0355060a7bd9e88ef68f4e8c5b15ec9b8b18ee05ee001d209bf5e42cdedb9f4","ssdeep":"3072:hRwh1w8lotR84Ohqt3OZTtQvn/P9nwPrzag0mVwBQTWdzqt3OZTtQvn/P9nwPrzb:hRwh1w8lot+TbBqOA","tlshash":"f214d63452b1117a194392f8e6d1bb5f7568d60bce1be918b7ad04113fcacc6c8d3ba8","dom_hash":"domhasha7bcddc887c16d50be57f525df3374a7","first_seen":"2026-08-30T16:30:59.78165Z","last_seen":"2026-08-30T16:30:59.78165Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"172.67.210.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T16:30:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fortscan.one","ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-07-24T16:48:16.181303Z","last_seen":"2026-07-24T16:48:16.181303Z","alert_count":105,"request_count":21,"received_data":4606203,"sent_data":14025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-08-28T02:41:51.874884Z","alert_count":0,"request_count":2,"received_data":18673,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":241456,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-24T09:02:09.710604Z","alert_count":0,"request_count":2,"received_data":408703,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c59a0de93179f1920140269ef0295006","sha1":"f5318dc36233a700c24f0550c870f7adc32c180e","sha256":"1a27f98acc5dc3672909206c103c74ce595de22fd614744cd36d9b82277dd40c","sha512":"3db2668a44fc1010e62d220a69cba13bdffb29ef9056e4d17cea3d112e6c90e7f823b65880ef2079bd6cee2f370543989b5ed3f152bd92f5238a72baee39c1f4","ssdeep":"","tlshash":"15318b1cd9f30b13120321a9d8d70a40373c868b5e2dbc6e371c29658f0e56f52b979d","size":1737,"data":"","first_seen":"2026-06-11T21:10:40.77776Z","last_seen":"2026-08-30T16:58:56.227835Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91c153c80168d811e5ac15e89eff4b61","sha1":"c187e63bbccd6f8f49d64f5bf6d643d5dd6c361b","sha256":"9ff16f327a1feaa856153a61b900a8b9335e4e2a3160c25248d6facb3e4eaac9","sha512":"cb6f7bf779824935e280364750104aadc1972a6ce7df0903c796d28923531698142937a6253ade6b4b355523619f6bacf30b98c68f8c53883cc4fb8afa2c4a54","ssdeep":"","tlshash":"4fb012e13ca2a9531faec7bad8bd104415bede1cd9c68d209c5620b6098eb68813025c","size":116,"data":"","first_seen":"2026-08-07T12:57:55.36058Z","last_seen":"2026-08-30T16:58:56.228449Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a550d7f5ae46e8d72f833684cc789c70","sha1":"078a4788793906d0d3d8db205ddaa0e99bc9d113","sha256":"5e5bf04812c52f311df70d9f8f10c232e7f630dda4498899a98a0bac86af2ef4","sha512":"1c7b77011e23a0ffb53f229a206af1f4399cab0adad325d6d9837f58b2b99bccb7c65e364dd1c456472a6d9599cf9fdf6e04acae5b8bd48474731ce4d1834d2d","ssdeep":"","tlshash":"e01125683caa3c28936996ea377fc3cc517924277461cc80d40ec8341a67d871483aad","size":1002,"data":"","first_seen":"2026-04-04T15:35:16.195645Z","last_seen":"2026-08-30T16:58:56.228995Z","times_seen":850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfd8ccfee74746cd26a124747302f8f","sha1":"f76d62cd48d7abd863f92469f79fe77421eb23c7","sha256":"2ee50a99b61b4e9f8f4d582c1266adc8bc8c9d5aef73d909a1c865f37168ec81","sha512":"7cb83dce1207cc8455d93c143916b7ff98ce9f1bfce2ba40b70bb9b4d7b82e466002f81a1b72b6e3a37dd6b75d9cb5dcf35d3be8febe4c7afb8763945b9c58d2","ssdeep":"","tlshash":"54f00e5c0c0fb97103365aac73be89c83656010c25414944ca66c13065a08db6896b4c","size":504,"data":"","first_seen":"2026-04-04T15:35:16.198644Z","last_seen":"2026-08-30T16:58:56.229519Z","times_seen":849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e7505fe892d48d65a9fcbc15e53081","sha1":"de9a2a1617665aa3375bf6fd1aaa58dbacd20dda","sha256":"728b0006af24f92a8909559fed79bc2e862735c676979ab3443ff81f40abdc97","sha512":"aacc10a7a0cae58db3387f0194836cc3e15306b748ee8492c279136efa5abe3e977bdd58d7763faa12f02aada33c39183a11a0884517dbfb2ae3ac71c6b45e52","ssdeep":"","tlshash":"19e068ab3885093912bab9be32b7660430131118b40c4618db55b370e574cc68b4580d","size":379,"data":"","first_seen":"2026-04-14T13:27:05.580507Z","last_seen":"2026-08-30T16:58:56.230064Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af1b021ea565dce430a083e4deee054","sha1":"ca4ba492f88b85bdd52289e7d8887e2ac95033c9","sha256":"e5206351c812a92de9690cf522fc9a3d92d3abca06d17139163c9a4d355ac7c2","sha512":"f8530995ccdead23bba129159210a3469f7809e2e11d7df22ea896aec0fd8b468d73e2b05209f703f8a335cba3bc5248930efb4689392d7fec84448b87761f3f","ssdeep":"","tlshash":"99e0f1e833828eb042a95a0933bff34db1e3201c88854810c97e687cbf38e93c324d80","size":431,"data":"","first_seen":"2026-06-27T13:27:28.236331Z","last_seen":"2026-08-30T16:58:56.230531Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85638f8d3810d84283b7dba3347d91cd","sha1":"4a02415c3197b7cbe21c28b99be9a6a47fc61635","sha256":"2574b3a8a297f793f5970dfe668d7ff553132bfd705cfcb0d0b094fec57aed2d","sha512":"4986c40f389e822808a3af14c5c0b2a1dddb5efe52cce3cc10901029a44d88b0403eae07bcbb1da0facc3ab7f97b82c6bb702b9a1067149914929d37912c826e","ssdeep":"768:w26aqt3p7xSfaKZvqsjqjxeZS+ZPBujhPD92klIBgAa0jBHuwijZKArfzi94wmDJ:kLjxeluvZT+dLJo6KJ","tlshash":"3113c55991a0082a4182435996e2bb44202d49a7cf85f8f97badd8192fdc45fd0fbffc","size":41615,"data":"","first_seen":"2026-06-07T14:48:19.899893Z","last_seen":"2026-08-30T16:58:56.231059Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"0a25a1c70efae8e610228e68dfc0ccff","sha1":"1373c273267770076feb27c30249f71efb37f576","sha256":"6bd33a4e9286a6241ddd5b3a764ab2122b235ec09dff70a6a469a11b52cc8c43","sha512":"26bea773178c749b53ff65533f515d8faac4930b370d6e1cd716a2d4282960991093ad026e08d5db8d37976fd0b22a5db7bd18b4f3fd72dcdba4bb93abbaab10","ssdeep":"","tlshash":"eea002d52a2e56440e8c92144c942b1a7166180c56d0f60eac206db6465edec39347f0","size":71,"data":"","first_seen":"2025-09-21T13:17:51.337089Z","last_seen":"2026-08-30T16:58:56.227369Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-30T19:01:49.753244Z","times_seen":51613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64f4ffb5cb4eb9dd2aea0623983b9fa8","sha1":"52df2451843c94644ed251f79fa172126eeee4e3","sha256":"87fc7ccf641b6b00e1252020e5c1a97d1c4c2fc10c261fbdc9082b6d86fa1e6e","sha512":"bbf7903ccc1725cabbe7a2b19497e2f749602167f4fd25f7a5565cf56da4b8a3e7f529ea0720d16a7fa477da313daa9201be81d9d8f537999b3cc017e486a6e8","ssdeep":"3072:PnHoco6idv10cFoh7hfzLuuDGLsML3PU/NSFW1hEEkcWRI6KREypH1QnI9I+U7ow:ToDdvf8leiGPcDh+ch6KREMVQnIqb","tlshash":"c0343acdb396702283a3b578903f014bb27d7da2b80cd894e142e9c46e786695277f7d","size":240807,"data":"","first_seen":"2026-08-30T08:52:48.314927Z","last_seen":"2026-08-30T19:04:05.57171Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"fortscan.one/","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T16:30:20.110Z","timestamp":1788107420110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Sun, 23 Aug 2026 17:45:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7FPsZOijWk1t5vK5JI%2B98qnpf5VDsdOL4DaPqlXSADdQNEvYm%2Bzn7eHb28Z4yaBjYT3551rcZ4FVC0fjzyJcm%2F4%2FG5%2FedE%2BjWktrVDnQjAnvA7Z0OZHmo6I24eRjdg%3D\"}]}\r\nset-cookie: pixel=; Path=/; Max-Age=31536000; SameSite=Lax\ntt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax\nclarity=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_id=; Path=/; Max-Age=31536000; SameSite=Lax\n_g_label=; Path=/; Max-Age=31536000; SameSite=Lax\ncf_s=0x4AAAAAADDIrdhtOETnVX-9; Path=/; Max-Age=31536000; SameSite=Lax\n_user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8; Path=/; Max-Age=31536000; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3352defff39568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"pixel","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"pixel=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"tt_pixel","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"tt_pixel=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"clarity","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"clarity=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"_g_id","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_g_id=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"_g_label","value":"","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_g_label=; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"cf_s","value":"0x4AAAAAADDIrdhtOETnVX-9","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"cf_s=0x4AAAAAADDIrdhtOETnVX-9; Path=/; Max-Age=31536000; SameSite=Lax"},{"name":"_user_c","value":"1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8; Path=/; Max-Age=31536000; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":90348,"size_decoded":28355,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2526)","md5":"291cad80393e1549cd86550151359f74","sha1":"b2b7ae0bafa938d9725a469910448e3887e550db","sha256":"c628cb3a4014d4e75062dcd48ce8a1d9b0ec818ea82fb66aa00fdbd0a1e9399b","sha512":"0160e41e3da6c4e0d1c7ebfdc8878ae8498ea16e30b36bde28ada18132f5cd61b494dd751b05fe4e16b806497bdf4fded0a8bfcf90688f574f944a5bec698a6c","ssdeep":"768:J8Wif+zybGKtsuvKHuLyw+9oyviL4nqZETfL6kJ6AkqsKjq4cq1rqx+hU26aqt3m:JlieQGKqm+g5LjxeluvZT+dLJo6KA","tlshash":"a393e85451f204a5004743b8a6e6bb09252d8a57de5bf8ecb3ac95252f8dc4fc0f7bac","first_seen":"2026-08-11T16:23:41.880879Z","last_seen":"2026-08-30T16:58:56.221589Z","times_seen":80,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":5,"connect":34,"send":0,"wait":129,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/1.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.789Z","timestamp":1788107420789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/1.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4D2cZ%2FiOTFwNJax8ztmuTPlkhGK37WFN2I%2BVAKxSFulquSxhhqRD2HaulRcvS9fnQd3%2FIViSZAv9fk%2BQy8LtgPhJOHfButZzIkzTY0eWKA%2BWnZPr5K9%2FXWNkJYc3qUY%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 28\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df3ffb7568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":854,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/Frame-18.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.296Z","timestamp":1788107421296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/Frame-18.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-638b0\"\r\nexpires: Tue, 29 Sep 2026 16:29:56 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 25\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4IhuBmaXKL6FpWk%2BRRpPG2OfgcJBBI4WSPeaMoIQhjZvtQTZkgvWjiDiIuwSrDD%2FjE7DT%2Fijlp%2FWohasxTKRhmiclt0N0sMjNAe0u1HulpzxKfv%2B2kfrAp0WGpMFBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3352df71ff8568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 407728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407728,"size_decoded":408607,"mime_type":"image/png","magic":"PNG image data, 1280 x 350, 8-bit/color RGBA, non-interlaced","md5":"c9f004c80b8dde35a8b16b90197eaa78","sha1":"65e32dde135458448cac14e01cc1fab79042fac5","sha256":"4e80b918e5254ab06a9971a11bb12cedb6906ceede987d30547cfd6666dfcba0","sha512":"0f0e318c608e6b7792d2f6fa908ca58e7905c1f262c4090dd4b3b4c838ac6fa509dac47aa809436be7436b43ecb7314783423613cdefea90a6cab18336b978cd","ssdeep":"12288:CKopDp7+fH7a0W/M/uTv7JayC0VOurMDfOgPUMHuJ/cwjXIP:Jolp87UfjMUMCgjQ/Jq","tlshash":"418423d84e10076cd9a4076061e865e67fe23aa5efec5c273d326915bf1e9f1fe01818","first_seen":"2026-06-11T00:02:00.356249Z","last_seen":"2026-08-30T16:58:56.225902Z","times_seen":545,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/fortnite","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.749Z","timestamp":1788107420749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /css/fortnite HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 56551\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhwrmC41Av7nRcsIoHZM%2FVOdwdrxvWVLoFvYmEU662T3IjNB7eH40Cmpf6Q7leFLOUvQ7mejMPqVqUcevQVo%2BhfEQP2UhC5qFeDmQK%2B5H89LnDfdoYfq429QDIblc%2FePuprJac4%3D\"}]}\r\nlast-modified: Sun, 30 Aug 2026 00:47:49 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3352df3c91cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":860,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"d98ef3e15f4b7b5f30b7cffbd05d41aa","sha1":"5349badba63402895e15f338e792ce2643ba665a","sha256":"ca798a5738886afa0c00902e038cac9bb20cd7a1a88d71f858f7726102c3a80a","sha512":"d55e27726627405a3b7bbc2393e6a122edd051597d4fd88ac02960cf309f140e939cec464b511977fd58168c27352934d342c99231528e627fda14349fe23dee","ssdeep":"","tlshash":"41c012550597b40669200c8e375f75140d4e9037a14dc9753fbd2d489eaf42912d671d","first_seen":"2026-02-09T11:26:57.701974Z","last_seen":"2026-08-30T16:58:56.224861Z","times_seen":831,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":6,"connect":8,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.999Z","timestamp":1788107420999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\nexpires: Sun, 30 Aug 2026 16:30:21 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 30 Aug 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 89588\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240807,"size_decoded":90237,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5004)","md5":"64f4ffb5cb4eb9dd2aea0623983b9fa8","sha1":"52df2451843c94644ed251f79fa172126eeee4e3","sha256":"87fc7ccf641b6b00e1252020e5c1a97d1c4c2fc10c261fbdc9082b6d86fa1e6e","sha512":"bbf7903ccc1725cabbe7a2b19497e2f749602167f4fd25f7a5565cf56da4b8a3e7f529ea0720d16a7fa477da313daa9201be81d9d8f537999b3cc017e486a6e8","ssdeep":"3072:PnHoco6idv10cFoh7hfzLuuDGLsML3PU/NSFW1hEEkcWRI6KREypH1QnI9I+U7ow:ToDdvf8leiGPcDh+ch6KREMVQnIqb","tlshash":"c0343acdb396702283a3b578903f014bb27d7da2b80cd894e142e9c46e786695277f7d","first_seen":"2026-08-30T08:52:48.314927Z","last_seen":"2026-08-30T19:04:05.57171Z","times_seen":88,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":34,"receive":29,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.322Z","timestamp":1788107421322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortscan.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 367137\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-30T19:23:51.481609Z","times_seen":271238,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":28,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.323Z","timestamp":1788107421323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortscan.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 367137\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-30T19:23:51.481609Z","times_seen":271238,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/9.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.403Z","timestamp":1788107421403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/9.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgRJWsvuvTDeY6a2ut%2FWbwqpeIhyIEO09vO1JXCt%2F0%2BTzALUo6eI5%2FjzdyCIm%2FM3PYIMqQXB7LYJc6DIUldfHkWWs7b1MvdOj2rDoEduqeqHTjfu20OlOGqNOM6BorM%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df7c803568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":852,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/5.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.405Z","timestamp":1788107421405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/5.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjGvRbnmFGuEVwqScgkRC%2BxMIl73i3530xQ%2F30Jqi4vEm8a9bFOzR02kB2QbtJbhTQrNb9IwQN4NgBQBFquHqa%2Bk7sVw1jQO1Z%2BrPAT2eeYqaI60JZd0iH8gATvFlw0%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df7c804568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":850,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/118753/Fortnite.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.324Z","timestamp":1788107421324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /s/118753/Fortnite.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortscan.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/fortnite\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 22 Sep 2024 15:22:03 GMT\r\netag: \"426c-622b6d5962661\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXR2FWPmMldXleHWEIzg0dSlYl8WF%2BTLzSADnEGPSI50fbcYHOlvOoIjJLawssGwgEpzdNDpzNXwtswqM3DorwibtPlKihkau9nFYx0kK6jCw5meknyDpYVEu86FpWeAWibr%2B0Y%3D\"}]}\r\ncf-ray: a3352df76e6f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17004,"size_decoded":17746,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 17004, version 0.0","md5":"7375b68b2b6206e83cd2dbeaea40dc67","sha1":"41efa554e7b949efd1c97aee555117c21a76c07e","sha256":"79b761d9595324fdbcd4b7177b8fa73df9b74558603db072e1e2ae0bfa86f887","sha512":"c172c4b5fe504e2ae2d697af5adb22ded533e1d4858ae5b9bdf70d1e2c09fe6f09b0a4a024a1a599f6621733a2e331dac923a99d9780cb9824792a96fd209512","ssdeep":"384:6IG5/+sEEKmTKiGaUYRqUF2tq4LxTL+kj2SOzWZ:vU/+shKAPRqUFb49Lj2SOm","tlshash":"9472c0d8bf74c914dc1caaf0196baf48cbf8b14b217341ce49144d198ddaa584f47b66","first_seen":"2025-11-18T04:00:01.705623Z","last_seen":"2026-08-30T16:58:56.226377Z","times_seen":621,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/8.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.414Z","timestamp":1788107421414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/8.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7S9kygP9IMHlCav%2FtqBPinzQgigaBI77Kg2yKV42u9w9iFT2Qw3LugCH8r2z0qpHsvr4X%2F6uTVBxv0VUk9%2BJR2GM3nIgd9sWcKJnlb%2FvOBk5VORrl4iKZ9TC5WDzCk%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df7d808568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":850,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/Epic.svg","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.472Z","timestamp":1788107421472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 29 Sep 2026 16:29:54 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OdcAhWg4KLn5j%2Bn3ZfUIa5S1BdhQyxbvRBTAMzLBvC856ScgJGrTvUGdeBbDEL9RylMNkyPNoiOHyg9EHKWiTojQ6DRxGrhYiIeyDnT8UHxyQa107gaUewAxqJ%2BsnU%3D\"}]}\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3352df83813568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3484,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-08-30T16:58:56.22272Z","times_seen":1111,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/3.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.796Z","timestamp":1788107420796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/3.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xqM3GRoP218Thi7lAbvrtAmG0GjrSl1PGPUd2%2FGYyfO0iH8FjJMoxLQziCqV42atQtD2AIeZ2k4NQK0Y21acwKd1Qo6DPpbxgZ5lGZxq2HEXQ9UTlkAeKm9zRCJAh0%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 28\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df3ffb9568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":844,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.321Z","timestamp":1788107421321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortscan.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 367137\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-30T19:23:51.481609Z","times_seen":271238,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/10.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.410Z","timestamp":1788107421410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/10.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNxEV1e0n%2FXh5zifvEzJg6gL%2B7PbdvrtXDX8ymtooYap%2Fj8A9NRo9xvhRb1HGfevMuFGmOk8C2htxn2o%2BQBbR1JA5zmnRnKrQ9Pxdni9bbZRPTQtCjkFNaofk0e8gd0%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df7d806568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":850,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.820Z","timestamp":1788107420820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortscan.one/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2947680\r\nlast-modified: Wed, 26 Aug 2026 11:24:44 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0pcmsEA0KQlqPAtaY8S5G75rL6DZhPv%2FYQAy3KVjYAnuW2gtJjhWuWQmsxovgIVjk6oYss%2BLMXpDRnhOlWQATLyjoBvkOY3NcT%2BrEjHjbbP2GpmYdqPOz0ldljpP3Jfm0QOVRs%3D\"}]}\r\ncf-ray: a3352df42825b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127120,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-30T19:01:49.753244Z","times_seen":51613,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.747Z","timestamp":1788107420747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 16:30:20 GMT\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e6b2beb5d2bb6df88bf2fb90aef55ea","sha1":"57299d704f0414dd1794fa2d00f662a6d68b721d","sha256":"7f5c718efb8ff6993c546f94f732e813c8379e615e79f553bc5ef9026856d244","sha512":"f86b2519ba151eb35b585be5d94cdd2bb27f84dc349ae08f00b7e4fc429e7c30b9b8a0dcfcbde73cc4d66993da77e73067229d4e9f460847d77877607f143d98","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGYNCbOO3Lxxgx:vXuM1+RQK","tlshash":"65227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-17T10:11:41.831391Z","last_seen":"2026-08-30T16:58:56.218292Z","times_seen":1013,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/22/raven3.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.786Z","timestamp":1788107420786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/22/raven3.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 30 Apr 2026 15:33:44 GMT\r\netag: \"69f37658-1aaece\"\r\nexpires: Tue, 29 Sep 2026 16:29:52 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzKoYcg9e8DE3io5SaGfjUyjD9hp1r%2BTeJARLx7FAyayWrFCA1Agti6HDNITyz9UJQVjtfNISG%2BpsOLwre3PLbd3q5zsbgnR6GqHAi9ONv0SN5mmjP0LTSLo%2B3MyBmk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3352df3efb5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1748686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1748686,"size_decoded":1749563,"mime_type":"image/png","magic":"PNG image data, 1350 x 1500, 8-bit/color RGBA, non-interlaced","md5":"719d6968c3271a0f5c22c8dc23f7fc8c","sha1":"b0cb6b10632e43e0e100bc899a8f7bbf4db2e55f","sha256":"98df98cdc74231e44724023142971c324934b54c93db51493696ea46ba0d041b","sha512":"68494bffebaee87409ce1145473622d93e2974632af2ebf9fc4eba434efa917c0f67d84fb12b4d8a79a8305f148893a5482d020b41326267505411f934ebae40","ssdeep":"24576:Nx/R16TEr7l5Xsb0WH+9L5hyFcwJIMUUjdHJH/:D/R16gvl5qtep5078Ujdpf","tlshash":"d02533e2ce73ea067c86e2a79fc4dab00e83052218c77ee86cf594e645c3df85949954","first_seen":"2026-06-11T21:10:40.775235Z","last_seen":"2026-08-30T16:58:56.220078Z","times_seen":139,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/kuo1u8kuo1u8kuo1.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.788Z","timestamp":1788107420788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/kuo1u8kuo1u8kuo1.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-160ddb\"\r\nexpires: Tue, 29 Sep 2026 16:29:52 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Go5c48916RAKpe%2FXqWQAwYOoc%2BqX%2FAHmu5485j9LGipn3G9jIXdFYprTgBLf%2BnXcq80BsyD246r8ahqjHGMza8o5Pl8xhwwDjymiJM09RHv%2Bgvl%2FRF6tmmtHm%2BENegc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3352df3efb6568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1445339\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445339,"size_decoded":1446224,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"7867942949d9886c3cb0c0678043f36c","sha1":"3243d9aae8ac7c2f47bb7d67de1bbecb242703f9","sha256":"b9f5d471d9f68f2c986b6f7e7f5583973ea60b206b9bc9e55e6838cec5af8cee","sha512":"105e53983a26b048a29515de33cd6162dbffaef4dbb84d8372fbcd505d2932e822fa3f732705ce42556987168ce705365fdd1f4bbe1e04222da9953d0969f4e7","ssdeep":"24576:RejtTgtczl9AzlicDenv1NZ14ZNfBGUEe2u4:RQtTgtcQJBDelOZNpGUC","tlshash":"012533c7dd93024dae1a716b0c1517ab09c26259bdb378a9f02a7a81f2cfb717863744","first_seen":"2026-06-11T21:10:40.766281Z","last_seen":"2026-08-30T16:58:56.222206Z","times_seen":161,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/2.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.791Z","timestamp":1788107420791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/2.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieFlsAswsXmnqY9%2FBqeczef0zzmHMGqJsbZkmbFKa1FOig9HGq4dBrANJzjtIFHPykMT1S5QqrrHNgOv%2BPkIfF65tQyusDs93Ej%2FF43%2FzEhQBar3GmkDB%2Bxau8jN%2B9c%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 28\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df3ffb8568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":854,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/Frame-55.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.294Z","timestamp":1788107421294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/Frame-55.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-bab93\"\r\nexpires: Tue, 29 Sep 2026 16:29:56 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 25\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMs4nZSxEcThgazw%2F1W6tyoYIkIdICleWK1jdB9ulB7KyjHsUnbUmT9Xk0EpzGSG3Nk7WCf%2Bwm%2FmAgrFebHj%2B%2BOdPOK7TaXAPZedxQLWeGx8s7uRAd5CHCMcLPqYa4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3352df71ff7568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 764819\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764819,"size_decoded":765698,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"e4d30d79cb598d5226600b3170295249","sha1":"3961435d75997fd4461468c19a1ad23866e912d4","sha256":"ef246db9a5a64071d07222953a3f195f174281157ade8903c454dd0b5545eeb9","sha512":"df7f306314484d777d2ddf667e7565759fddbab5315f5669c9bc783409f635cf9d7638afc0c0e16cefcbe13c8f6750d62fc72bfad8342336eb795267b367e35d","ssdeep":"12288:pWNjzTdJRRuJF7GewWIiF7P8Ru53lJhe6pM+hcTaGhQzTM7DazhGzmeoSfV2UX:2jzT2JRwWPl3lJvxSai4w2kzm0pX","tlshash":"72f42324e5c8a164c9b416d139f83fd713eac60e6edc486a0a699955c003b313fa7f9f","first_seen":"2026-06-11T21:10:40.771209Z","last_seen":"2026-08-30T16:58:56.226856Z","times_seen":137,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/4.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.412Z","timestamp":1788107421412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/4.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgxn1ytidpM9%2B19UXYj4YjgVUd9dtb%2BUD7qiBA%2BraF0Apys%2FHs7vPF9hpjAxqAlhvdzl7ppUS3SeikftzC7coZN2k88fO7K2yzjuZVsfATnHbbR1dijIbatpXpmSaO8%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df7d807568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":850,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/2.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.030Z","timestamp":1788107421030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/2.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0zFqNYDrcnrKfU4eG5fQRqLDKCpqMGSVJpzvXqort2kMJn8SG4ajYA%2Bm1dJPACrkUs4I9Z6j1k7PKD4OshAjjUt%2B7itUmE6tE34CeMo8eSAnWqHT4wVsCOx4ViNskc%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 28\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df57fca568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":846,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/3.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.032Z","timestamp":1788107421032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/3.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DB8IpStCGqbpBjiA2K2%2BMtBcMKEPWa8ZHwTOpzzG%2B1SxKDCeUpU3tljWG6IEwRfEvAVrjYmodTrRIHan0q64POtDt2elS%2BsnPusXpMxWMyOsZYTzxbmlB%2B8DmhRuxz0%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 28\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df57fcc568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":850,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/visit","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.993Z","timestamp":1788107420993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"POST /visit HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortscan.one/\r\nContent-Type: application/json\r\nContent-Length: 21\r\nOrigin: https://fortscan.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"{\"type\":\"visit_land\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://fortscan.one\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv0QHSCy1iAvLxMXsFPIZNVJvCap%2FzKli7zoUMt8IauCW2PlwNIJr1I4OaWTURX3pn92DFKuBonhSAhWGmIxdEP9ETbECSpTEP8YCBRKdCiY8aUlb4TCoZUvE2yeusY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3352df53fc5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":678,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"72054d9a6fbdcc7df012e19f32345b65","sha1":"52dd4c74c813db3790179c4f236ceadaca3467a8","sha256":"c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334","sha512":"5305bacdfd7c9bb525ff6c40d3ffa23c3f82eb5268ce3037dc353fa1a043ae31b239eed46db0fb043d61c55d57b97c5f00c308f92456c51c44069f23fda40317","ssdeep":"","tlshash":"5f30000000000000000000003c00000000000000000000000000000000000000000000","first_seen":"2023-03-12T08:54:09Z","last_seen":"2026-08-30T18:48:58.559173Z","times_seen":4058,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.750Z","timestamp":1788107420750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::5gl42-1788107307041-fbe35d2392e0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0hpFvw2v2Gh4Oj4EUUpK%2FiSSYzFM86yKIRCBU9cGwR%2FNcE1doHVC7phQfv2KE%2FlLqsXTPHKqXy8D2RwxsytA4Ih0RUlRNc6RMa76XI7IMSkoRDH4GkW8Ac%2BWyz0m2DpX3SxHlA%3D\"}]}\r\ncf-ray: a3352df3dfb8b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T19:22:59.108068Z","times_seen":18189547,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":14,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/20/neo.webp","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:20.783Z","timestamp":1788107420783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/20/neo.webp HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\netag: \"69f273f3-1cca4\"\r\nexpires: Tue, 29 Sep 2026 16:29:52 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkN9KdncwYQRbfkI5XUlT2mrJJFCliWiwirOe1RbULUlmNwh15uxDZGvubmuGrxZ7zgoaa%2FtrGHTYxUGcfBXPxKsXATMAyxdaF7dhCsgwJ1W3k3vLaIpsEcCnyZVbw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3352df3efae568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 117924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117924,"size_decoded":118796,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b0483c7d58bd85281b4a4daaeefe3c6","sha1":"0586b5735399d695ddf904ac2c4d299290fcb956","sha256":"f44d64afa1e76ea8753c861b8bc54a68e83015a4133a5ddb8fa5f82d16a8c8a7","sha512":"191db46c7773c69f917554d9fc7419b906816155c1af2f05ba0a9df2eae4390ec4ad56e79ce03b8fcb1f6739f20fe48252ae62f249de37c02583f709250d58ac","ssdeep":"3072:Qej/48egMthXXSPMOrfI2mvP645sdRqJErQGWMb:QeL48egMtlD8bmvP6yqUGWMb","tlshash":"a1b3130bfe5603a8ddabff7e9e1fc3056a9281161512c3ab6e590761702c77c16be348","first_seen":"2026-06-11T21:10:40.769856Z","last_seen":"2026-08-30T16:58:56.223885Z","times_seen":135,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/1.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.029Z","timestamp":1788107421029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/1.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KVrlEdtaWFeafws%2FDlV620z%2F7kMSJ1bmuIrlVinkDOtVGs%2BZlw8GXCTY4IQp04RW%2BP40rPf7XY%2Fb%2BJ%2FBSnLaX3EJp5ZFjxmc0%2Bb4PKoj7eJcqkMhM%2BUJ%2FyUUz08pzo%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 28\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df57fc9568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":862,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/avatars/6.png","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.407Z","timestamp":1788107421407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/avatars/6.png HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAsgbt07Wy2O8wfLg66c18TEL2F34V1WEWOA5HoafGVOz4p0Yl7q4qoeNsVEGSnGPknc48oE3SDr9jM9OZNxcRnR32j9C4OyO%2By4S6mB6Rg24kMhV3c0EGFfuBG9iis%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3352df7c805568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":844,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T19:36:28.525556Z","times_seen":39174,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortscan.one/assets/Epic.svg","fqdn":"fortscan.one","domain":"fortscan.one","tld":"one"},"ip":{"addr":"104.21.85.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortscan.one/","date":"2026-08-30T16:30:21.470Z","timestamp":1788107421470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortscan.one","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:20:53 GMT","end":"Thu, 19 Nov 2026 13:20:52 GMT"},"fingerprint":{"sha1":"88:23:D7:CB:01:F6:14:0D:FF:C5:01:5B:59:EF:1D:41:5E:4A:7F:33","sha256":"35:75:F6:3E:D5:76:7D:E9:63:DB:19:94:9A:58:92:95:FA:34:A9:04:43:3A:BF:9C:89:6B:E7:9A:0D:C4:26:B2"}}},"request":{"raw":"GET /assets/Epic.svg HTTP/1.1\r\nHost: fortscan.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortscan.one/\r\nCookie: pixel=; tt_pixel=; clarity=; _g_id=; _g_label=; cf_s=0x4AAAAAADDIrdhtOETnVX-9; _user_c=1788107420:195.64.118.152:A8VYos5WK3YCsE9Aih7MyhLYIjAIbMrrS3RW9Wy9pd8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 16:30:21 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69f273f3-18c1\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Apr 2026 21:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 29 Sep 2026 16:29:54 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LHEn74gmlK9PDxV0W5Df5INX9seXOJynVU1g6z7rNt326Afx0uIGogwHizLMdj%2Bca3E7n817arkT8bKBrkeQwP0pX8B0wU7pcn5l2g0VX4IKBdrLRAKTVud2aAlFY8%3D\"}]}\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3352df83811568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6337,"size_decoded":3482,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195d82e6464344fd0ef2ca0c79879a9f","sha1":"81474267abcad87f3df4f256b0080e7a2fe7ce76","sha256":"74a34e0989f74209ff844965027113a2a407ecd4985dd7fab180aacdf3a294a1","sha512":"680264aa9ec6c07d958ce6a7cbb1500e3e2fb2e5aef05572b99a2236c9eb005f5a8b502086a0615ea2e19b26e5358e0267b2ea20bce6e9e0ca1a26f4f3819a19","ssdeep":"96:pKV+QQbFqfleRh6bl7ri/FpJ4dEQHzWARJCaffgN3Km1QtlX/64RswgRN:3INEherkqEcvCum1QtR/6iUP","tlshash":"60d1c7dc3b2493b8e541f2e1eb4e4cea7f4e28d52154d678c6692dcaa01a0eecd458c4","first_seen":"2025-11-18T04:00:01.70032Z","last_seen":"2026-08-30T16:58:56.22272Z","times_seen":1111,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"fortscan.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"fortscan.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}