{"report_id":"ed746f3a-4c22-4c7f-a066-45c9af16d34d","version":6,"status":"done","tags":[],"date":"2026-03-24T01:56:04Z","url":{"schema":"http","addr":"ftx.case-debtors.com","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":0,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"title":"Kroll Restructuring Administration","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ftx.case-debtors.com","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":0,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T01:56:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":3,"received_data":374728,"sent_data":1582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ftx.case-debtors.com","ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-03-24T01:53:55.957984Z","last_seen":"2026-03-24T01:53:55.957984Z","alert_count":13,"request_count":13,"received_data":4635986,"sent_data":5932,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"media.ra.kroll.com","ip":{"addr":"52.84.50.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-09-02","domain_rank":4122935,"first_seen":"2022-08-26T23:27:58Z","last_seen":"2026-03-24T01:53:56.493746Z","alert_count":0,"request_count":1,"received_data":6645,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"p.typekit.net","ip":{"addr":"23.36.77.91","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4638,"first_seen":"2012-05-23T14:28:57Z","last_seen":"2026-03-22T23:59:37.507535Z","alert_count":0,"request_count":1,"received_data":340,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-22T22:38:17.64832Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.typekit.net","ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4054,"first_seen":"2012-07-05T01:42:39Z","last_seen":"2026-03-23T01:21:12.834609Z","alert_count":0,"request_count":2,"received_data":93534,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-10T18:12:06.593474Z","times_seen":3342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-10T18:12:06.59839Z","times_seen":3491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-08-10T18:12:06.588023Z","times_seen":1582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"19e11941a02b77808bb3f87131b07531","sha1":"fc2cf6215040e778be909dde0d69504bf102499c","sha256":"ae82a6e2095409a6a5057710d1f8b8a5f9ceaec5521d2dc06931d558554bb0f6","sha512":"c43ab443df6b5713553b6f2494af253bbc62c644833d97216d22de7446c0be44b8fe50440f9c096fa244a33a55a10e09f9c490bb9b3f0ee9bd56edf135c5ef04","ssdeep":"768:fttGuuW5Comcdd7tcDpxUQsCJq/h4d3x34AXY:7pCombcp4d3x34p","tlshash":"7e43869a1d4694940f0927efd0f6a88a91148e77cdacb45ad92eccc13639fa2c5c713f","size":55740,"data":"","first_seen":"2026-03-24T01:39:08.573057Z","last_seen":"2026-03-24T01:56:12.620123Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56808cea9370554b114db72e3799bfbf","sha1":"0e001fb02246236d25b609cb61c240348683c617","sha256":"93f5db59ba2425813667f7856a9a350aeb19fd07d780d174aa9da0c41a57ed1e","sha512":"f4e01b702bd8af06f71ada7dbab15c0f7b98e6aea1c8065f3fbb882ce6ef4f7e5326f8574842e610e30a3caff141351b1351d20c91a903b8d50e3284754eb13d","ssdeep":"","tlshash":"f2e0c08b9c5a65703fe605a0097f90004493146b064ca444b48cc4304f1413ac1736c4","size":418,"data":"","first_seen":"2026-03-24T01:54:01.748602Z","last_seen":"2026-03-24T01:56:12.620743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1a29c20419d772d5c93a981e4b4999c","sha1":"1df718e3c1bb7467040d803e57b6bbdc17ecabfb","sha256":"04987168eabafdc67848b05e772fbe30c75090d652a6972644237e1135f55b06","sha512":"9d121f363f098ae7e4874235064ad01a8cfb56f66ad737346291ce90220cf63ae74a9eb299be9dcf9f0098a3486574f8c6241c8eebc0b3d0de5d7f8d9bbd2e23","ssdeep":"96:ioSMrnMkn+AcAuybSIX9iT04IVrIx/NnshNwukGfUa8wCLryg:i0+Ap/b9X64Ex/5shN7f/Kyg","tlshash":"15a16308a4d30a6a5633b0f00f2f550976659887520ddd507e7c9fc8bfaed68cf62e85","size":4899,"data":"","first_seen":"2026-03-24T01:54:01.753419Z","last_seen":"2026-03-24T01:56:12.621379Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-10T18:12:06.590327Z","times_seen":3406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-10T18:12:06.653143Z","times_seen":3449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/c9b5a0b7-85b3-46b0-b5f9-4b81841fbee2","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a28156a220db1f7920b50fdca7abbc","sha1":"8aa8d64eeffb60d8ac927d89ace1395d3db9bbf6","sha256":"767df583fa235ff8f0864cbfec270a0db835e1eb2d1e20eed8c109ebde815f2c","sha512":"7ee40780c1dad733b237545557073134583b70d802e62168ca6d1941e2bcb7f4c5068a9ca454867976783e7e21b17de5587f92a361f4c35a89227c77d6474773","ssdeep":"49152:385G9KZwYOxXq+h5sg3wW2QUSvhjG+EyY4bfO3xrQab4Evp3vBJqHEkGeok8:K","tlshash":"be1623d0ae5398b5cb5812a960a7af09549a0f278cddf1ced298f4c631fefd081d7909","size":4053647,"data":"","first_seen":"2026-03-24T01:54:01.759334Z","last_seen":"2026-03-24T01:56:12.623541Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-10T18:12:06.64719Z","times_seen":3237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ae58f39dad41fe359134190f255a820","sha1":"b41d6707d6e5c0194b25039fad294a176a16d47f","sha256":"fc67f8aedc4a0f00e7dc43c0142268400f3a0bb0882f42eabc28e89c3bbed01a","sha512":"e627d558b995d3eadb33bd39d7a99e95ece9b09e8186314fd2c62b158a353a36807a993d196e88e300ec33a5f4517c72b7bb6cd6ce6fee7d7507f47a73755f86","ssdeep":"","tlshash":"4df08b4af5f71195607ff1b27bbf69022864006f8205cc043d2d8fc44f697b8a297a48","size":622,"data":"","first_seen":"2026-03-24T01:54:01.755508Z","last_seen":"2026-03-24T01:56:12.624565Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"49e74e0f4be54bc128327f1717698c30","sha1":"8d2bb3592ac1520dca28d0bea55af0fbb6695703","sha256":"de10f9145c31cc4634e87160d8baaf7cc3f4dc4553967f8c418addeebdf8f8b2","sha512":"b92a4d8692e3422166eca1bcf08aea68af5b792e9721345df4d9000cc97499f38c24fc6ec1fd2d8d1504d60ac75055d48427bab75a7389d9cec992dd3e78e4e0","ssdeep":"","tlshash":"e8118c0bf8fb51a011bf62755faf90015860241f464ccc447e6c8fd44f58279e2b7b88","size":948,"data":"","first_seen":"2026-03-24T01:54:01.764572Z","last_seen":"2026-03-24T01:56:12.625339Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3094e8dc5fcdef0c30177081a161b69b","sha1":"9aba11341a8375bc56696da82d663c7902da9c1d","sha256":"45a6deffcd578f8c056dd7f7831270671ee07fe32d1bfafce1d5456b01df5aec","sha512":"a54c3326bf54fee448fcbf689266455beb8d55a5ca9d6b4de8a8ee78cbb4e7bdf3ad21881a09e3c69d3b27478c9abc02bde049b104714840dbb5afcc331bd3a4","ssdeep":"49152:qw5G9KZwYOxXq+h5sg1wW2QUSvhjG+EyY4bfO3xrQab4Evp3vBJqHEkGeEsx:e","tlshash":"ed162390af5358b6cb6812a960a7af09545a0f278cdcf1ced298f4c231fefd181d7919","size":4050915,"data":"","first_seen":"2026-03-24T01:54:01.76784Z","last_seen":"2026-03-24T01:56:12.626524Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-10T18:12:06.643592Z","times_seen":3275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/yh5igei5x.php","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ba59188de9cee29719cc3a0b6e67283","sha1":"76bdafdb324559e881a611ffdb2066d6c6672983","sha256":"58d3a1e59dc11f659e62d0ad794b9758bad4e98b44475c3eb0c79867f99a49b8","sha512":"c73811097312b3ed44835bb252bf92041a7b74e78afbc0289d0105a5f71c530a78100398119605f57da31b53582a946a84c3841c442fccff6c7a588acb719574","ssdeep":"3072:03aMpxdcjGdIhe8DR7wfpigY0M/Nb7VpbptxEFPAS25nRk6b3uThMGJ+EA4dhrJ1:GT18DR7wfpigY0M/Nb7VpbptxEFPAS2G","tlshash":"f9f3c4e9db5b909d4819058ec0b3fc09e4498a16cd9cb8a7ae1eddc13329fa4d1c357b","size":170545,"data":"","first_seen":"2026-03-24T01:54:01.741007Z","last_seen":"2026-03-24T01:56:12.616253Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftx.case-debtors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 118072\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-1cd38\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 334345\r\nexpires: Sun, 14 Mar 2027 01:55:40 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5020Gc0%2Fe7lOyD5lb5zu3kEIm6dNZeDOj5mIbb7JLOFgK3B9kUX%2FX41r9%2BEbEwxHhbRqfKHi%2BxIxsvXPjt6Eo1N6MNnoV8zPCsviUGegz%2Bvf2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e120e11bfd6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118072,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 118072, version 774.256","md5":"715d593456fa02fe72a008a72398f5be","sha1":"e948290773216dc1b50c2121314a8cf918c22b54","sha256":"c411f11975d26eb04cd2aa3c071181d4b18e489f1fb97060d4176a3531dfb36e","sha512":"1f63209c93a462c2690442c9cf1c3e5a67f2df7a67dfcda2cb81292a2dbb90641aa0ab81c25323a1f2d9f0fa09b3421d136ae5228c47e581c51912ba284de46e","ssdeep":"3072:3wqMZaMDlYfb+t0YI4WlLL7rE2ZjX+B+pdJpimtm:gpZNYfytUxH7rnZj+Szpiz","tlshash":"71b3137922e526408e9d0e3bbf7b6a6ec7f8719ddbd4c10aa7d18469001738ed8d842c","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-08-10T23:09:57.984211Z","times_seen":14320,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ftx.case-debtors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18714\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6696a8d8-491a\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 779740\r\nexpires: Sun, 14 Mar 2027 01:55:39 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52IeScLperxR9L6cVO5B0ZBItSE50ngYIzEg4899sNY0cScbA2OzcI8lRyUw8skArPtObN2akHRrXEDmPPcUQ7ZoCQugpQWWMXty5E%2BlNjzKOsA%3D\"}]}\r\ncf-ray: 9e120e0b0d4175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96518,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58966)","md5":"fbf1f3445f2554bce753c92cf6851b41","sha1":"3c73ff1cd7b97c189f139367dbac43dcf5d2c70d","sha256":"e5e202e3c899507992952533f57b634722b69b34241d271963559d31aa33ef81","sha512":"29cdf6def18112acd39a8b801029d571ec90ab2a9db128aa2d021204bdbd6945b853f33ba523c0fe0114650aafd5cc31e0e9d8c53c6f7b950c839193e8be0926","ssdeep":"1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J","tlshash":"559373f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822caf79","first_seen":"2024-07-20T00:27:59Z","last_seen":"2026-08-10T23:09:58.001945Z","times_seen":16616,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":7,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/Images/pccw/KROLL_LOGO_RGB_WEB.svg","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /Images/pccw/KROLL_LOGO_RGB_WEB.svg HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T04:44:39.270711Z","times_seen":148818,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/Images/pccw/globe.png","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /Images/pccw/globe.png HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/style.css?id=07182022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T04:44:39.270711Z","times_seen":148818,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/tablesaw.stackonly.css","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /tablesaw.stackonly.css HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 03:31:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 815\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2929,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b82eb2cad048d7d6be269e736f4fe36b","sha1":"68dc75e2f85dbd76118269e9b00f458ac7f3f719","sha256":"e892f4e967a8bc2263fdb0436cb586b7f128ede8b4f81e4db54adf2100f1e29c","sha512":"7a9e5d16a37167387d6b94e49c52d10d429979e063687f5518b30d56f42680bdd12db17345cd459cead127a97e7aac08609e4f5f24c15250515e3f2006e15029","ssdeep":"","tlshash":"1a514b485ba032cdd20af1b05beaa39574ab00d6624db9f6ab41cd540f0e1dfc2d3ee0","first_seen":"2026-03-24T01:54:01.705767Z","last_seen":"2026-03-24T01:56:12.608919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/styles__ltr.css","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /styles__ltr.css HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 03:31:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41718\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79242,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a0ce64213f4f6193a598de1cdbaea665","sha1":"fec9a873b214601198f7312bcb1bf99204014085","sha256":"f0dff86310e9d08a2d80dbe68bae9367f8cd6cbd4b7d036f09b0702d035c7e8c","sha512":"72da125d31fd39b9b6571286c9b4b35d2b8875c8e299155a4d44742ff2b3fdf9b8cd5a7b888cf2ba26faf4842ea6810cf7d6dee5dc4b7e55aed03c623884356c","ssdeep":"1536:OfGNbFoZJSUYOOaLnAW8+IcTOILbuhXwW4nxM:mGRFauOxLA/+IcTOBX/","tlshash":"a7739fb33851393ebc3b87656186bde8f22cc527e5114bfaf65a7920c2c70d68153b46","first_seen":"2024-10-08T05:12:28Z","last_seen":"2026-03-24T01:56:12.60976Z","times_seen":1560,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.ra.kroll.com/caselogos/logo_112e18c3-d755-4a88-b222-dcb8ebaf0c39.png","fqdn":"media.ra.kroll.com","domain":"kroll.com","tld":"com"},"ip":{"addr":"52.84.50.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ra.kroll.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:D0:8D:FC:47:19:66:DE:AB:94:96:BE:03:B2:B9:B4:E9:7F:99:E0","sha256":"E5:C1:07:BA:DB:97:8A:F9:B2:44:9E:48:1D:D4:99:6B:45:46:AF:1F:A8:DF:8D:4B:B9:23:5E:A0:CF:85:08:D3"}}},"request":{"raw":"GET /caselogos/logo_112e18c3-d755-4a88-b222-dcb8ebaf0c39.png HTTP/1.1\r\nHost: media.ra.kroll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 6061\r\ndate: Mon, 23 Mar 2026 20:25:19 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 13 Jan 2025 16:53:33 GMT\r\netag: \"29f8028f98153be7a5a407dceb0403ea\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GmLCNQ5ccfAOLjHDovIAebIwLacFfBfq\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: n6iZsN9BLfQio72yb__xyNchO2hKnXkUduxoJ4EuW-1ypI7JOf-XHA==\r\nage: 19821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 248 x 124, 8-bit/color RGBA, non-interlaced","md5":"29f8028f98153be7a5a407dceb0403ea","sha1":"6bdfe69dff5ea42ef8ae2bc606512b96cb036536","sha256":"3075270cef93b0ec652ea5e4cd6c3b73bc85aa45d947a37e562d38d2c6e9caeb","sha512":"e092d3530537893663055acbbf45e81f15cf9e4eac042e3f40136103b1c6bcc20d836b484a3a2d81b15b281f8d4c848c3665a01c7cf46ac1933c5333c0817e81","ssdeep":"96:GIye4S351JTXIyDKuoCV7xhEEJ8lchjdYc7fjoy6Apum2LDqMLMrFTCmBwsT7OMG:GQnV5ARC7Uy6KqLrMr1rfeTsi","tlshash":"9dc19d5e31e09c6dd9c3e1a5e9351f749f770ea8ca8a0b092014a61525b3f880674799","first_seen":"2025-07-29T14:51:35.946702Z","last_seen":"2026-03-24T01:56:12.610499Z","times_seen":3,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":93,"dns":76,"connect":1,"send":0,"wait":182,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=sxt5qdw\u0026ht=tk\u0026f=19119.19121\u0026a=5373827\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.91","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 12 Dec 2025 00:00:00 GMT","end":"Tue, 12 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"83:B4:8D:3E:B4:3E:71:49:9A:8F:71:32:96:68:3A:1D:23:DB:38:B8","sha256":"F3:E4:84:49:06:CC:99:20:A8:A3:BB:DC:8E:3D:31:69:7A:CA:6F:5B:21:C4:0B:4A:3D:32:2B:D0:BF:07:62:69"}}},"request":{"raw":"GET /p.css?s=1\u0026k=sxt5qdw\u0026ht=tk\u0026f=19119.19121\u0026a=5373827\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Sun, 01 Dec 2024 12:58:09 GMT\r\netag: \"674c5d61-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-08-11T04:57:45.40554Z","times_seen":175936,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":82,"dns":66,"connect":1,"send":0,"wait":1,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/yh5igei5x.php?m=2957195","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /yh5igei5x.php?m=2957195 HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ftx.case-debtors.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4053647,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c93180b121ca8bc5853e0b9a12a6823","sha1":"ea23b3f14fb8663babd6c794a34b9cf5f797826d","sha256":"f7c88cc1b3b72980b6f6f26673af5f0f3d4e796a774321a22d05d001e26f15cb","sha512":"ba564010718d8eac0b1849119c0adcb52bd128974fc76f4ba52fab47ab244eb3cc1b1cac2dae52459e85e726b7cbfd3ab566ea92dac06d8460019536d3257efc","ssdeep":"24576:sY87M0RzaZn26QhdhHONSE65HOxXTtsziOQp5T87+Bvr:385G9KZwYOxXq+h5sk","tlshash":"982523516f8285a88a4c92fc50e3ae4d90500a0389edb6edc5acf8d731febf2d1d7519","first_seen":"2026-03-24T01:54:01.747095Z","last_seen":"2026-03-24T01:56:12.611709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":736,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:55 GMT","end":"Mon, 18 May 2026 18:21:54 GMT"},"fingerprint":{"sha1":"EA:E6:47:26:9A:0B:B3:6C:6B:AE:E8:B9:D6:BC:75:92:2C:FE:B8:ED","sha256":"5F:49:E5:ED:4A:20:39:8A:4E:34:2D:41:2D:FE:BF:2A:79:ED:E6:DF:13:0A:2A:AD:38:8B:BC:21:9A:73:31:20"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-08-11T04:59:40.359386Z","times_seen":82882,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":127,"dns":16,"connect":8,"send":0,"wait":16,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/favicon.png","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:55:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Mar 2026 07:54:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30920\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"9fe0e89c6ec0034d22c3ef0f7e40a546","sha1":"3b2219b84340fc87c3e03882ac190f5d5a379d9c","sha256":"7987fa12b6b08e22a3c784d20a33e9757c1416f0c0d8ae66ff9b9b24fb86e704","sha512":"ff871fbc5777b782bdaf6f29fca96fe73403988bd1a47ecf954bfa2407f73779b7f8faf3f85c580c1707b3e28aed430250e036d0ea18d0a5ab18a7596865f4dc","ssdeep":"768:tSffE+cAJ9F+7GNn/YBVgxrPk8wwgbh0uOz4n6Ufsv:QU+cEwOnAYxrxww6DOeq","tlshash":"acd2f10de7917ac0ff8d1b7fcade009d7399f6283619e929979e84c35429ce32427460","first_seen":"2026-03-24T01:54:01.726307Z","last_seen":"2026-03-24T01:56:12.612894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:55:38.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 18 Mar 2026 05:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12392\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66300,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4869), with CRLF line terminators","md5":"76a38248cb29d14fe8500e455a73f9f2","sha1":"5cf74f447d739cee5f4d6326f5209b9b06edf115","sha256":"93ac1aa5e997d245e4dc99b03adeb7d6828ddceb991366e332c276413adc9808","sha512":"9d52140184aa77a24b62eb9dd1acff519cdc6f018e739efed982af1a6243d91d84759142a33829b0c8924bdbd3a757314cd8e1167100747f30bf268b2ce167cc","ssdeep":"1536:8RoDMrUYLHrZj33Pj33ZzZDRH/Vn3DdD9TMiLjrTfjXnPjRJXPDxDnfz7ZbXbTn2:P1jQCG4","tlshash":"fd53741068e2482382bbc6c69af58b45fdf48213c3460594f6fc97f71ff6c29a62b519","first_seen":"2026-03-24T01:54:01.727711Z","last_seen":"2026-03-24T01:56:12.613549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":293,"dns":1,"connect":142,"send":0,"wait":164,"receive":1,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/style.css?id=07182022","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /style.css?id=07182022 HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 03:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34960\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":220153,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"7e10afde604b6647fafb7f0c2f17830b","sha1":"380ccd5cc4e6a4ba759f917be710521b071ac6e2","sha256":"777b55b28af23b9ac63eee51cc9695265b7b428c700dac94c3a680230a255add","sha512":"64ee337260fa8042b9eb13e2c4adec0339a4eae308bb775228fdd25b1cabd432952637d3df3e65d8b6d6c13253d2976006854eec6b7ac4c0028132e72893f9cf","ssdeep":"1536:fxe3LQ3WsBNXIB2ytTGnEWia3jgrz9ME9q7Ca2rfv+FTYrbBBl:BVLNJjgX9ME9q7Ca2rfv+FTYrtBl","tlshash":"5224101e9e0226065833e779efb35649ff160063d34694a8bedca2658fb8254817dfcc","first_seen":"2026-03-24T01:54:01.744033Z","last_seen":"2026-03-24T01:56:12.614418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/outdatedbrowser.min.css","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /outdatedbrowser.min.css HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 03:31:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 349\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (796)","md5":"9131a0c1fc3c983e7770d2a8978ffbb4","sha1":"00ebdba6ec57a79681aa614d230ed46d37d8f8d5","sha256":"28d7d392ca7ff8f726249d28c1da3cc812e2fd254c42b1ff3cd3e6db99d1fe92","sha512":"1371603128a7916379422ebe28df0af14d7b019c09edaae35be9c84e08ddcb4ca0714a2e39161c2453989ad6732887170ebf9cd15ef73463c4a2c7d837a2f333","ssdeep":"","tlshash":"be11ce245c24721df037d16674a0b98af2708142df3b1739aa5d7a98c3b605021bf3cd","first_seen":"2023-05-05T08:45:32Z","last_seen":"2026-08-05T18:10:12.662141Z","times_seen":411,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftx.case-debtors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 157192\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-26608\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 779666\r\nexpires: Sun, 14 Mar 2027 01:55:40 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPJQo3%2FKhwhPFeTmeWQG1VbJ2QeWkXaB1NADN0A4Nu6kqim8IvalTy2YM9tkfsoC%2FSphsWwiQT0myJCFx9nG3Tc7WC7QpBN85CUjx7kQ6xj8Aj8%3D\"}]}\r\ncf-ray: 9e120e11290e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"237f4a0afbdb652fb2330ee7e1567dd3","sha1":"69335cd6a6ac82253ea5545899cccde35af39131","sha256":"1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020","sha512":"27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38","ssdeep":"3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO","tlshash":"5ce3125bf5e6dbe5525e6d64fb5478972b1030823ee11cf12ce2206eb889317399e08f","first_seen":"2024-07-18T18:39:32Z","last_seen":"2026-08-11T01:41:41.740977Z","times_seen":19576,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/yh5igei5x.php","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /yh5igei5x.php HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":170953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56624), with no line terminators","md5":"5ba59188de9cee29719cc3a0b6e67283","sha1":"76bdafdb324559e881a611ffdb2066d6c6672983","sha256":"58d3a1e59dc11f659e62d0ad794b9758bad4e98b44475c3eb0c79867f99a49b8","sha512":"c73811097312b3ed44835bb252bf92041a7b74e78afbc0289d0105a5f71c530a78100398119605f57da31b53582a946a84c3841c442fccff6c7a588acb719574","ssdeep":"3072:03aMpxdcjGdIhe8DR7wfpigY0M/Nb7VpbptxEFPAS25nRk6b3uThMGJ+EA4dhrJ1:GT18DR7wfpigY0M/Nb7VpbptxEFPAS2G","tlshash":"f9f3c4e9db5b909d4819058ec0b3fc09e4498a16cd9cb8a7ae1eddc13329fa4d1c357b","first_seen":"2026-03-24T01:54:01.741007Z","last_seen":"2026-03-24T01:56:12.616253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/sxt5qdw.css","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /sxt5qdw.css HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 03:30:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 585\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1779,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"3a63ab2c145e9865142f8d9d0445f2e0","sha1":"7219877cc8b27ea624feac070886dc4175384e77","sha256":"9c419dad579457ef49b8e32146c3bcdb2b4eed1de7b6bc6c7e18f64d2193c286","sha512":"ad6b58bc6b7f020bc049863fb2fa365c640bf479b98789a8b44630f9d2adf791b5293ff606eb8349557526f768e586482f9242a79a6782cfa3e43c9ece9ab8e7","ssdeep":"","tlshash":"4f3106b24001c9b2d1d46bb535cef7aada5f751a25e19c52453188f6cc79ca33311b7c","first_seen":"2026-03-24T01:54:01.719863Z","last_seen":"2026-03-24T01:56:12.616952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/Images/pccw/google-greyscale-regular@3x.svg","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:39.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /Images/pccw/google-greyscale-regular@3x.svg HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 24 Mar 2026 01:55:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T04:44:39.270711Z","times_seen":148818,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/99cda7/000000000000000000013631/27/l?subset_id=2\u0026fvd=n3\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 12 Dec 2025 00:00:00 GMT","end":"Tue, 12 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"83:B4:8D:3E:B4:3E:71:49:9A:8F:71:32:96:68:3A:1D:23:DB:38:B8","sha256":"F3:E4:84:49:06:CC:99:20:A8:A3:BB:DC:8E:3D:31:69:7A:CA:6F:5B:21:C4:0B:4A:3D:32:2B:D0:BF:07:62:69"}}},"request":{"raw":"GET /af/99cda7/000000000000000000013631/27/l?subset_id=2\u0026fvd=n3\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftx.case-debtors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 53908\r\netag: \"c861249adedde329fb21c12ac581918ea3cc89a3\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\nakamai-grn: 0.6f4d2417.1774317340.30478a79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53908,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53908, version 1.0","md5":"7cfb343b7c5eef69bab8d51da52caa14","sha1":"c83a93b704b9dd963922346c17faa861bfcd5bae","sha256":"936b8240dbf28ebe4b7a724ae4f541c66de3470fc92bca5e95ed70fc4858558e","sha512":"e80c8616f4d0937a5860bcaacb617688775fdeea7c95ea750920eb9e1769650eb2ca9329727b2954892db8300b9559dbac33f83ecdde9c6e45df529c88f8a5b5","ssdeep":"1536:SHlU+At5PhXRjfjFmcJIWjAcRtMQqCXc0FCa:1lhhjfjIcJISAiMb09","tlshash":"873302b0c014cbffb051af2d019dd0fd0c2aaec487949241f65185e83c926beaac4ed9","first_seen":"2025-07-07T22:53:01.993314Z","last_seen":"2026-07-22T12:06:54.945069Z","times_seen":10,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":81,"dns":62,"connect":1,"send":0,"wait":1,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/9d033e/000000000000000000013633/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n5\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.115","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 12 Dec 2025 00:00:00 GMT","end":"Tue, 12 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"83:B4:8D:3E:B4:3E:71:49:9A:8F:71:32:96:68:3A:1D:23:DB:38:B8","sha256":"F3:E4:84:49:06:CC:99:20:A8:A3:BB:DC:8E:3D:31:69:7A:CA:6F:5B:21:C4:0B:4A:3D:32:2B:D0:BF:07:62:69"}}},"request":{"raw":"GET /af/9d033e/000000000000000000013633/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n5\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftx.case-debtors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 38856\r\netag: \"c5092d50782bd05a5530355d2cd08a640e91dcff\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\nakamai-grn: 0.6f4d2417.1774317340.30478a7a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38856,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38856, version 1.0","md5":"4af14d4cc1c2801b9ea7c92213dc0efc","sha1":"485fa14490c176d4203d88cb73fd5556e8146170","sha256":"4bdae60271274001f123ad459a614da1dd86da4c80364eddeeda1a2e117e86fe","sha512":"b8c5ac1d3476b99ad16a3d6dcec3cfd7d9eb1e3909fdb9406b0b4b7c72bd51d3aa8ecc75cfcb730368cf5c4191ee299bf7f551781ecc7b94ce2ae41ccd7158bd","ssdeep":"768:nxDScgSzPCnQfhUQXy4C0m+hh0rv0CDTOYHJL/yeMJvM8mqaTruYVAlUnNXy7TAF:UR+PCnSi4CK0r0QJTMJvM1qaTSYd","tlshash":"3903f28f0a1492aa13eb21e242338cc375af7994f46dc651c136bb529dee3b4f45db08","first_seen":"2023-04-11T05:40:58Z","last_seen":"2026-07-22T12:06:54.916444Z","times_seen":104,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":78,"dns":62,"connect":1,"send":0,"wait":3,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftx.case-debtors.com/Images/pccw/KROLL_LOGO_RGB_WEB.svg","fqdn":"ftx.case-debtors.com","domain":"case-debtors.com","tld":"com"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftx.case-debtors.com/","date":"2026-03-24T01:55:40.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftx.case-debtors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 23:17:55 GMT","end":"Mon, 08 Jun 2026 23:17:54 GMT"},"fingerprint":{"sha1":"94:30:77:E3:4D:0C:C7:64:B4:6E:B0:8E:B4:34:95:A6:C8:82:C7:5E","sha256":"09:5D:1F:23:52:F7:4E:06:47:DB:90:8C:20:14:DE:F7:5A:FE:C3:CD:E4:74:6B:7B:65:9F:4D:F0:96:CE:52:D3"}}},"request":{"raw":"GET /Images/pccw/KROLL_LOGO_RGB_WEB.svg HTTP/1.1\r\nHost: ftx.case-debtors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftx.case-debtors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 24 Mar 2026 01:55:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T04:44:39.270711Z","times_seen":148818,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"ftx.case-debtors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
