{"report_id":"f0dcdeea-4be0-4f8a-9ac3-7c0fd330559d","version":6,"status":"done","tags":[],"date":"2026-03-10T18:50:53Z","url":{"schema":"http","addr":"gapiauth.net","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":0,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"gapiauth.net/","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"title":"Google API Connector","dom":{"size":6923,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (823)","md5":"cef091dcf88f7170142772f43b120801","sha1":"20a57b33de93e1df3fcdc48c69ad6aab6cfe6b30","sha256":"0ac415ddad5b7acd5d66f40aa41922229032f4d3febf1d5928efe79b86c3bdd6","sha512":"5563e5d79036075f87df9461f17a879649a1c0f0e1f08fc77d04c0f0d22d6ba5e532b68cd0c78c0e4c4b4f53fba43346d1425a5b9298a855e2da58aa5fcc5a52","ssdeep":"96:nm7x2m0GsakF1l6gzVAHRplZuy2An2+lddtLjQ/:mt33gyx4zf+ldTLjQ/","tlshash":"cae1b53178f4606711478bc8a97676267cbb919fef8a1204b2ad03f01f82de2dc5366d","dom_hash":"domhash487ce07229f69042acc88fe041384b15","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gapiauth.net","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":0,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T18:50:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":33762,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gapiauth.net","ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-03-10T18:50:53.591444Z","last_seen":"2026-03-10T18:50:53.591444Z","alert_count":10,"request_count":5,"received_data":28855,"sent_data":2171,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":4,"received_data":142548,"sent_data":2262,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gapiauth.net/js/app.js","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f9002faffcb2b02978c98034bed170","sha1":"9eaaa969188e35f84571dbbeeb97b2e692c36a60","sha256":"1a8d38b5a815366a194abe2899da5010522f90e5a13c980b6915914296d1d4f3","sha512":"68a51dc1a538ee5da8b311444db823ec22b0981c35583f9635bd3e8288124bae4bf883ac11a33484bb1a7722881692e44a663b4a3074d403523f4bf27fa12260","ssdeep":"","tlshash":"5341a9b7724515358dfa5afab3e06384b98b40232c8092503c6c88064f71d85be76fda","size":2240,"data":"","first_seen":"2026-03-10T18:49:43.746319Z","last_seen":"2026-03-10T19:01:00.556237Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gapiauth.net/js/translations.js","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2be12b4d9d818eb9972ccbb35ba92108","sha1":"5cd47d6bfa2a7f555f99b8b19bd9d214f7319d20","sha256":"f29631e54351a8e3389eaee7112cff3f527ee425f7042324bcc12482b4da8076","sha512":"acc9cf739822be4ec64d91b22801803e9d6e3d32236000fccd66e058a037882afcb9a9680c2d05accb1c7ee3c6b7a80eaebd6ad872c3301f87df528a2a5eb222","ssdeep":"96:0ovIXL5gXEQ8nR6fUG7MXigynoZJ5U1alft5BGbU8AqU52jvzKl1KVKvqKu:0QL0QlfQXigkodlAlze1vvqKu","tlshash":"53d120235da860b60270e12df952360df1a903bf6ba6433b327c55682ff1246a5f5bd8","size":6419,"data":"","first_seen":"2026-03-10T18:49:43.754016Z","last_seen":"2026-03-10T19:01:00.555671Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gapiauth.net/","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T18:50:31.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gapiauth.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 21:33:05 GMT","end":"Wed, 03 Jun 2026 21:33:04 GMT"},"fingerprint":{"sha1":"96:63:A1:B3:B0:1B:B3:7E:34:89:0A:B3:BA:F3:EF:AD:43:02:E3:1C","sha256":"7C:C8:EE:A7:05:DD:D2:95:41:80:E8:72:F9:A4:46:1C:11:8E:CD:21:71:5D:9D:39:C2:A1:0B:36:94:F9:A6:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gapiauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 18:50:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2478\r\nlast-modified: Thu, 05 Mar 2026 22:29:56 GMT\r\netag: \"1bd9-64c4e79ea8473-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7129,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (817), with CRLF line terminators","md5":"4b399f37c2ed5bec56420e1a00f20341","sha1":"354933c9ada09c8188f9b303ec2fae971dd3c9fd","sha256":"12c6219a824244fb59bde662cf0856cad68944d0ffb562b22442499f1af01ab5","sha512":"6b0ed0186ea8d1a8b0714abefa174489a2bc27d7c67bfd9a8270d740cad38a16004da68bc80c4c8acb71517d32d3c07d186e3428dfc2d4dba8663ca31456a53e","ssdeep":"96:tFxom0iAaD+Wh2gzDAOQ4lZLn1ANlddtY5UT:t73WggOQ6eNldTY5UT","tlshash":"cfe1733178d46457027387c899357629febb818baf8a1240b1ed03b31fb6da1dc5366d","first_seen":"2026-03-10T18:49:43.757391Z","last_seen":"2026-03-10T19:01:00.552364Z","times_seen":8,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":262,"dns":33,"connect":106,"send":0,"wait":109,"receive":1,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v67/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvbQui-A3tw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/googlesans/v67/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvbQui-A3tw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gapiauth.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 00:03:27 GMT\r\nexpires: Mon, 08 Mar 2027 00:03:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 17:14:54 GMT\r\ncontent-type: font/woff2\r\nage: 240425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36204,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36204, version 1.0","md5":"21a1f432d8fad5b932b54b96c6e5207d","sha1":"f666a8351a26920ad0fa112c08e63c2cd2f012e7","sha256":"09b934580039184897f30203ced84c22e6e33c8301beabe8329c84bf5825ff9c","sha512":"c581009a20bcaed1bdaa24d8e04bd3d391c8abb8b85ea626945800bf956f598b050ad862928840613fec4165567e6d4cf1dc36bacec28f3321f662130b7e1695","ssdeep":"768:SicFhXumffD5km8q4CxxAfpbDllGbjA0ohWseD5ji9aW9F1hTZEnB4RDO:lcFh57SCMxbDr6jA0ohWs/FzTZEn6Ry","tlshash":"3ff2f12e2c61deef280340d0484e6f9824dd21fd7b3b9f8b2b5c246b06ae7452e7655d","first_seen":"2025-12-10T23:14:32.376717Z","last_seen":"2026-06-07T19:33:46.764579Z","times_seen":11378,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":242,"dns":10,"connect":25,"send":0,"wait":18,"receive":8,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gapiauth.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 00:57:27 GMT\r\nexpires: Mon, 08 Mar 2027 00:57:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 237185\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T15:36:04.770514Z","times_seen":181891,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":159,"dns":16,"connect":9,"send":0,"wait":11,"receive":11,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v67/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvbQui-A3tw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/googlesans/v67/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvbQui-A3tw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gapiauth.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 00:03:27 GMT\r\nexpires: Mon, 08 Mar 2027 00:03:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 17:14:54 GMT\r\ncontent-type: font/woff2\r\nage: 240425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36204,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36204, version 1.0","md5":"21a1f432d8fad5b932b54b96c6e5207d","sha1":"f666a8351a26920ad0fa112c08e63c2cd2f012e7","sha256":"09b934580039184897f30203ced84c22e6e33c8301beabe8329c84bf5825ff9c","sha512":"c581009a20bcaed1bdaa24d8e04bd3d391c8abb8b85ea626945800bf956f598b050ad862928840613fec4165567e6d4cf1dc36bacec28f3321f662130b7e1695","ssdeep":"768:SicFhXumffD5km8q4CxxAfpbDllGbjA0ohWseD5ji9aW9F1hTZEnB4RDO:lcFh57SCMxbDr6jA0ohWs/FzTZEn6Ry","tlshash":"3ff2f12e2c61deef280340d0484e6f9824dd21fd7b3b9f8b2b5c246b06ae7452e7655d","first_seen":"2025-12-10T23:14:32.376717Z","last_seen":"2026-06-07T19:33:46.764579Z","times_seen":11378,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":232,"dns":10,"connect":25,"send":0,"wait":15,"receive":4,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gapiauth.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 20:03:02 GMT\r\nexpires: Wed, 03 Mar 2027 20:03:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 600450\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-06-08T14:50:51.013345Z","times_seen":9218,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":233,"dns":0,"connect":22,"send":0,"wait":20,"receive":4,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:wght@400;500\u0026family=Roboto:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Google+Sans:wght@400;500\u0026family=Roboto:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gapiauth.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Mar 2026 18:50:32 GMT\r\ndate: Tue, 10 Mar 2026 18:50:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33076,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"66b7bf5dcececff0edefc7a26d26d5b6","sha1":"91296dd68324760b093d41ff523af4ece83a6606","sha256":"0a2ef05417a847a1b0bd5beda3046bed54322d916b69c2ce87d36d0cd96509de","sha512":"d6132f502788ff6c6fe5e2ec8cf115fa2b613dd04c29bfae75016bd4ea7c90b7bc052f47037bd47ca28ad2b6d16168ae48b4f582c4f4fce6008839cb04d11ff2","ssdeep":"384:fhlOqYopBZHqYDD9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m9q:pwid/yjooYhREHPM5svvYaR7AI8","tlshash":"02e232a100479014bf63acd633ce7e24be5e11652101d17aabfe1b96dcc7c6603b5bae","first_seen":"2026-02-20T12:57:23.744212Z","last_seen":"2026-05-07T09:32:56.287334Z","times_seen":22,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":181,"dns":1,"connect":9,"send":0,"wait":20,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gapiauth.net/css/styles.css","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gapiauth.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 21:33:05 GMT","end":"Wed, 03 Jun 2026 21:33:04 GMT"},"fingerprint":{"sha1":"96:63:A1:B3:B0:1B:B3:7E:34:89:0A:B3:BA:F3:EF:AD:43:02:E3:1C","sha256":"7C:C8:EE:A7:05:DD:D2:95:41:80:E8:72:F9:A4:46:1C:11:8E:CD:21:71:5D:9D:39:C2:A1:0B:36:94:F9:A6:16"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: gapiauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gapiauth.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 18:50:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 22:29:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa03e5-21c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8640,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"75587ca8f9b68d5d03beacd26c4f8e8d","sha1":"ec4fb7ee321eb56b4021505fb24b1efb13b9bbba","sha256":"322ba023684a43cd6ab1cb554b06c493ff85769e40daf4da028766eaeb5b06b5","sha512":"37c9c92bbc3cd553c333a4873d33843c8f972b4a5d386770559a69f08e35fde61f812ff57732cfc33a7865d2a280df0697ea4fd6da888a471d55f3f9abbf7e0a","ssdeep":"192:xEHVVnQ9Hpb02KMQiegK6QTtDxh9+alTonCnzxZTRnuxWeQd5LRulTYR76THld:xIgBIZ4eC","tlshash":"9502dd89db050207b2338eb9b7a28612eb9540538b42d1bd7fd572848ff61689771fec","first_seen":"2026-03-10T18:49:43.743454Z","last_seen":"2026-03-10T19:01:00.554031Z","times_seen":8,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gapiauth.net/js/translations.js","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gapiauth.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 21:33:05 GMT","end":"Wed, 03 Jun 2026 21:33:04 GMT"},"fingerprint":{"sha1":"96:63:A1:B3:B0:1B:B3:7E:34:89:0A:B3:BA:F3:EF:AD:43:02:E3:1C","sha256":"7C:C8:EE:A7:05:DD:D2:95:41:80:E8:72:F9:A4:46:1C:11:8E:CD:21:71:5D:9D:39:C2:A1:0B:36:94:F9:A6:16"}}},"request":{"raw":"GET /js/translations.js HTTP/1.1\r\nHost: gapiauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gapiauth.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 18:50:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 05 Mar 2026 22:29:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa03e5-1913\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6419,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2be12b4d9d818eb9972ccbb35ba92108","sha1":"5cd47d6bfa2a7f555f99b8b19bd9d214f7319d20","sha256":"f29631e54351a8e3389eaee7112cff3f527ee425f7042324bcc12482b4da8076","sha512":"acc9cf739822be4ec64d91b22801803e9d6e3d32236000fccd66e058a037882afcb9a9680c2d05accb1c7ee3c6b7a80eaebd6ad872c3301f87df528a2a5eb222","ssdeep":"96:0ovIXL5gXEQ8nR6fUG7MXigynoZJ5U1alft5BGbU8AqU52jvzKl1KVKvqKu:0QL0QlfQXigkodlAlze1vvqKu","tlshash":"53d120235da860b60270e12df952360df1a903bf6ba6433b327c55682ff1246a5f5bd8","first_seen":"2026-03-10T18:49:43.754016Z","last_seen":"2026-03-10T19:01:00.555671Z","times_seen":8,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gapiauth.net/js/app.js","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gapiauth.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 21:33:05 GMT","end":"Wed, 03 Jun 2026 21:33:04 GMT"},"fingerprint":{"sha1":"96:63:A1:B3:B0:1B:B3:7E:34:89:0A:B3:BA:F3:EF:AD:43:02:E3:1C","sha256":"7C:C8:EE:A7:05:DD:D2:95:41:80:E8:72:F9:A4:46:1C:11:8E:CD:21:71:5D:9D:39:C2:A1:0B:36:94:F9:A6:16"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: gapiauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gapiauth.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 18:50:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 05 Mar 2026 22:29:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa03e5-8c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2240,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"20f9002faffcb2b02978c98034bed170","sha1":"9eaaa969188e35f84571dbbeeb97b2e692c36a60","sha256":"1a8d38b5a815366a194abe2899da5010522f90e5a13c980b6915914296d1d4f3","sha512":"68a51dc1a538ee5da8b311444db823ec22b0981c35583f9635bd3e8288124bae4bf883ac11a33484bb1a7722881692e44a663b4a3074d403523f4bf27fa12260","ssdeep":"","tlshash":"5341a9b7724515358dfa5afab3e06384b98b40232c8092503c6c88064f71d85be76fda","first_seen":"2026-03-10T18:49:43.746319Z","last_seen":"2026-03-10T19:01:00.556237Z","times_seen":8,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gapiauth.net/images/favicon.ico","fqdn":"gapiauth.net","domain":"gapiauth.net","tld":"net"},"ip":{"addr":"79.137.198.222","port":443,"asn":210644,"as":"Aeza International Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gapiauth.net/","date":"2026-03-10T18:50:32.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gapiauth.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 21:33:05 GMT","end":"Wed, 03 Jun 2026 21:33:04 GMT"},"fingerprint":{"sha1":"96:63:A1:B3:B0:1B:B3:7E:34:89:0A:B3:BA:F3:EF:AD:43:02:E3:1C","sha256":"7C:C8:EE:A7:05:DD:D2:95:41:80:E8:72:F9:A4:46:1C:11:8E:CD:21:71:5D:9D:39:C2:A1:0B:36:94:F9:A6:16"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: gapiauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gapiauth.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 18:50:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Mar 2026 22:22:05 GMT\r\netag: W/\"b52-64c4e5dd98268\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-06-08T12:42:36.710919Z","times_seen":6612,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"gapiauth.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}