{"report_id":"f5dff59a-0823-47ea-879d-118dff6d6ec1","version":0,"status":"done","tags":[],"date":"2026-07-22T10:13:52Z","url":{"schema":"http","addr":"fiwgod.fun","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"fiwgod.fun/","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"title":"$FIW — [ CLASSIFIED ]","dom":{"size":28440,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"0e38d04d15eb2ce235773cd52f26b47f","sha1":"9a38cdefc22d052ca028b383c3793eeca67f8ac0","sha256":"d24c83bf4df259cc5040190b3ca6c0019072a094008de3bf85cb9699378f554f","sha512":"51443217e3c696e2c898a79330039a2162e5553c049ac8897dccdf1c14dc1042c8af514364c04fb3bae96817f3ab6e97e459ce1bbc646e658146282b7ffc8e3c","ssdeep":"768:XlU0zAyzq+L0kWTrPakfW0j92qrdDhzd9zh:XlUmP0j9LBhzt","tlshash":"14d2c562e2e150367077e9d6a1afa35f7190d017c8474195badc829c8fcfde27aa234c","dom_hash":"domhash9d1474c8e6607f5ee1f66bd703deaeb5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fiwgod.fun","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:13:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"fiwgod.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fiwgod.fun","ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-22T10:11:24.303119Z","last_seen":"2026-07-22T10:11:24.303119Z","alert_count":4,"request_count":4,"received_data":263145,"sent_data":1918,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fiwgod.fun/","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcc1070c64957f9cdb52d63555d02863","sha1":"fdb201fa3ae43cbd42013edd186b9aa0f9fb8fae","sha256":"bb6daa086e2f303d7a6eb604f2b87545de5a65976e530e0dd20a3f2613cc49c7","sha512":"1e7253cc84ff6cbe5a55b952847cb35b938351dfb3b05abf2740ec7093879bd8b1093a6d152e50b84bd606d18066334abc0bbca8e47946cf0c1f2070d876ac60","ssdeep":"","tlshash":"1c411ee77679183504fba27f32bba7a9347100137807c848bfad98499f51ec464bb6c8","size":2197,"data":"","first_seen":"2026-07-22T10:11:30.515346Z","last_seen":"2026-07-22T10:13:53.399701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fiwgod.fun/fiwdog.png","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fiwgod.fun/","date":"2026-07-22T10:13:24.636Z","timestamp":1784715204636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fiwgod.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 12:39:15 GMT","end":"Sun, 04 Oct 2026 12:39:14 GMT"},"fingerprint":{"sha1":"4A:B7:62:59:17:DB:47:B0:E6:AD:67:0D:C8:F8:E8:6C:3F:B0:C3:AC","sha256":"FB:6E:73:15:6A:5E:A1:7E:DF:98:9F:83:08:92:E5:93:79:47:09:64:B2:AE:06:0F:E2:7D:35:8B:B2:C7:27:5C"}}},"request":{"raw":"GET /fiwdog.png HTTP/1.1\r\nHost: fiwgod.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fiwgod.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:13:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 227323\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Mon, 06 Jul 2026 13:49:00 GMT\r\nETag: W/\"377fb-19f37b07b00\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227323,"size_decoded":227749,"mime_type":"image/png","magic":"PNG image data, 669 x 535, 8-bit/color RGBA, non-interlaced","md5":"2f02b2197dd784f5896424d110c85d00","sha1":"ddbb0b2fb3d44b4e1e307c0434b8931f05b1a78d","sha256":"854d14543485f9115c7962afa8b7388d3920b7c106e0f0f0c996fd09b44be8f3","sha512":"ff389cdacb308c1447f5d92af8b12de7918790840250ceda0df006ad11ebf788568fed31b17c5d4f3b5a97cd66a689d71b6437782476502a6d1785c9593de6d8","ssdeep":"6144:8TbckJK93/v2ueOGFUL5+IOoqvtTDnBQl:XoK9v+ueOGalZqNGl","tlshash":"ff241308cf533a1e129af2e26463507c6cb1f44ec694264d2596a6f5fb3c374788bc79","first_seen":"2026-07-22T10:11:30.5031Z","last_seen":"2026-07-22T10:13:53.397362Z","times_seen":2,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"fiwgod.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fiwgod.fun/api/gallery?offset=0\u0026limit=18","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fiwgod.fun/","date":"2026-07-22T10:13:24.638Z","timestamp":1784715204638,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fiwgod.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 12:39:15 GMT","end":"Sun, 04 Oct 2026 12:39:14 GMT"},"fingerprint":{"sha1":"4A:B7:62:59:17:DB:47:B0:E6:AD:67:0D:C8:F8:E8:6C:3F:B0:C3:AC","sha256":"FB:6E:73:15:6A:5E:A1:7E:DF:98:9F:83:08:92:E5:93:79:47:09:64:B2:AE:06:0F:E2:7D:35:8B:B2:C7:27:5C"}}},"request":{"raw":"GET /api/gallery?offset=0\u0026limit=18 HTTP/1.1\r\nHost: fiwgod.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fiwgod.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:13:24 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 311\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"137-SMlPh+nGtL+FXP5RpJyGNUToefE\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":311,"size_decoded":668,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f8daf0d5e17bb96b4aa8182867dde43b","sha1":"48c94f87e9c6b4bf855cfe51a49c863544e879f1","sha256":"96eb324186eacb952bdfda2122dbf94a91df04c1ea9408f54d7d3779e104b378","sha512":"d52433eaec9e22d70d6b344d5b4edf491becfdbd16f853fb12d555427344ab377a1fdc849bee55078b815745a0abfb965baa13d46b6828a4aacec22768851c58","ssdeep":"","tlshash":"abe0c2b4e82805df4e08a99c4313bdfec2c371b3aa79502cb80a1e3f868f11f018a084","first_seen":"2026-07-22T10:11:30.506256Z","last_seen":"2026-07-22T10:13:53.398021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":97,"send":0,"wait":101,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"fiwgod.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fiwgod.fun/favicon.png","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fiwgod.fun/","date":"2026-07-22T10:13:24.891Z","timestamp":1784715204891,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fiwgod.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 12:39:15 GMT","end":"Sun, 04 Oct 2026 12:39:14 GMT"},"fingerprint":{"sha1":"4A:B7:62:59:17:DB:47:B0:E6:AD:67:0D:C8:F8:E8:6C:3F:B0:C3:AC","sha256":"FB:6E:73:15:6A:5E:A1:7E:DF:98:9F:83:08:92:E5:93:79:47:09:64:B2:AE:06:0F:E2:7D:35:8B:B2:C7:27:5C"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: fiwgod.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fiwgod.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:13:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 5912\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Mon, 06 Jul 2026 13:49:00 GMT\r\nETag: W/\"1718-19f37b07b36\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5912,"size_decoded":6335,"mime_type":"image/png","magic":"PNG image data, 64 x 51, 8-bit/color RGBA, non-interlaced","md5":"56cf79d0c94e39c41d180c119535f3cb","sha1":"8fbc6009d6d11c657c2d89101f116855eacf86c4","sha256":"6a6b8bcc25e6f392b9e4591836932b5b8353ad3667ea8ee7b220b32ac2226219","sha512":"85225c6156c27aa7beb9908d6ec41499d12cce01d82f50111c8754ec1ce891eddbea482c9d53075a5494933b9e5cec8131bc91daa2c7565d654587177e167bdb","ssdeep":"96:7LgLDTWdxbRhjdQUlWJbm4wIpywTxvVPGDh30IV/bRxmcFZW/1BfMw2WriA6i2a:7L+W3VhZYJbXykxwttV/bRwcGzkX+6ha","tlshash":"b1c1ae8d06cec8b4081e666aaa74245d241743c8aee44ee4a43ed634afc13d38bbd980","first_seen":"2026-07-22T10:11:30.509415Z","last_seen":"2026-07-22T10:13:53.398597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":104,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"fiwgod.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fiwgod.fun/","fqdn":"fiwgod.fun","domain":"fiwgod.fun","tld":"fun"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:13:24.107Z","timestamp":1784715204107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fiwgod.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 12:39:15 GMT","end":"Sun, 04 Oct 2026 12:39:14 GMT"},"fingerprint":{"sha1":"4A:B7:62:59:17:DB:47:B0:E6:AD:67:0D:C8:F8:E8:6C:3F:B0:C3:AC","sha256":"FB:6E:73:15:6A:5E:A1:7E:DF:98:9F:83:08:92:E5:93:79:47:09:64:B2:AE:06:0F:E2:7D:35:8B:B2:C7:27:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fiwgod.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:13:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=0\r\nLast-Modified: Mon, 06 Jul 2026 15:01:43 GMT\r\nETag: W/\"6d2b-19f37f30e92\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":27947,"size_decoded":10429,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"46d97af728d9b957e9e77a48f5a142d4","sha1":"286f7ac7ce3295fe72c7456f9b8cd6509a7a83fa","sha256":"106dd56df14300b9c56492ef5ab0f9954dab6e6528c19e02c45f8094d0e96a04","sha512":"6b5e7887ae7726938e15abdda90b230065d02cd2b541a5fa775982e5c7c9c23a370642149e568e14ee28cf8aec159ff1e4c1d488779b30c081f23901342ae8d9","ssdeep":"768:tBU0zAyzq+L0kWTrPaqW0j92qrdehzd9zF:tBUmZ0j9LYhzx","tlshash":"61c2c462e2e150367077e9d6a5aea35f7150d017cc474194baec829c8fcfde27aa234c","first_seen":"2026-07-22T10:11:30.512755Z","last_seen":"2026-07-22T10:13:53.399128Z","times_seen":2,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":0,"dns":3,"connect":98,"send":0,"wait":101,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"fiwgod.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}