{"report_id":"03a14f36-1002-4011-a87f-b2dd5a9341b5","version":6,"status":"done","tags":[],"date":"2026-01-26T05:47:47Z","url":{"schema":"http","addr":"user4966.trustvirtual.org","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"title":"Trust | Your Private Crypto Card","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-07T05:02:37.328836Z","times_seen":1035864,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"user4966.trustvirtual.org","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T05:47:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"id2837.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"id2837.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"id2837.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":4,"received_data":102684,"sent_data":2180,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":13550,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-01-22T00:09:00.530608Z","alert_count":0,"request_count":1,"received_data":762,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"id2837.trustvirtual.org","ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":1,"received_data":1025,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"user4966.trustvirtual.org","ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":96,"request_count":32,"received_data":3793557,"sent_data":15143,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":1,"received_data":201822,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-07T05:07:16.782899Z","times_seen":216502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/app/page-37f369c2edf3950d.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee105a5d2b36aa04f015a02ccfcbb969","sha1":"89df708b20d8d9c58ead34ffa2dc552006988996","sha256":"3198586eed018e27971dd10f2486fe1c4ae3f68f53c23015f0ca6f06ddd1ca76","sha512":"d3723c54606ab039cc9e992a95ae90924c09f11f7eee829a28dd6e575a4a5c2951989c78d53a16789847628b93d7d4c6bed3a649e86c33bc00ad1575a736444e","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urc4:wLHGHq3XAq/","tlshash":"ba422955e494ebfdf92b19c459af504c722aaf84cb0a48f078bd78240b054f57627bcb","size":12823,"data":"","first_seen":"2026-01-24T01:16:32.127185Z","last_seen":"2026-01-27T13:26:58.900257Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b48774e437759df326f39d78dbf586f","sha1":"c32ef9d73e91386342b6c9a3a95ce1bd848abf8f","sha256":"ce9b92a6127c9032b4d18359c01619ceaba6b3ded056d4911e621933cfff8a3e","sha512":"b5df156213267203e907c5657d50e8aa86a39e35d49927dd1791a42d35013347f59127c1c1b0968f7301418ea9f8a7f4b476894b61fdf11d8418af2400db724d","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNS9EFxSyHI/3p1gy61Q:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1c3F2","tlshash":"06f31c014bcd29ba034b6387a849ad5e31a986f9778543f14ded987f10e2dacd13b70e","size":168266,"data":"","first_seen":"2026-01-24T01:16:32.151329Z","last_seen":"2026-02-14T16:42:11.263547Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/app/layout-aa34c25dfd1d596e.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f763e241495d62a08f80be264e425ccd","sha1":"0b6cb0119a883b668abe30af3357759b51643211","sha256":"42e17010cda0ab20c7f6b415f6e2a6819e2ae9e71f5da45cc5d37abc63397b29","sha512":"8e2dbd71f5151c1648e9fbd19a950793103a29d2fae3058370f2cb7e591d6249ee458294eb75d2971d6324b4001aad1cdc0747ba7ee1dfc688e9817bb7e6d135","ssdeep":"192:q3A4n+5ELTiQjTiYdK8xWYUQJ/JcxpfaigAepLIecEEn6gyxyrn86:q3TRTiWTiYdrVUSJcJVVCM","tlshash":"ba22d9d2f281fd68a53909c4d42b491c321a1f61d62f8c60bab9fc9b2195dc8b5b1fcd","size":10547,"data":"","first_seen":"2026-01-24T01:16:32.102954Z","last_seen":"2026-01-27T13:26:58.864005Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325456,"data":"","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","size":695053,"data":"","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48aee6a15db79ea057d4e341c6ed5d91","sha1":"8e753d144d760caea03cf3f4ae7bfa7cff833f24","sha256":"514be39206a8c450e93957489b3dcbdcc3a8ced46c4dbaccb6191fdda399c535","sha512":"caa4394bf7f3414770c005c191d01fd062bc39a75eabb6480d40c463d888f963e7916405ef7fb9e80df5e03dd2c5ba31b8012b40c1581ba30d8ccca4b043a8ed","ssdeep":"","tlshash":"b2d04c88211b4c7156a72a454f6fb604b056621294919b217d1e63485f21e17d754854","size":224,"data":"","first_seen":"2026-01-10T14:02:29.698224Z","last_seen":"2026-08-05T11:33:34.350947Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7190cf3ece46d2caae606396a6a6b964","sha1":"e16fecd6d4084fa331c4ab8178ca275d62b24b68","sha256":"cb9cbdc8761f97e9fdf6aca3fb2067816f0ce329452a0a0629f7761e59a95fa5","sha512":"5e3d867da1ae1332bb698b341d58967983055fa5ca9b5c37a0716da0f1f897a22041ce39333598fe605c0d8ccce36ae8c0e7a3049a58b506616469cc6e859b87","ssdeep":"","tlshash":"4041181f3080f9917df3ce5382360eb2858dd83a51bce27daa4eda2a546453f476c961","size":2256,"data":"","first_seen":"2026-01-24T01:16:32.146083Z","last_seen":"2026-01-27T13:26:58.905501Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42b9b574a43c6c3a4a2d3bb134478fc5","sha1":"a41dc28bbcff59a31e19b0ad7bad8a5251fb47d0","sha256":"cd96434fa65bed8e41d6deef38df916a296fc0ac07d1f63f2d5926ec5ff4fc1b","sha512":"1c0d9e40a7cd0116515ca70420879ea931fa7edf47649a0cb22267f8ab5ec947ddcfc42e5dc9b81cf57650995e12f286670206dc3e15597f0a2d216d19323b29","ssdeep":"","tlshash":"93d0129cd649e8559534445b107f0e19e0ccc96d43d9c4dc73e8cdd7c211d7c0384c82","size":272,"data":"","first_seen":"2026-01-22T00:09:05.874187Z","last_seen":"2026-02-14T16:42:11.28313Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/webpack-7a469e3698d31c88.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f016d999ce949ce7301ad1d357c4110","sha1":"8728ddd1100a480f9251c3197df5bf6d13b27cf4","sha256":"6b7749c269aa52f352619f54be875e5fbbe4b9daa86cbf288b44e665927138b8","sha512":"3e6ab05fdcaf436b8df4fdb803870d0baa61ce4cb03ced51f820143c96318910f80277c34732562b546c2d5e8a2b8e3e0bfc877f01a67df011a143692cdf0853","ssdeep":"","tlshash":"aa71c4a53661eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","size":3587,"data":"","first_seen":"2026-01-22T00:09:05.827041Z","last_seen":"2026-02-20T08:01:05.515813Z","times_seen":784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/342-63e6943cc35b3672.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c4915ea72ad2a7777bdaa63054d8d8","sha1":"ddd352b1b226037b6d850622453b0945ade8c067","sha256":"6401fa77d7ceb2f356051077a51205828a6bb2feb114b31c8e475e7aae355a25","sha512":"a40de6ba94d4a8a2bcf1f5982fc7fae3b5dd6bae13523ccf11cab5798192a4cfc1f21560ae06f0db6e7091b08994da062186800e249ebc7b80dce0e873aab4d4","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+SKQw0ymqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5KQwZyty3VZCRJjVsB","tlshash":"25253a997752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","size":967514,"data":"","first_seen":"2026-01-22T00:09:05.834486Z","last_seen":"2026-01-27T13:26:58.87567Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e002a734b09440cf0ef82b445552315a","sha1":"7c622646f5436ab0b5c1c7f00c1ed102b48f6f1e","sha256":"ffdf9bb067b7d5ee10cc85be0add30b041ce1f73e9a99dde57165b5d215cfe2e","sha512":"f110075a628fede12fa1071915b84bd2671e5d9b8d3d0ecd9156bf5c4d9401467fba58c5876a238b29d1a5d37467ec4ffb1f957f345535c86cda96205e5c31a8","ssdeep":"3072:zMd8of6qiBow0SY//Tr6y1+I6n3/ejL8NYFsZWGQutEhO5fA8cOr:daKGCr/+L8x8vutEw5fTr","tlshash":"2d1428cdb7ca706683a36578503f010bb17a7992f84cc8d0e196d8d42e74aaa1277f7d","size":201173,"data":"","first_seen":"2026-01-26T00:46:39.686408Z","last_seen":"2026-01-26T05:47:55.040843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80b806898652f9cad8edfeea820bf3ce","sha1":"abe539d3fa4e306c8d4f3908bd51772374e5457b","sha256":"b401b632aaed62090522f1ffc778a059c8820347a8db010337bca8c9f48629e8","sha512":"06a28d5398779025471ec438b6b48801eae881e4e5ebf746a53209490dd73ba8a872ddf5cc51f64a0c7dcb7226db6694c3cd6884734e2d57445db80ae79cee00","ssdeep":"96:L2X9ZhddrBGB57mWte7cg1xqzc/xmW4Ytap3EZz9C:6XThdRmsWhgnqzcpm/YtaF","tlshash":"61a1dc6e6409dd4bedad3d69027e9d3a20cd456b42d1eeb8baccce050b4247a37d6dc0","size":5018,"data":"","first_seen":"2026-01-24T12:51:28.206814Z","last_seen":"2026-01-26T05:47:55.087549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8afcb6eddb3445bd548549b72ff844","sha1":"b8d618412912d76e21b58a10804a3c732f2bde4d","sha256":"3d6f3712674ae3b1aed160e028b177d34de2edca1a4b2bf2762581573ef84e4e","sha512":"f0e9109310d17a58e2847f9605f29ff6f5aa18a36c159b3e00418cadcc3dbb04040174169ba3a190df441c8d6418111e8a329e646c02ddff2011a93e2d0f5e57","ssdeep":"","tlshash":"ceb01278e011fea114b620726139f0c6325f504d196410601223a28c02443182703fc0","size":91,"data":"","first_seen":"2025-08-19T15:40:34.902526Z","last_seen":"2026-07-29T11:23:51.506106Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"067dab6ee593961c65e21ea30fa21d07","sha1":"80f6d01b4694eba2af6efe0e08d033cfd2ad2646","sha256":"fa68f9b6e048af728edb6e4dce32cf7fa952f9c11c66d67f4f8f25a67e77ffc1","sha512":"6aae4a1ed05e001bb9005c22a3be287ea23582fc768bdf9d72888f9d3c23885ee7b8a25bd9ce1c003126aa162d7f08f4b5ef2d67807db0c3ba6978494f92f844","ssdeep":"","tlshash":"38c0c090dc02cc1cc3b74f321c3b0c3921ccc5a503054146dcc9cd2819c1b3005b0dc9","size":186,"data":"","first_seen":"2025-07-22T07:14:20.941197Z","last_seen":"2026-08-06T12:32:48.397977Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1253535cb790f5cace01c49c50c930f0","sha1":"8ed2024482011249f794da15ebc4cb3a3807bcb0","sha256":"91e2add6a3a0476be1930af98932fc56cdab46cabeece9c84a45bb8634ad1e36","sha512":"678821cb934a4f02e2adbea846a347417abf37962c1248f49fb0c4a5ff418d9261aad46eec914fa21cbd126693858a9b6799d1a9e9ea6ea67f5a9562820a771a","ssdeep":"","tlshash":"e4f05c9f2c03a05233fa223dc32ba66b3762030324c2d804ba0dc4103fd4a821c829ce","size":597,"data":"","first_seen":"2026-01-22T00:09:05.879788Z","last_seen":"2026-02-03T02:42:27.195815Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/main-app-144ce9e79544f778.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24ba5b4806ffccf6f02b9c37258f32a3","sha1":"cc1017a8385022f0572918cdee92a835a0c7cd58","sha256":"21a7c94e1d78fde18335c02fedec112821d0be1d9cde1cbfbded16270138a88f","sha512":"57d88965092246449946832fd918ff2c987235faff6ef3dc443480a40e71635f6fce1f7bf3947a24825ba715aab0ef8b807460f73d7e956e976c18db162f6f0c","ssdeep":"","tlshash":"f9f0fb5b4f0cf92f5c26ae65fe97ace2245f4175202b4e606901deb13c23b6dd270408","size":569,"data":"","first_seen":"2026-01-24T01:16:32.123963Z","last_seen":"2026-01-27T13:26:58.862787Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/276-23cb3927a726e810.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f2afcee3ef73c99f199090dab19abb2","sha1":"a8633aab599e0fa3c7e8d1b24ac878eb5c738ade","sha256":"4560bb46518a58bed76dc8fe170118d4c623a455d0825ab032865a5a80211f68","sha512":"b6b4a2391256d7ef8e780cd6a6f3c8c3b1d59a0a5fae86ba31b9086480a20e34fd37900ababa267534d61350a06a65a49aae5f73fc3f8f65411fe8b260d50ca0","ssdeep":"1536:05eZ8HFH1pYWmyPvrb8ZMNE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxDt9x0xx:05zFDP30ILfGWfDju8JO","tlshash":"a8a33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","size":107304,"data":"","first_seen":"2026-01-24T01:16:32.109069Z","last_seen":"2026-01-27T13:26:58.888991Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d32f2f7249a03993ae19d14801b1aac","sha1":"382aa428c9dbc271f2779ac4123211d0301521c2","sha256":"1b63cf766747e68985a6f2813ec779a17a0d2a1432b2153df87874c538a11def","sha512":"d51b80591aaa2c041c33ddfc3ccd1f6d617d7ee247e7bdae35b382a0c754385faa3f55663b78f3f2e4250f4ebbe8204a35361b018463e70b6332360345d1e536","ssdeep":"","tlshash":"4b01dd416c7acc26ca26ecb68e7d7cf240cdca4d4b859d7605c0cc8a0672df0aea2f11","size":674,"data":"","first_seen":"2026-01-24T01:16:32.159401Z","last_seen":"2026-02-14T16:42:11.287675Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92e3c29b811c82a9398a1c5cbb11b45b","sha1":"06b9d2c78aa0b354339526441f3ed4d52e7e2eda","sha256":"4a31581ccb05a298032e11db82fb6e0fb3c7af500a71fbcd2b01058d9881de4b","sha512":"0d52863c373a91782be664dc100f3d30bd096272d70ea7415fcdcb130de289a0828a07ba3186a760147c7c37d21c76ca3f5597a1021d5d6db434ad81e90a343a","ssdeep":"","tlshash":"49900470d0410c575133001317fc7501555cd04c04413d401f75544f5451155f715d45","size":46,"data":"","first_seen":"2025-07-22T07:14:20.944135Z","last_seen":"2026-08-06T12:32:48.39996Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173024,"data":"","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/255-dc5f45a243dc3a80.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30fabcea97e444991d6d6208ba42581","sha1":"ee6f0d44cceee3473da95b4cd1daea35ed21e427","sha256":"0ce304948789a2e44b3b9f3493ea62a36ffb4bec8cc6dcd6086a45f51587e5d8","sha512":"1ef36632bb55d1dc6a2a7ae96fdf14d419b65467631b29e6e64a9f8259116b766bcdcff6722eace8a6e270fb1b00aa3b39754e0018d270cc6c4c6656027441f1","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXr7yIzPr6Q04ToTlTx1p7eChTVOocZXxreXRNIrjg/Sz:e79LmA+Hy4r904Aj44RN0E/Sz","tlshash":"61f3dab636d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975645dea1b3faa","size":172818,"data":"","first_seen":"2025-12-29T12:15:56.386555Z","last_seen":"2026-08-01T15:00:23.409382Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/29-24b8452b1e7ad86c.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16f00acf83df4682009294614691a0ba","sha1":"0a295061841fac8c9ffae539f621519b975462fc","sha256":"c64963bfab4e2513573ccfd6964476752a58260777a5c041d174042e175679af","sha512":"3add1f68e2d6fe238ce66c9caccc0350c2625bfe7e17f171d81a1a24433d092694afb9e3922922b51dca1569a692943595a8af3a2041783e6578b8ad8ecd9227","ssdeep":"6144:YclbuCQVUJ1dUNp7zF34OIPkjt02/fS6vI+MYdbPSzJDQTb2RDbt1IRtOj85jz/9:YclZQVU96hf/fuYdbqdQmRDbt1IRtFNj","tlshash":"6be40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","size":659283,"data":"","first_seen":"2026-01-22T00:09:05.829174Z","last_seen":"2026-01-27T13:26:58.898126Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"user4966.trustvirtual.org/","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T05:47:25.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piT3OwWZhGUTO3ifW7UZOKEypcZEZKiYj3lunUTuAxvWBbQJnAbwICrCJ2pxdIvxc6qNrryjt6E0dotCnyIDwMRlfMs1THPlluD9C%2BFUklL7hqDkexp3\"}]}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c3db72b3ca20b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25578,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25555), with no line terminators","md5":"d8ddeeab2fcc2326cca7cfdc2a4f5cf4","sha1":"8ab123dec1d65e6d308bb3cf6203531fe9d6b2f4","sha256":"9cee0bc3c196c8d9416bd858da1fbcc1b38f93675cef61eae8a3b299b701ec93","sha512":"de077f33fd763a43b8de99a40b68719683b7ddb2c30fd9e848a5000fa51af12e3429f15dc1d9bf98922cd598cbb87bdeb3c5225f58d94aa751736e6a0cee0982","ssdeep":"768:yrMsvzOjqJmGnQIIdFwqX7XhXtXhXoXVodIEHXmX1RbtqMH5Bl:KuQnQIIdFwqX7XhXtXhXoXVodtHWFOMF","tlshash":"17b2da37b804f923d6635ed9a17aaf7a20c6c119c65a847877dccb2807d2d75ab32c43","first_seen":"2026-01-24T12:51:28.197385Z","last_seen":"2026-01-26T05:47:55.035781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":41,"dns":19,"connect":1,"send":0,"wait":123,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/intro-image.avif","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/intro-image.avif HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/avif\r\ncontent-length: 159172\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"26dc4-19be3b85320\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4ExpH3dX2TtlIMnRDf6GPZR0E4KX6oYY5kQPe2cwHS4rvkoH2QVbrCyC%2Bkden0H8pkuQwtclmtmHbYp%2Fc5f849SDF7JLPrgov%2B2HDT8fO2L29AceGc5Las%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3db72d6f6c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159172,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"77e3c9b2f057c85598255546be9321cb","sha1":"fd799462adae9dbd39365b167ce15e391d1f0297","sha256":"efc10220b84b9e87313c50326e21df82f1c61ca6287b7a362624b3cdf87b666c","sha512":"f34e2ba69f6fb78c7804d5c5ec736a67f8f78a70436f08dbab887acb7df14359d3d584b46669d5cc56963e7fe795e4666061fd214f4b3836612c77bb1a1abfe8","ssdeep":"3072:3I4OafgtarybFxqcH+wnsTuNxZe2rYoP3u/Ql5d5CGLbCTnsKOfq:1SVZHdnPPzYo2Yl5ddAGq","tlshash":"38f312bad602cf85f993be3c310948b18e83d63a797f03735a8ca47d54b9e6e0d01695","first_seen":"2025-06-21T11:37:37.70886Z","last_seen":"2026-07-31T14:13:47.049742Z","times_seen":855,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/benefit4.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit4.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"16ba-19be3b5e9f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Gp1eIE6un%2FPLgsat2zrVB7qpiRLmgnz%2BcnS6i%2FCrFXnWgMKaH9LQvypI9gzb2ufmKVr0S%2F9J1ty4%2Bmq3d3guY4hUCBCzVRaoYRGOLjMAMI3YE5dbcUElbk%3D\"}]}\r\ncf-ray: 9c3db72d6f7135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e6944c95750e2f20dd0902e8065b2c","sha1":"31540228a6b9ddc6cd4701720fb9b53210cb1e4f","sha256":"018c0cea41d585a7b4190176e7a18128a89e1aee685ab9e763741f376081b995","sha512":"e88c0f52743f841767e457a627248ddba418dab011ad59ef302b67a2da15908c8cc5045112348acd125fbbd83f236d4681fc64f54834d29ba6525718657d2699","ssdeep":"96:y2dqoNJZEMhiFeGnITA2dqoNorYvjfLVOgnXpv5pwYHBrhwYpWUoqZB2n+jOdFRf:hdqY38Z0dqJsj5v5iYZhv1Cr","tlshash":"3ac1c8d57734b9bcf0e70be9df10f9a4304e70761a559388c3a1ca3541969ce992bce0","first_seen":"2024-10-12T13:56:58.696978Z","last_seen":"2026-08-06T11:27:12.916499Z","times_seen":891,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=test HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user4966.trustvirtual.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\nexpires: Mon, 26 Jan 2026 05:47:25 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 26 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 74907\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201173,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4183)","md5":"e002a734b09440cf0ef82b445552315a","sha1":"7c622646f5436ab0b5c1c7f00c1ed102b48f6f1e","sha256":"ffdf9bb067b7d5ee10cc85be0add30b041ce1f73e9a99dde57165b5d215cfe2e","sha512":"f110075a628fede12fa1071915b84bd2671e5d9b8d3d0ecd9156bf5c4d9401467fba58c5876a238b29d1a5d37467ec4ffb1f957f345535c86cda96205e5c31a8","ssdeep":"3072:zMd8of6qiBow0SY//Tr6y1+I6n3/ejL8NYFsZWGQutEhO5fA8cOr:daKGCr/+L8x8vutEw5fTr","tlshash":"2d1428cdb7ca706683a36578503f010bb17a7992f84cc8d0e196d8d42e74aaa1277f7d","first_seen":"2026-01-26T00:46:39.686408Z","last_seen":"2026-01-26T05:47:55.040843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":172,"dns":1,"connect":9,"send":0,"wait":24,"receive":16,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:20:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 232001\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T04:50:01.561416Z","times_seen":37143,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":101,"dns":1,"connect":8,"send":0,"wait":8,"receive":2,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/banner.png","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/banner.png HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 148744\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:29 GMT\r\netag: W/\"24508-19be3b5ec41\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuIEZZ5L3x887r1Q2xPdKSw%2BOj1UiKrSJjDwq8nVj0%2FkfB5hIm0unnvDZXKnbfAkpnD7iZ1nKlnJA8XHPijoRW13LxRgtey9As%2B7XfgDUfxPaVBoRSIdgsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3db72d6f6d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 763 x 518, 8-bit/color RGBA, non-interlaced","md5":"d9b41e719f1a670928067723380d3039","sha1":"548cd5df56cbbe772234630ba82718bc48edeb60","sha256":"49982d38a3213a9e764c67f5376adfd185748f011f149083b1ba4ad643b7bc25","sha512":"49ab26332083cfd498aab0d7fa0cebbf770c02b0092f9d6905018679dc8a5ebe066fa59ee6a4937599a6dfe94ba793e31b1b608b698b01655c3439927f4a2ca9","ssdeep":"3072:tdzqbVITOtA+AIG7IsOIwbTCvdRN/WU3Nu0pU2I1vdFlcD:b0iOm+S7IC+GvlpuCU2I1xq","tlshash":"0be312da4759e35425ade3f23f19dca3e977a8c3d1b336ec525002b07c703a8c8665a6","first_seen":"2026-01-10T14:02:29.67497Z","last_seen":"2026-04-28T13:46:00.709922Z","times_seen":821,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/benefit1.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit1.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"56ff-19be3b85248\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9UvXy1LM1Wxe%2BFORoWAbs2FgbL3Bc7BXy1sA8HTuvep4znUCpuMCmLhFQrovNXzo0EOjdXxZpq7rtlVdJVDEQzM7SS4nXuke0%2F0C2W1wVt%2Ba7CwnhGKAc4%3D\"}]}\r\ncf-ray: 9c3db72d6f6e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1645fe9e4e50c926db510f45d2670378","sha1":"325294dfe8267c63104646d60cdce3e201f6d7a0","sha256":"89f90f697ecb81bc6558e7a4df1abee65c3e45238e818631b14960c55e6b5ab9","sha512":"c569f384e77c296765cd60c630d8ac05d09e006b057e01f1a6940359d9b76cb3c62f613996be763b7fbd365c9496253ac985d1c2777e5977bbacb7e1775ff9f3","ssdeep":"384:jz7cy1KpXqwovhEqTjOyf731s1uhjNo8JNoXuhGYZe9YZ6iSqHmC/k6O+VgaCqG:jz8AVTjOyB3teC/kZ+yH","tlshash":"32a2b7ca6b385dbcf1c74fbadf2479e8200960ba0e2917d4813ea07d1657dcdd61ac94","first_seen":"2023-12-20T05:41:29Z","last_seen":"2026-08-06T11:27:12.922952Z","times_seen":903,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/css/734e034a887ccfbc.css","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/734e034a887ccfbc.css HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-13b8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNifj9q55DVNLGuCYVotjGSJVMVI362VUidUuBW6njX%2BFLTU6jzdVEnYcljiDHhTT%2BdHyIknxUbgPe7K9%2FT5wm066OJhQ6WNDIFDKFaEe0Iztb4xE1QeWRk%3D\"}]}\r\ncf-ray: 9c3db72d6f7535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048), with no line terminators","md5":"ba3bdb50993068ec6da8f4018cffc0f4","sha1":"1350ec59a4fe0067e5effadde1fe480d412963c4","sha256":"612e61f371c1748529f786db52db2576aeb57106751725784014912271ac45bc","sha512":"3fea457273c2c8e523ae5935b56c97099bd2335c109065a9f41f0587519a6444c73240a9b90ce58a60c0ef97b28383fd7efaee0d389d39839a9a2c6b2b866421","ssdeep":"96:KKkZPJrxXZWp2KuoP283LkBRh7rKvQEISPhqLtfiQM3hqn:yPJXsDr7LktXKvK8heop3An","tlshash":"a5a1332361083118b127da51f8a15e9e3228b603d2639a9dff86713fc9c73758775e8d","first_seen":"2026-01-10T14:02:29.659232Z","last_seen":"2026-02-20T08:01:05.530055Z","times_seen":797,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/255-dc5f45a243dc3a80.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/255-dc5f45a243dc3a80.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-2a312\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=myzIy1cQTJveX%2FNJEL9OYNNFd65UIP6izWBue2qBFWCiN%2BvcuNcQ%2F6isQVCmo3Ttm2aGAwTelZE3ufI4JofBqFIHBso%2FzIkqan7Bm36KxuLJEYhjns8OhDE%3D\"}]}\r\ncf-ray: 9c3db72d7f7b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f30fabcea97e444991d6d6208ba42581","sha1":"ee6f0d44cceee3473da95b4cd1daea35ed21e427","sha256":"0ce304948789a2e44b3b9f3493ea62a36ffb4bec8cc6dcd6086a45f51587e5d8","sha512":"1ef36632bb55d1dc6a2a7ae96fdf14d419b65467631b29e6e64a9f8259116b766bcdcff6722eace8a6e270fb1b00aa3b39754e0018d270cc6c4c6656027441f1","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXr7yIzPr6Q04ToTlTx1p7eChTVOocZXxreXRNIrjg/Sz:e79LmA+Hy4r904Aj44RN0E/Sz","tlshash":"61f3dab636d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975645dea1b3faa","first_seen":"2025-12-29T12:15:56.386555Z","last_seen":"2026-08-01T15:00:23.409382Z","times_seen":119,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/main-app-144ce9e79544f778.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/main-app-144ce9e79544f778.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-239\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iT0mc6ajhPRH%2Fe%2FU6CxSFkMzAX9NfkhHQWQFto4yPq9Dv8lUctvUynWI%2BPQ7QoKaiPV6Ezl0ZzhK0fIFcaxNuNuzqUXfufuWddgds1iShonKSHWTOB%2B87To%3D\"}]}\r\ncf-ray: 9c3db72d7f7c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"24ba5b4806ffccf6f02b9c37258f32a3","sha1":"cc1017a8385022f0572918cdee92a835a0c7cd58","sha256":"21a7c94e1d78fde18335c02fedec112821d0be1d9cde1cbfbded16270138a88f","sha512":"57d88965092246449946832fd918ff2c987235faff6ef3dc443480a40e71635f6fce1f7bf3947a24825ba715aab0ef8b807460f73d7e956e976c18db162f6f0c","ssdeep":"","tlshash":"f9f0fb5b4f0cf92f5c26ae65fe97ace2245f4175202b4e606901deb13c23b6dd270408","first_seen":"2026-01-24T01:16:32.123963Z","last_seen":"2026-01-27T13:26:58.862787Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/aaea2bcf-5976f34e031a4e16.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-4f750\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tepxQ185hswqKCEccMZKwaLwvO7iZJMk6zuV3nmSlwrgGH%2FK%2B1v1CP4vbmKtfoHXqwW0AYm5UyJ8H5L%2Bi3GUiCK7h9MTkY6dYNnekpa%2FA2LTl7%2BPLGt06SQ%3D\"}]}\r\ncf-ray: 9c3db72d7f7f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/29-24b8452b1e7ad86c.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/29-24b8452b1e7ad86c.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-a0f53\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pvqg4hnE92nSrua53ygdIf4vJvgyB5viy9m%2BEomYjsjTvCf2LOoRGSvBtWXdWRZCB2X0UhZGDuchsmsArQMdvkKZJkI5EmRwloW218Hx2XiCvkMkJ7oY06M%3D\"}]}\r\ncf-ray: 9c3db72d7f7e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16f00acf83df4682009294614691a0ba","sha1":"0a295061841fac8c9ffae539f621519b975462fc","sha256":"c64963bfab4e2513573ccfd6964476752a58260777a5c041d174042e175679af","sha512":"3add1f68e2d6fe238ce66c9caccc0350c2625bfe7e17f171d81a1a24433d092694afb9e3922922b51dca1569a692943595a8af3a2041783e6578b8ad8ecd9227","ssdeep":"6144:YclbuCQVUJ1dUNp7zF34OIPkjt02/fS6vI+MYdbPSzJDQTb2RDbt1IRtOj85jz/9:YclZQVU96hf/fuYdbqdQmRDbt1IRtFNj","tlshash":"6be40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","first_seen":"2026-01-22T00:09:05.829174Z","last_seen":"2026-01-27T13:26:58.898126Z","times_seen":9,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/favicon.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:26 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYxd57zZ9238smX0lCnTSJndSetFQAAniK0xkuaZsZ3XywXuimlwQ1%2Fv7t8i0hIUGivZlyQiUtFmN5QRLr%2BqGU%2Fzc3Qaw4E8Mn%2FE7tdNugLgyXYYmUbxa3Y%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:07 GMT\r\netag: W/\"2fa-19be3b855ac\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3db733383835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/cta-banner.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/cta-banner.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:05 GMT\r\netag: W/\"280a-19be3b850b0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8aymnNPrJQn3F8uPw%2BXJykrt4yny8Qcz%2FTClL%2BeC1OSMX4c%2FRx9PXUm2isOkc1P1YVwHlw7uxqZTzPK31GeyKEf2KutM8SdX8W0rE%2BP0IyVVXWjT0xGs20%3D\"}]}\r\ncf-ray: 9c3db72d8f8535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94df810c2ed1a1fbb3d89f767b243411","sha1":"fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a","sha256":"1a07b51df7cce62e8d728ca85759d6a735fff8f54144660fc2b7206b9cf194a2","sha512":"231fb23bbe4cd8a1754f265ff7a4af7444cba4c6a3680fdeb7f49520a3822ca8e779e155373305aa192b35fac82a2c08930d1d4396dda2865cb5b191b686644e","ssdeep":"192:KAcdLt0TAR3pxOVpjWjZiO4NgCAtZ6wzvRx:3cdJ0UR3TgjWjZizqZV","tlshash":"8a220dce3b145dbcf93287a6db02b3b9202b49b707e56310ce361a79640195ea93fdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.776945Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user4966.trustvirtual.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 26 Jan 2026 05:47:26 GMT\r\ndate: Mon, 26 Jan 2026 05:47:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47cabbdecadc902ac84a6d9cee4e5644","sha1":"0cf23e67bb68a8701df2523b103c8614255d50c5","sha256":"6cb6c9324cab91ab024247e2e9d10ec371642dde873cf44af4d7eb455ea3a9a9","sha512":"457609607e66e5747a29792df54244a9b3591770466e4b3f7e03336d705ba78ac1d9fb0d7a4885be1c117a6ffc66e1ac0c4f34283850ef79a1b6a1cb75f0a5c1","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:UmkwU+ME02EQJ","tlshash":"0842a9900027e804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-11T15:36:38.535296Z","last_seen":"2026-08-06T05:11:56.950776Z","times_seen":1473,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":146,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/favicon.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:26 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFdOWmTgfWysFdbvXiNHuvs1GQe0g4EDwot2gbx1kw3fkzuRQ93BT2MRdaQeqxLL34oldyxDy2i99%2FNce8ZnmsJ1Qis72KNP15kMGgod%2BXnczFufdxIm6rg%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:07 GMT\r\netag: W/\"2fa-19be3b855ac\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3db733383735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/logo.png","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 5903\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"170f-19be3b5e999\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XqGd1p7H6d32Zx6OSZIpXr1ccpW8nkXaQxX1EX7sl4URkpRDs3Je%2B%2FyZhMUcK6C4Nn1iDHJYQC0jMPTqog3PeG7PzyuzTuRrNfLxbZLYYLE11Zb2LA%2F01Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3db72d5f6a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 80, 8-bit/color RGBA, non-interlaced","md5":"e46d5731a7cc58448e0a45dd21153660","sha1":"647655a2eb69253c3ecaf2c0bb0fc2fb1ed1365f","sha256":"18a1e6c63d170b5a7ab8c36c347dca14238bb0bf428f42353324c439206fc146","sha512":"238ea78c6c1d1c9342d65e64047c8972029ff1b9fc7558b74fd3f8350fb1596d78d412d412e1e15be92ca47f7a151d75a12bda58e53f7cf63aa9a3c2a9c7c9e7","ssdeep":"96:BSxKB/OKn9O2RznPFIHQKa2peCppDAK10drUho06sMze5xhaaHekx1Zr7ccG:BSAtOYJIHM2pemp710pMo06sMzfGx1x4","tlshash":"6ac19fe22a24b7f83c96a379c360593c50dd363228464f2f6a60516df81e8fb875951b","first_seen":"2026-01-10T14:02:29.677703Z","last_seen":"2026-04-28T13:46:00.717468Z","times_seen":816,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/benefit2.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit2.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"29ee-19be3b85404\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jK1B%2FC6dKrrfIZC7ZewcDREyg1tk7L93TS70y5InFFAaEvU4nnRVGeted2lhTi6%2BuDce1G%2FhfI4hCYeFa4uhHxHF9svpLJNP3rUh%2BIG9rVCjcH5IK4b8tus%3D\"}]}\r\ncf-ray: 9c3db72d6f7035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbda6fe9682d63433ce25aec010fb362","sha1":"90e234e481359853e1a3d40644dff49ce20f5934","sha256":"c6a0aa994362014ebe33193d0e9a16ec866d3787a32300c030f47fc45e2f4724","sha512":"a65f2964308672761d0c1d04eb449206231cbb1e9fa220937a89fcdf6f50339c037b42f56a7643d91edc2d7397bd5beef20ba1ef613cd9afa25f2a741b9d7f83","ssdeep":"192:SW2pQeCBWg8geYl7ByksxaThcuDNoMmNquwn6J9c3D32WMVwnNNqRSB:+oPsYVPZDmY2kju4Y8B","tlshash":"4122c7caf32869fdf6d34f59db1072b4260a303a0e66536c813d8d3c1a8560ee51fd90","first_seen":"2024-10-12T13:56:58.711689Z","last_seen":"2026-08-06T11:27:12.8992Z","times_seen":921,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-2a3e0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaYn6fnDMvXArQBTdXw0hWpxDYSXDftgT5GQcSv%2BLABxJxhVwoM4rJRwvS4PdMBOLks0Je396ftLutqyoLNFc1dlTvSGHjaK3XZseYRQN1cgXApF9n7NTa8%3D\"}]}\r\ncf-ray: 9c3db72d7f7a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/app/page-37f369c2edf3950d.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/app/page-37f369c2edf3950d.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-3217\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dfn8FEIiK%2BVq6nJBls9F8JNharLAp%2FY4R6Ftc4qgIeE7jrkgG0Z%2BM7FMlrsgLftfW4N2Wlrz0P2OxyP%2Bpp9Ux8qCmdMe4Z1mYgbKO5caQId7O%2Byh4mg5fc4%3D\"}]}\r\ncf-ray: 9c3db72d8f8435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12823,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12786), with no line terminators","md5":"ee105a5d2b36aa04f015a02ccfcbb969","sha1":"89df708b20d8d9c58ead34ffa2dc552006988996","sha256":"3198586eed018e27971dd10f2486fe1c4ae3f68f53c23015f0ca6f06ddd1ca76","sha512":"d3723c54606ab039cc9e992a95ae90924c09f11f7eee829a28dd6e575a4a5c2951989c78d53a16789847628b93d7d4c6bed3a649e86c33bc00ad1575a736444e","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urc4:wLHGHq3XAq/","tlshash":"ba422955e494ebfdf92b19c459af504c722aaf84cb0a48f078bd78240b054f57627bcb","first_seen":"2026-01-24T01:16:32.127185Z","last_seen":"2026-01-27T13:26:58.900257Z","times_seen":6,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/css/4fbad9deea1ef1fa.css","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/4fbad9deea1ef1fa.css HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-411b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DRjYClfekivfZqepIogU2uWbZivzRC%2FhMjIMuBuXvlsgL4DgXE%2FU5DOT0bcaZRMfcRrLbx%2FAhjGQ0UbUKByw6vZhT8tJaAtUqbQrP4lp5D7Xd%2BDC5CO2eA%3D\"}]}\r\ncf-ray: 9c3db72d6f7435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16667), with no line terminators","md5":"2d0a2143aac6f815b607554ca2564f79","sha1":"c3ff9f22d08bdda8afa7233200826c212a187e31","sha256":"d53f0e2f90709acdbe6d9020caf805ad64e93dc1f0f63ce044b9b0f9cbef5408","sha512":"1112a55842c9d516c75b69c6ec0e60cbfb09a9209b33a5a78e27d376e4fd1dbda7a846b81e4fbea3ccebd1b1c26bb7f2a26765a13247663fdc7c63d77eec6d44","ssdeep":"192:k0c9Jo5X5lWQ9lTIIH2XqMskR/KKaad6P6bHRMosDgfr5sKC/Yp6zSaBsYh:ke5nIIwQhVDQ5Tol","tlshash":"7f7242319599113df01bdac3b4c2aece7158c903f1a70abeabd921afcec15da4635349","first_seen":"2026-01-10T14:02:29.686104Z","last_seen":"2026-02-19T05:47:37.1221Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/550ed063-ff1761c4cedc8066.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-a9b0d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Bhy9ocEnyWL0JMF9YYveb9aR8XhjBpnlQOaMpQYDZCjB4l%2FE%2Bll8ICwcUx5pQinouZAl9%2FIGMw0Eim21sGhrdcO0EpdhUBeivTOeLdOncNmTpuBJYgTwD4%3D\"}]}\r\ncf-ray: 9c3db72d7f7d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:20:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 232001\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T04:50:01.561416Z","times_seen":37143,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":84,"dns":1,"connect":8,"send":0,"wait":10,"receive":8,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:20:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 232001\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T04:50:01.561416Z","times_seen":37143,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":69,"dns":1,"connect":21,"send":0,"wait":16,"receive":3,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:20:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 232001\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T04:50:01.561416Z","times_seen":37143,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":68,"dns":1,"connect":23,"send":0,"wait":18,"receive":3,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/api/retrieve_config","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"POST /api/retrieve_config HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nContent-Type: application/json\r\nContent-Length: 166\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":166,"data":"{\"action\":\"retrieve_config\",\"domain\":\"user4966.trustvirtual.org\",\"user_id\":\"5\",\"message_ts\":1769406446618,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxjRVUxQ5%2BzlbJWs%2BwS7D%2BwU9rCkCFG6GBw2vzowEzuMOV%2Bmd%2FWz9vQAQswtJsBcip4Vco84fJWCh%2FaFo%2BI12lT3ey7tjAxj3BqYv0wENeMjAic7vcPkDu0%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"1f92-1xbuRdKCuVa1WW3cFPBMAiEolGA\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3db733684735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8082,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f5c91518e3d748db45d335272ac917b","sha1":"d716ee45d282b956b5596ddc14f04c0221289460","sha256":"6c725e7d9ba079bdd5fd99ed8257d88cb952420f050583bafca2d3ec479b1c36","sha512":"37333c5758a824764a155ef14a953c6c6540be5aae44ca66b7d16c54b0a7aba307c9b2bebfab74e35d8ec78d83702b441852d5f6c6c8839140fbfb8ce2179a51","ssdeep":"192:ILfJD2qIpqBq0c3jvi+7eLvw5vwhzvwfvwovwlvwKvwsvwUvwZvwCvwmwxvYT:3RpqBq0c3jvi+7eLvw5vwhzvwfvwovwm","tlshash":"0cf1fda2bdddd359c1ecec717c9f6ae204eca35d4e4c8323035a541a4cea9ae6787407","first_seen":"2026-01-26T00:46:39.648548Z","last_seen":"2026-02-19T00:53:21.367647Z","times_seen":22,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/app/layout-aa34c25dfd1d596e.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-aa34c25dfd1d596e.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-2933\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBysliY6ua7gOZZNPbOkI9Wyrz4C%2Bz%2FlihLeCtwlh0grTCfwW5bMgUMW3AFT6AThKsLDEHL%2F8Q9W2CAOq60jjOKbR0xYborOBQb4GMjGiWLDSBolAuZNTaA%3D\"}]}\r\ncf-ray: 9c3db72d8f8335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10547,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10485), with no line terminators","md5":"f763e241495d62a08f80be264e425ccd","sha1":"0b6cb0119a883b668abe30af3357759b51643211","sha256":"42e17010cda0ab20c7f6b415f6e2a6819e2ae9e71f5da45cc5d37abc63397b29","sha512":"8e2dbd71f5151c1648e9fbd19a950793103a29d2fae3058370f2cb7e591d6249ee458294eb75d2971d6324b4001aad1cdc0747ba7ee1dfc688e9817bb7e6d135","ssdeep":"192:q3A4n+5ELTiQjTiYdK8xWYUQJ/JcxpfaigAepLIecEEn6gyxyrn86:q3TRTiWTiYdrVUSJcJVVCM","tlshash":"ba22d9d2f281fd68a53909c4d42b491c321a1f61d62f8c60bab9fc9b2195dc8b5b1fcd","first_seen":"2026-01-24T01:16:32.102954Z","last_seen":"2026-01-27T13:26:58.864005Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/flags/us.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /flags/us.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBN6AkkRxFC0F6IiQyF8OIey7CAUmbeJ%2FoORO9gUf0GdQbIHxTlfKrlLXiW5d9PHzsi6eYQ6t3gYRhVNjmmBZZZOMPCYaDjmSYPq3uDCGIRfRB0%2Bg581YCk%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:07 GMT\r\netag: W/\"288-19be3b85690\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3db72d5f6b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-07T04:19:48.364023Z","times_seen":4354,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/benefit5.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit5.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"2765-19be3b5e979\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXIP3tTT8TLpwirkagujgNCano7jpBlHdK4OM%2BgufCKAz7I7nrDMZbJ51fjJ3YLdcRbt%2BTCiflFDnU16DtRfxNnjZQOX9HHFFfVogss70lgUg%2BhvbKqsPjc%3D\"}]}\r\ncf-ray: 9c3db72d6f7235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83986156dd8df49f40175538d33639af","sha1":"b67eb4b5fea974adb55977c6cfc42c3ce8b224d4","sha256":"be5bc71658387110e1776fe9d3a6eb1936d747edbeccef35bca7ef14719e0f3c","sha512":"819cfecc001cd9353ed5ccc8a0dca9848531bc26b61194581e29bd4b782e293a54dc55698e1ba5cdac29fcc7ceae9f6e4803796990be6fba397b7554266e0237","ssdeep":"96:9bEPGTGbE2GIywkC2nkDKk97uu6wW1J88PVyzXUtt00I/bCsQ5ZnQFZnS11FQqk7:pEPGTYEAGkD1hhWH8WOEq5gMn0+qkQCF","tlshash":"c022c8c677385d7dfa934facdf04b7e4302ea07a565e5398d2268a38114268ef91bcc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.73818Z","times_seen":1202,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/benefit6.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit6.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"1b23-19be3b852e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FqGbkgzB%2FY0UzLx7y236M80un%2B%2FGH71SNBJe95We56liJQPXZADLO%2F12JT5CzhgwBZuvXzlqgr8cnN%2FuLKlVsEv%2Bq73jM6ofM7M359UjOSDZ%2BhI7HTLnzs%3D\"}]}\r\ncf-ray: 9c3db72d6f7335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda874259b72818dd657fdc8e026f343","sha1":"dff7963c2b7cc0a95b65d777bae56e7cf8a762f1","sha256":"00d4932ea31ede39a2d7348985c6dd5416b54e19fda923b866b5fc435e2d6c82","sha512":"3002edc71781a68f7b90c19806eb740e4708436510896f74f7e225fc851f87e111776a99fba399e6b1142862b02713e8c763398668f591267451b2ce5afe5276","ssdeep":"96:ArdFO+fLClvKoyTjtgI95CfDMd/kPpxPL:ArLOIyioAJ95CrM1Ovz","tlshash":"a0e11ece37440cfe7e26079aef2a72b9102255fb2d886200c53b1a79158165ead3fec4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.756999Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/342-63e6943cc35b3672.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/342-63e6943cc35b3672.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-ec35a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lolQQ0HgBHia0oWCYNxMwLIbQrd9lze9PePmIC4w5DlWPd0cdhFp%2Ff4YiJg24bHJmb6MevuveZYvT7Z%2FsmXWcz4Avthea1dCVzC28SCBc%2BHWdL4ZA1ry8X8%3D\"}]}\r\ncf-ray: 9c3db72d7f8035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4c4915ea72ad2a7777bdaa63054d8d8","sha1":"ddd352b1b226037b6d850622453b0945ade8c067","sha256":"6401fa77d7ceb2f356051077a51205828a6bb2feb114b31c8e475e7aae355a25","sha512":"a40de6ba94d4a8a2bcf1f5982fc7fae3b5dd6bae13523ccf11cab5798192a4cfc1f21560ae06f0db6e7091b08994da062186800e249ebc7b80dce0e873aab4d4","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+SKQw0ymqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5KQwZyty3VZCRJjVsB","tlshash":"25253a997752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","first_seen":"2026-01-22T00:09:05.834486Z","last_seen":"2026-01-27T13:26:58.87567Z","times_seen":9,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/159-f9058d3a7fc08582.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-2914a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ty4UO4UUyEOxPU8%2F4ChcsijT7UzZynxXEymFR3kcescmkc0lHvqxglpirqwOqgMfi%2Fy0h0ujjydVGi1JJ89Jwq53uhrNQoMLIF914%2FVLOZufgfdqNtZ6%2B9o%3D\"}]}\r\ncf-ray: 9c3db72d7f8135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55784), with no line terminators","md5":"9b48774e437759df326f39d78dbf586f","sha1":"c32ef9d73e91386342b6c9a3a95ce1bd848abf8f","sha256":"ce9b92a6127c9032b4d18359c01619ceaba6b3ded056d4911e621933cfff8a3e","sha512":"b5df156213267203e907c5657d50e8aa86a39e35d49927dd1791a42d35013347f59127c1c1b0968f7301418ea9f8a7f4b476894b61fdf11d8418af2400db724d","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNS9EFxSyHI/3p1gy61Q:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1c3F2","tlshash":"06f31c014bcd29ba034b6387a849ad5e31a986f9778543f14ded987f10e2dacd13b70e","first_seen":"2026-01-24T01:16:32.151329Z","last_seen":"2026-02-14T16:42:11.263547Z","times_seen":16,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/276-23cb3927a726e810.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/276-23cb3927a726e810.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-1a328\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=birMPHgSKzYpDlhLTCUe6lflOp1qjoZynFQ99FyINzd79aBpKwQ20V42l5UffJJrEcDqdnFUja28SO9xz%2B1DhuUStpjPAnOkVeKJUeUe2r%2FmVK0rMjGcXtE%3D\"}]}\r\ncf-ray: 9c3db72d7f8235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63951), with no line terminators","md5":"7f2afcee3ef73c99f199090dab19abb2","sha1":"a8633aab599e0fa3c7e8d1b24ac878eb5c738ade","sha256":"4560bb46518a58bed76dc8fe170118d4c623a455d0825ab032865a5a80211f68","sha512":"b6b4a2391256d7ef8e780cd6a6f3c8c3b1d59a0a5fae86ba31b9086480a20e34fd37900ababa267534d61350a06a65a49aae5f73fc3f8f65411fe8b260d50ca0","ssdeep":"1536:05eZ8HFH1pYWmyPvrb8ZMNE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxDt9x0xx:05zFDP30ILfGWfDju8JO","tlshash":"a8a33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","first_seen":"2026-01-24T01:16:32.109069Z","last_seen":"2026-01-27T13:26:58.888991Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/api/retrieve_id","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"POST /api/retrieve_id HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nContent-Type: application/json\r\nContent-Length: 163\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":163,"data":"{\"action\":\"retrieve_id\",\"domain\":\"user4966.trustvirtual.org\",\"user_id\":null,\"message_ts\":1769406446320,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOy64E72DjzZjKIbxMY1KoKp356WhN0J8hK9y95SBSGu8DlrJLFj4GzAqsAmShPBU%2FE9HN%2Bg6vnTh%2BwYE5xWZjzvBpI837wPA8p6pe8aHWeTE%2FpdgsFh%2BNg%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"18-aqka6m1PIhhggnuxGuUX94+cuBM\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3db732782935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2fc2768b4719951b21d8d42adf80cc78","sha1":"6aa91aea6d4f221860827bb11ae517f78f9cb813","sha256":"b8b3ea982656c6fc875934a15e0aec730a1a1f3b876f0dcb099559b582e1311e","sha512":"1e4ac4d4f9740bfb39aa8c1b0a3c06ebca7cd284982455cf88ce45b8007ef330c50c2c51c8e2352e9ad73bf9fc90380f550877b1606fa64f15f8d6168baf4f2c","ssdeep":"","tlshash":"ad700000280280220c88088000008020abb03a80002e0080008ea82088802a0a88b820","first_seen":"2025-11-29T10:39:40.314123Z","last_seen":"2026-02-19T00:53:21.376666Z","times_seen":28,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/icons/benefit3.svg","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit3.svg HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"1225-19be3b5e8cd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGVRy6PDJNgQMH3O%2BJt2GvUY3q3DF5mEpCW0Xi2MpwXNGQz2UE9bStjE22nktjzkNJ3gn9vdRS00rsRBGRzUnlaM3ST%2Bss3xg8cjtTK9e3C26qDoOnNT2Es%3D\"}]}\r\ncf-ray: 9c3db72d6f6f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c210d79d224dc0acca1c3beeb029195b","sha1":"75894cf8e5d238f788bd1d0fb258dac88c5b0126","sha256":"d1207a3591df9b2c69e8f08c29200283571c5744774d8e008aa3835957652a58","sha512":"d82594ace6a3cc531d7430a0d55cde548f4273f2ff170b51a93fa1c980baf3cce40bac295cdbfa444827666d7f8276860b854eaa4dd91bcbab07b277be2af6bd","ssdeep":"48:HRryHV/3wZy0xVsTtmv4jb3bU9UN6Zjamv4jbo6H9kMndH9XHO8laGH9XHO8eH9T:HdOAZrVsTsv2brHM1jv2bx1PL09EXud","tlshash":"86a176eafb2c9cbfe82787bccb48e1f5504d61d664c08368c2799f1e51046cb591aec0","first_seen":"2024-12-07T17:47:59.744392Z","last_seen":"2026-08-06T11:27:12.901682Z","times_seen":928,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/css/6e48048022a69e58.css","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/6e48048022a69e58.css HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-510d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbABInO%2BsKxNF6Ec2A3AR7i4L4bZoJbYN65yMt4eHrdar82lkQdeHs43ZzqPYI4Y0VTp4FTxMmF6gNLZSLHV7TjmXAPOJjY5dZFGtCkRMYLV7IMrVjZdKho%3D\"}]}\r\ncf-ray: 9c3db72d6f7835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20749), with no line terminators","md5":"456bb6b0b391ddb448da0fd85f056e07","sha1":"fea7a171b6a892b3b88e4eb5f6e4d0cca980dd2b","sha256":"b82b060e7aad9907b587be5ba86cc635c2b3091363a832f28a12a99b6882401f","sha512":"457e5d5e9fa811a2461244a88f56a01817363dfb250430b717f79c8c91cc9a8c8f91875d58439bca5329066ddc743b74ee63f182757262e3c26fa326e979b878","ssdeep":"192:BwEVP358B9ogLzmh2QaCUjQquMkZ7xrdWMxc7bTgowKpXXXWNMQylG0PlwRR3cQz:Bwg35ZgsHk+dVB1RMedkm","tlshash":"9f92752339001125f12feca4b9d2af99b160f811d29b96fae545b939cacf0970772b0d","first_seen":"2026-01-10T14:02:29.664502Z","last_seen":"2026-02-20T08:01:05.534948Z","times_seen":797,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/chunks/webpack-7a469e3698d31c88.js","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/webpack-7a469e3698d31c88.js HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719803-e03\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YS2BYFmHjZl0A%2BpR2fy5lJGAEod9Xlr%2FfnNmbIEmoKrFlVH5iCGi1GF8omcf0SAoWrNsL0ZWh%2Bo4vYYtqu6UNjUq6lZMyoi2eaunuUH790TMO%2B7TAw1tkIo%3D\"}]}\r\ncf-ray: 9c3db72d6f7935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3587), with no line terminators","md5":"9f016d999ce949ce7301ad1d357c4110","sha1":"8728ddd1100a480f9251c3197df5bf6d13b27cf4","sha256":"6b7749c269aa52f352619f54be875e5fbbe4b9daa86cbf288b44e665927138b8","sha512":"3e6ab05fdcaf436b8df4fdb803870d0baa61ce4cb03ced51f820143c96318910f80277c34732562b546c2d5e8a2b8e3e0bfc877f01a67df011a143692cdf0853","ssdeep":"","tlshash":"aa71c4a53661eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","first_seen":"2026-01-22T00:09:05.827041Z","last_seen":"2026-02-20T08:01:05.515813Z","times_seen":784,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user4966.trustvirtual.org/_next/static/css/ca091db432343524.css","fqdn":"user4966.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:25.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/ca091db432343524.css HTTP/1.1\r\nHost: user4966.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:25 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 26 Jan 2027 00:46:11 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 18073\r\ncf-cache-status: HIT\r\netag: W/\"69719784-1827\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKGb75yOsxORTETgo%2FrXI0MrB3TZ%2FWBAlMH9X9kUyMHVC7Eh%2FcxmBrhyKuLYD9Vo%2Bolv4t8%2Bi3YcGAWX2AbQVbXqaJFQcHZ0bNnxBT0WuryZiH5NTVQ0erM%3D\"}]}\r\ncf-ray: 9c3db72d6f7735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5060)","md5":"b7c8861d6ffeede8605c3e2e798a8953","sha1":"6aef66590704d99e0526d3998171dc4f6ae2b639","sha256":"63c155939d0e7e2367172ae4f2abbe606a8fb5e3287b166d0a88ab697e780988","sha512":"b1926d50f33d920cdd204cd44f6f4696ea10114927e4f79f7877480889ce3dbc03e70e3d3fa14cfefeb4e311110ee944bd85ab38a03d66ec35b3086a188f3d32","ssdeep":"192:n7gqzOi1+WT6RkwwDe/9ERSItcHJLVoWD:8k9SIM","tlshash":"7bd10021f657cebbedc4c8d6fb60351aa60a2194ae7915c2ff43270378db160059ed29","first_seen":"2026-01-22T00:09:05.836619Z","last_seen":"2026-02-20T08:01:05.524623Z","times_seen":796,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"user4966.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"user4966.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:08:03 GMT","end":"Tue, 10 Mar 2026 17:08:02 GMT"},"fingerprint":{"sha1":"73:C7:4E:56:88:E5:CF:72:0E:94:F3:06:6D:8A:AF:FC:88:8A:F9:CD","sha256":"B6:54:2C:1C:36:F9:45:9B:A3:52:B9:CE:D7:F8:5D:38:C1:E3:7D:B8:C4:02:10:DD:4F:FE:6B:9C:3B:ED:4F:2A"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://user4966.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user4966.trustvirtual.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 26 Jan 2026 05:47:26 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://user4966.trustvirtual.org\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-40\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6977e288c9405d0821e4b253c4f597fa","sha1":"601eaa76fabd6a36221df8ff3ab7cb8af6aa219e","sha256":"f47ab4a4bc8e8edf2d2ad477baf54843f83aaf3d03761b3f4178a3b0adad1056","sha512":"d2e62d5d81eaba01120c4ed904d3f06d0fa6ea00c2ca2ed6c9c563aaf8644b7dd83c8b2cab92dc832cf40a923f230a385c13b19fae5867224750333f3aaba01f","ssdeep":"","tlshash":"00c02b04ccdca07803425d532cc0f2f1e0484130c7800000d0104d1cecc419d08ef651","first_seen":"2026-01-26T05:47:55.081262Z","last_seen":"2026-01-26T05:47:55.081262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":73,"dns":5,"connect":18,"send":0,"wait":36,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id2837.trustvirtual.org/wc-bridge","fqdn":"id2837.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://user4966.trustvirtual.org/","date":"2026-01-26T05:47:26.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /wc-bridge HTTP/1.1\r\nHost: id2837.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user4966.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:47:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPQV8yg2Ye9eR2GEC7Q67w%2BuxlYWpiagstUc4h%2Bv%2FU3b8rNz8NqomULAGnV6vPgRjZmbXiYNoBmIHgSvpBbmEtCREp9uhj6bR7Uf1G9cnORGLGmAspJ7\"}]}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors https://trustvirtual.org\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c3db732b83335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T05:07:07.342121Z","times_seen":17756185,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"id2837.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"id2837.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"id2837.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}