{"report_id":"0531bd41-2c04-4dff-ae21-6784cec3d62b","version":6,"status":"done","tags":["amazon","phishing"],"date":"2026-03-08T11:51:25Z","url":{"schema":"http","addr":"torvex7.vip","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"torvex7.vip/denyaccess","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"title":"Amazon","dom":{"size":1625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (807)","md5":"93b8f4d505d547d97e8ae8c69c67583a","sha1":"a83cf91a16c7a8d3c21d6a96036e4b6f41c11925","sha256":"3b7f9840fc6aa4e5b3f66792b36457494418191689a3027be300ad040f57899b","sha512":"d147a9642c35355802b1cbd4aeed8e1693a6ade6bb9c6669e22f79be7a60ee43f59b8aced8d993af591a01db3ba33a0d12ba1f71d982c16e577018b755141200","ssdeep":"","tlshash":"4531bc417140407a027377c0f451be35f9c3f70ec605ca64a4e792ea0fe1e66e95d874","dom_hash":"domhashfab2bc1fc4a088c3caed0fcf9dcab227","first_seen":"2026-03-08T11:51:27.22475Z","last_seen":"2026-03-08T12:14:56.550196Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"torvex7.vip","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T11:51:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"torvex7.vip","ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-03-06T23:29:57.479824Z","last_seen":"2026-03-06T23:29:57.479825Z","alert_count":98,"request_count":14,"received_data":367714,"sent_data":6195,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"torvex7.vip/assets/LayoutVer-DoPQvkTi.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"27d368ef1051fdf2dd911943da7b37c5","sha1":"bbdc68099eb1ead2b47098c42e8fbab5fc519554","sha256":"a368c313fe7edb05d83b9cab4434ff9d8f0bb35ba99440770512d126b0462535","sha512":"2d965ee13ec7f48118361a26f5d83e70b48d3d349bdcf628ee6bf93884c95ed8aab8fac11c3cc7030fdc600d465dd061000d1ea6599ad502e35b3530e902e9f9","ssdeep":"","tlshash":"40f02b4e9c02dab6d8f31058e543247572412f89e7348094a1a68565a394a7ee70f724","size":566,"data":"","first_seen":"2026-03-08T10:40:38.512326Z","last_seen":"2026-03-08T12:14:56.552682Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torvex7.vip/assets/index-CAknv80l.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed512a26aa4042db9eac5ef27e0975aa","sha1":"a910cfd3d21362c13974abd5579dd4259755331a","sha256":"d4fce74c61bc68255db697e741846ea7d3dbbb856787e2455439dd14cf2c98c7","sha512":"673ba74216d24c10db55308e9ca9a5e626519c2f755de0e405f47ac0ef9a2c1a610610b912bac7ac851d489fda45ec949b2cba03ecd01d8d79c87a2b41d83f3c","ssdeep":"6144:ERdkd/m7HZC9Ro/4ZG8ox/wl3ZgIfi66Zc5NpsIDO+:ERdkd/m7HZr/4Zf+/wl3ZgIfi66Zc5N7","tlshash":"0d2419e53296b46643ba09e650b70006f73e1a15380dd498f1aceddb3d6394a82b7f7c","size":224599,"data":"","first_seen":"2026-03-08T10:40:38.518588Z","last_seen":"2026-03-08T12:14:56.554461Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torvex7.vip/assets/DenyAccess-Dx6hpHGS.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0975294872c3e1c60a434094875b58df","sha1":"51b1f80e09a8f278063db06c7aada8ae58dbf695","sha256":"a5c28fffdcbd819772739375365432f211ea8e5616df7baf0bf5d46c48bc1cd0","sha512":"fa55f27cd3c3678b307e316fe67d86f58096142b97d3d358ffd4b874fb2d2625ac73a1348514d34df61da6bc47fc981453f8dfc668b2bbd83990a837ed461f9f","ssdeep":"","tlshash":"ef110e4a7e0180f3d13678c4e14aa1f0a62d779b7350c76ea0f085046ee4aa9419ea74","size":1011,"data":"","first_seen":"2026-03-08T10:40:38.517795Z","last_seen":"2026-03-08T12:14:56.551463Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"torvex7.vip/","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T11:51:01.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:01 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 07 Mar 2026 19:39:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ac7ef5-1c0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":448,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"d422ecabe38c499c745612977891d9ee","sha1":"da4243fde00fc1797f984060f05dbec53e44d2dd","sha256":"ba124bb34e6a848c40a14302eda7f90819b0c469f97ac12ea12b5b2557f7daad","sha512":"7d50115d9d651899dd61b8e9b0cd4727a97d34905d7670bffd694883b79b7e663a0b87b1aeea50e4979d5bc43f31e8eb48a3dbd55b3239a54aed42381f086d4c","ssdeep":"","tlshash":"e7f0558244c04c2e02701358aca0f15dedebaa464386be4135e6617f2fa1b4acedf4a8","first_seen":"2026-03-08T10:40:38.515119Z","last_seen":"2026-03-08T12:14:56.556406Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":475,"dns":75,"connect":196,"send":0,"wait":196,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/DenyAccess-Dx6hpHGS.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:10.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/DenyAccess-Dx6hpHGS.js HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://torvex7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:11 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1011\r\nLast-Modified: Sat, 07 Mar 2026 19:39:14 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee2-3f3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1010)","md5":"0975294872c3e1c60a434094875b58df","sha1":"51b1f80e09a8f278063db06c7aada8ae58dbf695","sha256":"a5c28fffdcbd819772739375365432f211ea8e5616df7baf0bf5d46c48bc1cd0","sha512":"fa55f27cd3c3678b307e316fe67d86f58096142b97d3d358ffd4b874fb2d2625ac73a1348514d34df61da6bc47fc981453f8dfc668b2bbd83990a837ed461f9f","ssdeep":"","tlshash":"ef110e4a7e0180f3d13678c4e14aa1f0a62d779b7350c76ea0f085046ee4aa9419ea74","first_seen":"2026-03-08T10:40:38.517795Z","last_seen":"2026-03-08T12:14:56.551463Z","times_seen":3,"resource_available":true,"data":null}},"time_used":981,"timings":{"blocked":393,"dns":0,"connect":194,"send":0,"wait":194,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/LayoutVer-DoPQvkTi.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:11.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/LayoutVer-DoPQvkTi.js HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/assets/DenyAccess-Dx6hpHGS.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:11 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 566\r\nLast-Modified: Sat, 07 Mar 2026 19:39:21 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee9-236\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (565)","md5":"27d368ef1051fdf2dd911943da7b37c5","sha1":"bbdc68099eb1ead2b47098c42e8fbab5fc519554","sha256":"a368c313fe7edb05d83b9cab4434ff9d8f0bb35ba99440770512d126b0462535","sha512":"2d965ee13ec7f48118361a26f5d83e70b48d3d349bdcf628ee6bf93884c95ed8aab8fac11c3cc7030fdc600d465dd061000d1ea6599ad502e35b3530e902e9f9","ssdeep":"","tlshash":"40f02b4e9c02dab6d8f31058e543247572412f89e7348094a1a68565a394a7ee70f724","first_seen":"2026-03-08T10:40:38.512326Z","last_seen":"2026-03-08T12:14:56.552682Z","times_seen":3,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/sorry-CvdoSXVC.png","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:11.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/sorry-CvdoSXVC.png HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/denyaccess\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 8436\r\nLast-Modified: Sat, 07 Mar 2026 19:39:27 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7eef-20f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8436,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 500x97, components 3","md5":"410ebcdf17bfb466473d821b21f6fcfd","sha1":"82c27f1b512f3301847059bb81d6b4dc5e350f1c","sha256":"3e53c3108b083f370d0c7f923cdd4b92fdfaf153952e4b1712265c450ec2cddb","sha512":"340edcb65f6838a2ebca5e5691ba80426ded79451929b0d0b3cb67105775eb970a8d97d9e70ed297a5cedfa5829dad9e29283511e43bc66c722380865fbfe393","ssdeep":"192:Gs1hMHyfxMRLQBkM/SIEYmSqSQquY1FZudQtJmeCBYHBhadtL:JvtuLQBklZoPQqRnCAB+YgL","tlshash":"83024b079e081181f5588bf9fd425e99ffac6b5cea711bff78500e967d008c24d1ba26","first_seen":"2026-03-06T23:30:01.442624Z","last_seen":"2026-07-19T15:20:57.84018Z","times_seen":11,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/default-DRMGcFKM.png","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:11.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/default-DRMGcFKM.png HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/assets/index-DuS0UGlK.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 50024\r\nLast-Modified: Sat, 07 Mar 2026 19:39:13 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee1-c368\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 550 x 1000, 8-bit colormap, non-interlaced","md5":"5f9423c4a4231f97b5950be36c7c9651","sha1":"7c37383cae6925ab399a75b70d5b340b5dfcbc32","sha256":"3ba521f8d12f808d776b8368ec624d5525a62e90e921aeef3fd57e807ed53186","sha512":"b9d3dcfe72c8347d781e2a9d045e5def70502def5ccdb29ce82e42be9a150be9a59ff8484f7fd3dcd1b0916d3c61dfc28c132e1d90ee826d5a58d642effb2266","ssdeep":"1536:RWQjElPuj4gyhtvmuIL6a2thsDyQOl2+W:RdYmj4xtyOaTDyl3W","tlshash":"5e23f182b53b74e4274231581e34bb9bc18b9f2829298b0519ad7025b6bd87c23cd7f3","first_seen":"2026-03-06T23:30:01.438037Z","last_seen":"2026-05-24T17:56:45.263575Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3508,"timings":{"blocked":634,"dns":1,"connect":195,"send":0,"wait":778,"receive":1452,"ssl":445},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/index-DuS0UGlK.css","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:02.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/index-DuS0UGlK.css HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:02 GMT\r\nContent-Type: text/css\r\nContent-Length: 25915\r\nLast-Modified: Sat, 07 Mar 2026 19:39:18 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee6-653b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25914)","md5":"ba32591c948a2b4423b6f74ed37f594a","sha1":"9835a0ff0a465853d73e010c3979b3841eca2465","sha256":"cb259b00238d05dc365d45b55150e78c4159d2f51720acc145ccacc7c55ee095","sha512":"bdea3390a7b503f4541c8d7ae43343820f97782155f0a9e674a75d338ba35e37fc7c3354141aea4ab1d756e810de2098e030881ef1ddd87343a99ff2b61b8c55","ssdeep":"384:Jqia22iqepvKKHwjGIKg2wa4uIZ8qh5VB4wP8rGtK:Jqia22iqepvKKHw38qEGtK","tlshash":"dec28fb270b3b015e13b8e2371542e2c382ed7957677cb56d7076ae8c1d81972a20f6e","first_seen":"2026-03-06T23:30:01.43906Z","last_seen":"2026-04-28T13:59:23.221302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2400,"timings":{"blocked":399,"dns":1,"connect":198,"send":0,"wait":401,"receive":1198,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/icon_fav.ico","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:12.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /icon_fav.ico HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/denyaccess\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:12 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 17542\r\nLast-Modified: Sat, 07 Mar 2026 19:39:03 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ed7-4486\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17542,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ca6619b86c2f6e6068b69ba3aaddb7e4","sha1":"c44a1bb9d14385334eb851fbb0afb19d961c1ee7","sha256":"17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09","sha512":"30f8f8618bfbcd57925411e6860a10b6ad9a60f2a6b08d35c870ea3f4cec4692596a937ff1457ceff5847d5da2b86ceba0200706625e28c56a2455e6a8c121d3","ssdeep":"192:9dLhJ6/f2dh+xQLeZ10TLwhwOHae6nmErcglsIZS3F:3jaOdhQQu0TLwaOHEr6IZ","tlshash":"ae72f191ad68c084c37ef432dd69deab66467de2b6c26c071fb53f86f23821e7901106","first_seen":"2023-04-17T01:45:41Z","last_seen":"2026-08-08T16:10:59.603072Z","times_seen":19459,"resource_available":false,"data":null}},"time_used":4206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3602,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/favicon.ico","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:03.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:04 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 07 Mar 2026 19:39:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ac7ef5-1c0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":448,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"d422ecabe38c499c745612977891d9ee","sha1":"da4243fde00fc1797f984060f05dbec53e44d2dd","sha256":"ba124bb34e6a848c40a14302eda7f90819b0c469f97ac12ea12b5b2557f7daad","sha512":"7d50115d9d651899dd61b8e9b0cd4727a97d34905d7670bffd694883b79b7e663a0b87b1aeea50e4979d5bc43f31e8eb48a3dbd55b3239a54aed42381f086d4c","ssdeep":"","tlshash":"e7f0558244c04c2e02701358aca0f15dedebaa464386be4135e6617f2fa1b4acedf4a8","first_seen":"2026-03-08T10:40:38.515119Z","last_seen":"2026-03-08T12:14:56.556406Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":202,"dns":0,"connect":197,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/DenyAccess-lD0eO2WL.css","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:10.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/DenyAccess-lD0eO2WL.css HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:10 GMT\r\nContent-Type: text/css\r\nContent-Length: 559\r\nLast-Modified: Sat, 07 Mar 2026 19:39:15 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee3-22f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (558)","md5":"c0971d17579db9d6837a5467511aba71","sha1":"4036f6f06ad33f94219880a4f0f356f02ec107b1","sha256":"57cfb190cb0d0af94de5d6c286dacd5447122320e74b2b584d27d72b42f6fef4","sha512":"ba6ea99ba1e1f5a1684ad335f65b73bfdf50859e9a676ae4977c468bacc23b9d4d2f6a050039bdce6120f5526e8b6f12ac48f88ce522352a3bbf94e380665e91","ssdeep":"","tlshash":"80f0a4557298d128e03367076181372c730bf923c3518e99abc751624a9745b73b86c8","first_seen":"2026-03-06T23:30:01.443559Z","last_seen":"2026-03-08T12:14:56.55211Z","times_seen":4,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/89._TTD_-BVanH3MQ.jpg","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:11.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/89._TTD_-BVanH3MQ.jpg HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/denyaccess\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 32663\r\nLast-Modified: Sat, 07 Mar 2026 19:39:05 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ed9-7f97\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32663,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 579x430, components 3","md5":"2e115b750b5799e912ba1eb50556067e","sha1":"45d29dfd18eb5077d45a6db228e2a64e89d1262d","sha256":"8d31efebdbb48826e868a1b3c3701c1ccfc599554c70318e85a1766afce18419","sha512":"6a8c4866b85912d01fb187f111d703e906de8fa2ef522923a643338b695b89d738d43cfafd8fc5d3e2adef02dc07b761deee38fa4ddf2306204146f20cfa3a5b","ssdeep":"768:0Cm1t7Kw2zal0TsXaJb0jbiGQea2Nof7VS:it7PTlcI9jbiGQeBNof7E","tlshash":"32e2e0a7f3129620d46f17ae3f5da909408acef4a072e5b9740f4fcafbf625b4188454","first_seen":"2023-09-20T19:55:59Z","last_seen":"2026-03-08T12:14:56.557466Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":791,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/index-CAknv80l.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:02.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/index-CAknv80l.js HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:02 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 224599\r\nLast-Modified: Sat, 07 Mar 2026 19:39:18 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee6-36d57\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224599,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42601)","md5":"ed512a26aa4042db9eac5ef27e0975aa","sha1":"a910cfd3d21362c13974abd5579dd4259755331a","sha256":"d4fce74c61bc68255db697e741846ea7d3dbbb856787e2455439dd14cf2c98c7","sha512":"673ba74216d24c10db55308e9ca9a5e626519c2f755de0e405f47ac0ef9a2c1a610610b912bac7ac851d489fda45ec949b2cba03ecd01d8d79c87a2b41d83f3c","ssdeep":"6144:ERdkd/m7HZC9Ro/4ZG8ox/wl3ZgIfi66Zc5NpsIDO+:ERdkd/m7HZr/4Zf+/wl3ZgIfi66Zc5N7","tlshash":"0d2419e53296b46643ba09e650b70006f73e1a15380dd498f1aceddb3d6394a82b7f7c","first_seen":"2026-03-08T10:40:38.518588Z","last_seen":"2026-03-08T12:14:56.554461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":7583,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/LayoutVer-CybT_btC.css","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:10.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/LayoutVer-CybT_btC.css HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:10 GMT\r\nContent-Type: text/css\r\nContent-Length: 485\r\nLast-Modified: Sat, 07 Mar 2026 19:39:20 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee8-1e5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (484)","md5":"7029a8b9252fa12f56fdb5e29641d876","sha1":"1b7fcf34c98d0912383706609a660357b65124e6","sha256":"e2dcdcca51521ce4bedc37d6f308979a2e1f925502bc36f05d8274968e1aa8af","sha512":"48e51b22580ef44aa45ce62d32bfb661e15115fe2247054decf1925dddb537ba7700c939a85becd133a71aab2d64975f08db70c1c2ec6e88e14b55e820662f89","ssdeep":"","tlshash":"f3f027219a1a656cecbbb009d482aebc7392a107dd230a54df1a757f85960c6723c398","first_seen":"2026-03-06T23:30:01.434824Z","last_seen":"2026-03-08T12:14:56.555454Z","times_seen":4,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/LayoutVer-DoPQvkTi.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:10.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/LayoutVer-DoPQvkTi.js HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://torvex7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:11 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 566\r\nLast-Modified: Sat, 07 Mar 2026 19:39:21 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee9-236\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (565)","md5":"27d368ef1051fdf2dd911943da7b37c5","sha1":"bbdc68099eb1ead2b47098c42e8fbab5fc519554","sha256":"a368c313fe7edb05d83b9cab4434ff9d8f0bb35ba99440770512d126b0462535","sha512":"2d965ee13ec7f48118361a26f5d83e70b48d3d349bdcf628ee6bf93884c95ed8aab8fac11c3cc7030fdc600d465dd061000d1ea6599ad502e35b3530e902e9f9","ssdeep":"","tlshash":"40f02b4e9c02dab6d8f31058e543247572412f89e7348094a1a68565a394a7ee70f724","first_seen":"2026-03-08T10:40:38.512326Z","last_seen":"2026-03-08T12:14:56.552682Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1821,"timings":{"blocked":388,"dns":1,"connect":195,"send":0,"wait":1037,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"torvex7.vip/assets/DenyAccess-Dx6hpHGS.js","fqdn":"torvex7.vip","domain":"torvex7.vip","tld":"vip"},"ip":{"addr":"43.110.34.237","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://torvex7.vip/","date":"2026-03-08T11:51:10.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torvex7.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 09:18:45 GMT","end":"Thu, 04 Jun 2026 09:18:44 GMT"},"fingerprint":{"sha1":"B2:C5:92:20:0F:72:16:E8:F0:B0:52:00:70:26:83:14:D0:69:86:88","sha256":"51:12:48:EC:23:FF:2F:8B:3D:4F:89:BA:7C:B6:1F:73:6D:15:70:6A:E3:57:B6:F7:72:E0:67:6C:01:80:6B:D8"}}},"request":{"raw":"GET /assets/DenyAccess-Dx6hpHGS.js HTTP/1.1\r\nHost: torvex7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://torvex7.vip/assets/index-CAknv80l.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 11:51:10 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1011\r\nLast-Modified: Sat, 07 Mar 2026 19:39:14 GMT\r\nConnection: keep-alive\r\nETag: \"69ac7ee2-3f3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1010)","md5":"0975294872c3e1c60a434094875b58df","sha1":"51b1f80e09a8f278063db06c7aada8ae58dbf695","sha256":"a5c28fffdcbd819772739375365432f211ea8e5616df7baf0bf5d46c48bc1cd0","sha512":"fa55f27cd3c3678b307e316fe67d86f58096142b97d3d358ffd4b874fb2d2625ac73a1348514d34df61da6bc47fc981453f8dfc668b2bbd83990a837ed461f9f","ssdeep":"","tlshash":"ef110e4a7e0180f3d13678c4e14aa1f0a62d779b7350c76ea0f085046ee4aa9419ea74","first_seen":"2026-03-08T10:40:38.517795Z","last_seen":"2026-03-08T12:14:56.551463Z","times_seen":3,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"torvex7.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"torvex7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}