{"report_id":"15a5a064-7636-4589-acf6-64f968d548e6","version":0,"status":"done","tags":[],"date":"2026-09-05T14:27:18Z","url":{"schema":"https","addr":"vantageorigins.com/","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vantageorigins.com/","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"title":"Vantage","dom":{"size":82799,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35167)","md5":"049ed5643325692b755e5b6695be97ad","sha1":"48d73601a99a02ac15cd86e0a282d1bddf03f189","sha256":"bdcc44fef827878c02bff2a7f069f3a553d7c895bbbafef911f8af2013ddeacf","sha512":"8387fbbbe6ee5ca98e7dc36066fcc2057356041bdc1a76b8cf91b1cd254d3d96e74b41057a0bd7d0e2175b6421bef41da0d00f08a522646249049230ee1b3a6b","ssdeep":"1536:2ZkQ5v/etjFKaHVlBduxIbaHVdkQNmZ7b/kQPX:iqtjhlBduxZdi7b/h","tlshash":"8e836d303120077723470ae9f65ab3596df6b75fe227c0546bb802a61bcecd0be26765","dom_hash":"domhash4e0cb8559a00fc24831201b43f47c419","first_seen":"2026-09-05T14:27:27.411326Z","last_seen":"2026-09-05T14:27:27.411326Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vantageorigins.com/","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T14:27:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vantageorigins.com","ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":57,"request_count":19,"received_data":7956696,"sent_data":8880,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":3375,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.fontshare.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-10-01","domain_rank":604295,"first_seen":"2021-03-02T20:36:57Z","last_seen":"2026-08-30T07:14:23.690938Z","alert_count":0,"request_count":1,"received_data":8977,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdn.fontshare.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-10-01","domain_rank":681638,"first_seen":"2021-04-12T08:52:39Z","last_seen":"2026-09-03T12:45:31.380533Z","alert_count":0,"request_count":1,"received_data":39381,"sent_data":604,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":29133,"sent_data":569,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vantageorigins.com/assets/index-pFZ6BpU2.js","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b813339cb01b392dc9fef1ecfbf6867f","sha1":"8e6880c7f195a43b5aa87374366bde81d4cc9a83","sha256":"4a7698e5ba4112586d8c2788c58b1e44cf8d0b7e740b84c5801f76d5d9641e09","sha512":"3b84e34f723b0c03eaf9f3602fd57b73ebdc923730d548a1b9232fd02990cdfc17ae40aa6f4f59735397cb0e4739e3de5cbcde8181332330bd7de3845c3078c2","ssdeep":"49152:k2wqmb5MsslPFBXieBEbA5hzVP0V1yvIPQN2fYWB4Aup6jCCyw1qki+0AfEyYhCO:uat","tlshash":"bf85d814b111affebe6b08d0796f8048702e3f9ce61fc8a1a1797416066cd857b27bd9","size":1739795,"data":"","first_seen":"2026-09-05T14:22:06.362297Z","last_seen":"2026-09-05T14:27:27.430424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj42 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj45 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj43 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj44 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj41 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129},{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj46 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj48 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj51 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj49 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj50 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj47 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129},{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj84 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj86 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj89 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj87 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj88 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj85 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129},{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj90 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj92 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj95 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj93 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj94 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj91 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129},{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj96 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj98 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj101 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj99 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj100 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj97 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129},{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj102 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj104 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj105 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj106 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129},{"level":"log","text":"Request:map[actor:server1.conn0.watcher17.process7//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[adapter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj110 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] env:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj113 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] maxBodyLength:map[configurable:true enumerable:true value:-1 writable:true] maxContentLength:map[configurable:true enumerable:true value:-1 writable:true] timeout:map[configurable:true enumerable:true value:0 writable:true] transformRequest:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj111 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transformResponse:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj112 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] transitional:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] xsrfCookieName:map[configurable:true enumerable:true value:XSRF-TOKEN writable:true] xsrfHeaderName:map[configurable:true enumerable:true value:X-XSRF-TOKEN writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://vantageorigins.com/assets/index-pFZ6BpU2.js","line_number":73,"column_number":12129}]},"http":[{"url":{"schema":"https","addr":"vantageorigins.com/assets/opacity-bg-CP6UjmUh.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.784Z","timestamp":1788618407784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/opacity-bg-CP6UjmUh.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vantageorigins.com/assets/index-CNAcbjdQ.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 334602\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":334602,"size_decoded":334790,"mime_type":"image/png","magic":"PNG image data, 1440 x 863, 8-bit/color RGBA, non-interlaced","md5":"a28d89e6e1b2fe0cc829ba603cd83474","sha1":"3d0cc3edd1a7e1d34d0371f92d25fb3ad5d07174","sha256":"f00022ad83f4a24d578d0aa537c4464dd2922c7ed2253af5c423f9098e2bd047","sha512":"7c4295121b1f1c4fc1b5b3705ae64ca6963d84c5454acc8edef66459192f0d965d380e2a19cc38cac5373db6707e1c2e2e5211ab073ee6164f65a08c89103bde","ssdeep":"6144:5AS8zNsk0J26vgW2DI0qJdHxRsDLB0jGTB2wyKNHf4hEtCkV:60JZgRDLB0jGTB6KpK+CkV","tlshash":"a46423dec647c43e95e79801af34ee4aed5ffe297a04325ce00a865c059e7bb91404b3","first_seen":"2025-07-12T14:20:01.339371Z","last_seen":"2026-09-05T14:27:27.412687Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/banner-woman-DGw2rNdj.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.830Z","timestamp":1788618407830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/banner-woman-DGw2rNdj.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326767\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326767,"size_decoded":326955,"mime_type":"image/png","magic":"PNG image data, 639 x 659, 8-bit/color RGBA, non-interlaced","md5":"96b630d7179d3d8fd7c6579cd399f71a","sha1":"419b8fa45dee1c95e5ed0b2fb8657a345139e144","sha256":"ef53ca7704c29c63666bbbbffd04076c3cb99036629cf7104e4e7a9ea6a472fb","sha512":"b68c940ac15e07a36067506075ce7bc28c07a824f9e389d8eac8dd5ccdf94ac0da75a4fd9ea3deaa127652a9e88571f0d7b5abe0ef0a07ca1d982abc4180cdda","ssdeep":"6144:CJfqxOJYSzKOMeN+7a2xXOJ75yu2V3AquHsVOig7jtnbGOtpHo:gfq8JYe/+Lxi3s3Ksxgnxta","tlshash":"f864238b84e6659b4373d9c37d235d4e49b871607bf8424ac010e35c8b5eab67e0efa4","first_seen":"2025-07-12T14:20:01.329475Z","last_seen":"2026-09-05T14:27:27.413543Z","times_seen":3,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/hompagevideo-F6P4vxtv.mp4","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.925Z","timestamp":1788618407925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/hompagevideo-F6P4vxtv.mp4 HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ncontent-type: video/mp4\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\ncontent-range: bytes 0-4878229/4878230\r\ncontent-length: 4878230\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4878230,"size_decoded":4878437,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"848cfe775feda392b3fdb0c03e7bcabe","sha1":"bce9274b5ebe3f99da0c9c19b4a46bbef0732785","sha256":"cf3a66b8867aeeae0a89613a93dfcdebfa8e72328b239c0575c7ee95a98b2315","sha512":"69a5bec9f6d61514633862ca05743f38e761855c424ac15dcc3a2732c6b65a3b82fbe0904cfae5862a58f8b148a851aa2910062ff4852f8bdfd5cd43ac16baa4","ssdeep":"24576:EH5FLZyrG4cH9AIZOuFAakJI34X0zPOGEZwtIXro/klxPOdlhdP:+nZyS4qeIoJJI34XIO2ol147dP","tlshash":"a0253335dba142e2c574a17240f037a93702e5adb2412b4f8d7ee6679c667207f6ece0","first_seen":"2026-09-05T14:22:06.35992Z","last_seen":"2026-09-05T14:27:27.414849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/Content%20Image%20large-nST3g2PL.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.828Z","timestamp":1788618407828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/Content%20Image%20large-nST3g2PL.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 316022\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":316022,"size_decoded":316210,"mime_type":"image/png","magic":"PNG image data, 544 x 443, 8-bit/color RGBA, non-interlaced","md5":"c33235818f818003a2de46239ddf8768","sha1":"50baa16ca1ee218b2e0e4a6a9d1fd8fa6a16eae6","sha256":"a6ba4a5336398e266853eb1d5e35d169da4bc5dd5ebd9c3cad6b539eebc80ff5","sha512":"f83f987e656878796a8accdcdb2e9ced4370c44bdf1f138ca0ef836424eecb579bf3c86c74fa457ede40ec16c8a8dee0eb5a75297aeb1785695ea8b588d7884b","ssdeep":"6144:XvFVL/gh9cEcQ5eGZdhofepXhGzSfK1JQGthK5XRDkSI9fWM4/VMEM:XvFF4XMMh0epRG/05IFWM4/+EM","tlshash":"0e642313af500830d5dd96827ad64a9abde4cbac980f7217ffe7e26bc5431c0cd6a446","first_seen":"2025-07-12T14:20:01.32242Z","last_seen":"2026-09-05T14:27:27.416171Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/spon1-CQBpTED1.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.840Z","timestamp":1788618407840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/spon1-CQBpTED1.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7444\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7444,"size_decoded":7630,"mime_type":"image/png","magic":"PNG image data, 63 x 61, 8-bit/color RGBA, non-interlaced","md5":"2c8e3f8d5733ef4e81b78a5557c775b3","sha1":"3ee1cbe1ab732fba5eaf995918caeec3df08e64a","sha256":"117821b8e52d7841d478bae1dc392d903b4e2c1bd7358be045926cb972106f9d","sha512":"dd81c4bf50f423142df9ab7e6fee7a70ccc05ca602596ce7eb944031cc04675d211646114ea3c0063318581f8622a970053d0afb96a209f36b6acc78f675310c","ssdeep":"96:5Sm5r4VuHJiJBQU98If+EhLnBA/BTq+xoya8Dum8E82KRMEW+Ij3Io/iISUgDB/9:5S0rFySiZi++i38DvQRMEWWoaIix","tlshash":"e9e1bffc7c9ec01a878904c4795061ea7dfb9511ea44b861021ea13cb81a05eaff17fc","first_seen":"2025-07-12T14:20:01.350342Z","last_seen":"2026-09-05T14:27:27.416833Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/index-pFZ6BpU2.js","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.009Z","timestamp":1788618407009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/index-pFZ6BpU2.js HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 08 Apr 2026 18:06:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 441656\r\ndate: Sat, 05 Sep 2026 14:26:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1739795,"size_decoded":442073,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"a03a09ddb1d2d26892a3d79c511ed0c2","sha1":"1ce036e0c416feb1e063252b3c3993ad3d69b1fb","sha256":"20564faa59fcfdc5a454c47f78a353a2f95b6680e18f34517f41437f1ee6856a","sha512":"083dce1d9b607325f25a9bc97881085a1a1121b91e994b72bab9ecf084b4cefcf953cd0ed33783915c1c147501fd56ff0ce07beb88de119bd365c285ffa01870","ssdeep":"24576:k2wlL3qmb5MsslPFBXieB8jbA5hzVP0V1yvIPQN2fYWB4Aum+6n0oCC/5Ew6KqkM:k2wqmb5MsslPFBXieBEbA5hzVP0V1yv3","tlshash":"fc252b10b1106bbebe670dd4795f8009703e3fa8e11ec8a0a17d782616acc967767fd9","first_seen":"2026-09-05T14:22:06.33925Z","last_seen":"2026-09-05T14:27:27.417904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/vec1-CNDaJwKi.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.834Z","timestamp":1788618407834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/vec1-CNDaJwKi.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5002\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5002,"size_decoded":5188,"mime_type":"image/png","magic":"PNG image data, 186 x 135, 8-bit/color RGBA, non-interlaced","md5":"072819c0a5182b7ffeac7ef922d7772b","sha1":"0c4375c7098b349b410b32e8ab154491e234a8c9","sha256":"468a2c1968cc9ba07f751b48c464299c7aac230cfc89a3bf6ca4b34ee407aa4f","sha512":"6d4baf0a3afc2ee54b5eeac97d1df9b8902cae56ece34b833a1943e992893c2739f706eb48abe196e0dc9c32e12a1c93018adf970778eeadf4ac792fe8dc58d5","ssdeep":"96:ESU6q8UUq1JlW40exVz1AgxZeAo7lELPPymeRrZjZ8yvEyXQMxVYAb9fi55I:ES7qnJCePz1Ag+lJGPyNRFF8yllYAb9h","tlshash":"b2a19f0a83e9d745480521e898638f3f36591c1e0406bcb12b459d87e4eda9548eec6e","first_seen":"2025-07-12T14:20:01.326457Z","last_seen":"2026-09-05T14:27:27.419034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/award1-OhifX93y.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.837Z","timestamp":1788618407837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/award1-OhifX93y.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27880\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27880,"size_decoded":28067,"mime_type":"image/png","magic":"PNG image data, 419 x 78, 8-bit/color RGBA, non-interlaced","md5":"5987d3b0ff8fc4e0d43426e1e272b5c0","sha1":"c8a42f1b868a230253293f53903c9f8f20cc9ef4","sha256":"6a6887a5ba3f82bcb540aaf95d6ccfb50fac5a33442de26a6ed58fa975bba385","sha512":"8e4f1c33ca5bec1afea882824028b323e2b441b499941f98eaab0e0cc4e0e40ac45f657ff185e221dd28e93bfae7e593a3777cc13edc7fab36f31ec47dc4018b","ssdeep":"384:6qd02X8WSGNQTLGAefzlUPK8JaCKzMXLSDznZX+zjbnVMn1tZ8Hx+T/BG6VTpZZE:87XGAKz8VvKQXLOzEzqAcv2FzkfW","tlshash":"2ec2e1cebb985bb65bffbc8704166495bc924a134a8ca18735f0a2c59124f340be09db","first_seen":"2025-07-12T14:20:01.334722Z","last_seen":"2026-09-05T14:27:27.420087Z","times_seen":3,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/public/settings","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.845Z","timestamp":1788618407845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/public/settings HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"348-jiqNVBmYyjNafV86Z0MDjPlHJks\"\r\ncontent-length: 414\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":1336,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9701816282b106d7fdc22a600b86ac93","sha1":"8e2a8d541998ca335a7d5f3a6743038cf947264b","sha256":"4d56e0079533a286c055d941ed98c746df1f388839b35be394a44f6618a5a04d","sha512":"d3e0dabf8b5888bcba4d656a33e46e4936fa77fb37d968c971c00591f9c7e43b6e9b2156ae1cab7bec0babfd1eb9d4478fba7b62f94851797503329eb4ff59f1","ssdeep":"","tlshash":"55012684432a71f4d990d36ae6247f071dbdb83704e5e4a9b25d160a81fb4239986e37","first_seen":"2026-09-05T14:22:06.31979Z","last_seen":"2026-09-05T14:27:27.421162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cabin:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.516Z","timestamp":1788618407516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Cabin:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vantageorigins.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 14:26:47 GMT\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":1226,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fcd14a0cf7e5162fbe0683f9f45f8581","sha1":"5302f0a7cb607851fa26d3a200c627c4c878a93e","sha256":"afdadb8d45045b12bd535458ec3d176b41825f154ad2fdddec4fbc72f6f1a317","sha512":"5df5966e2679bb45b9c1b26d61400d01684025cfbf033da108339aaa3bca5524e43f90f3f7ba1af2b7084082d3ae8dff88a8b85979c763e14363f93a0e09c346","ssdeep":"","tlshash":"c051d16204675580d7934dc223ce7d32de4eb1a47444e979bffe1498ac9bc62e325b1c","first_seen":"2025-09-17T19:36:08.220256Z","last_seen":"2026-09-05T14:27:27.422027Z","times_seen":153,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/award2-l7UufBTT.png","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.839Z","timestamp":1788618407839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/award2-l7UufBTT.png HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10238\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10238,"size_decoded":10425,"mime_type":"image/png","magic":"PNG image data, 166 x 79, 8-bit/color RGBA, non-interlaced","md5":"2415fa4e6969762f1845cdd4440f59df","sha1":"d9257753f048c3ec050b82cf7601aa00d435b26c","sha256":"f0368c709bcf065916ddff7facb3595f7b118beec0f5b8aab980f3acd8f0af73","sha512":"843ef971d7889e58a788fbb477c69a17935d4c30b89a98beb56feb4085ecca504042d9324f7bd93074d512c5e3f3ed8d52f49ec757ccf34b1c7617d5d9fc6f01","ssdeep":"192:tS0GDr4cGrDVsnbZb5jolWhAGWOTP5gWiRDIGD7efas1nVL+PBD0IoUyX:s0GDr4XrunbZb5TmLOz5gWytDSFVyPBq","tlshash":"5d22affef4b93858e26f969436bbe8dc2490fe7c5c46d49650a4d12a4d3d771a0cb032","first_seen":"2025-07-12T14:20:01.349531Z","last_seen":"2026-09-05T14:27:27.422595Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/favicon-jdZ9MN63.ico","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:48.211Z","timestamp":1788618408211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/favicon-jdZ9MN63.ico HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4317\r\ndate: Sat, 05 Sep 2026 14:26:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15406,"size_decoded":4551,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"90902f6d6049cd413bed3bdf4de8cf51","sha1":"0c597aa391aea4f3024f0e803df436e7ff30331a","sha256":"0519dc5159fadee085b8cced21df2b8be9712f79004e772e38355ff55e582ac9","sha512":"3c9cfe80116f710e525e2c854773d89ad826891b666ebff9208f6ea254117c60af8afa60da50e27a482150949e2e84d7c5c93962ddfbc892e9dcbf0c9973121d","ssdeep":"192:DDzvA28uL2VVtWKoptFswRlrnwyvUCqP7DnnnYC:E28tS7sqlz/b85","tlshash":"f562108a3b146263f5a0333f72455aa19d2fb927365d13cfc2eb6a31c4063a7aef5411","first_seen":"2025-07-12T14:20:01.33219Z","last_seen":"2026-09-05T14:27:27.423396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T14:26:46.329Z","timestamp":1788618406329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\netag: W/\"3e6-19d6c83bc50\"\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 511\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:26:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":1710,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"17da746958d6266fe36df2917d678588","sha1":"defabfff25a04b93812e32836e125d66d970ae85","sha256":"d593c7739dd2216e19650df6247c5c8199962e694a1d7ce1e9d2e78ce3a7073d","sha512":"159601d6314307c1156c6783b8c02eff73e0fc7d8eb3718e11c87fd8d1a5928afd81478891243311ae7cb5cf5eb53d9598cc919c4aff71dba213eb326d81157c","ssdeep":"","tlshash":"2b11140c6cd0883a03705645baf0f15fc996a70b7a05a54571fd146f1fb16954cd7d94","first_seen":"2026-09-05T14:22:06.316291Z","last_seen":"2026-09-05T14:27:27.424042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":217,"connect":91,"send":0,"wait":95,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=general-sans@701,200,500,301,201,1,300,2,601,600,401,501,400,700\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.513Z","timestamp":1788618407513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.fontshare.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 11:02:22 GMT","end":"Tue, 10 Nov 2026 11:02:21 GMT"},"fingerprint":{"sha1":"69:47:B7:C8:96:DB:6E:32:43:04:72:6C:D2:39:29:8F:C3:31:33:36","sha256":"BA:97:33:5D:48:ED:D6:0F:A3:E5:33:7F:13:E8:CB:DC:E1:BE:18:1A:08:1E:1C:D1:BB:45:6E:E2:DD:DA:AF:15"}}},"request":{"raw":"GET /v2/css?f[]=general-sans@701,200,500,301,201,1,300,2,601,600,401,501,400,700\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vantageorigins.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6318758\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, stale-while-revalidate=604800\r\nx-request-id: GNJqq55pzwIbee8AAuxx\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/05/2026 11:54:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bfa55e5472fdf4968bf2cc4dc5b0e7d7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8233,"size_decoded":2151,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e4e2e65d3c22771dcbbd1adb5c069bed","sha1":"6112ad3f2d59673fd7a8501d5ab22c374b71e321","sha256":"3d3127c61b9b64afe2ca1c2ec67cb04e8a17113c7e50b4ddd07790a481d23d53","sha512":"6b855462e4830f9b8ae1b613c8c48620de4cca1c392c363f617c99e33178a9c447529a080f648d999a7bbc48142d51264b2473a4371ae1441b65ba3d051fec28","ssdeep":"192:Is9d6Td67d67KfCKdypypipPKA+K1OSKOoQzKNzKKwS:ywY7NXQAPoOCES","tlshash":"be025241a8e9745a98731c0d33ef0f5d9d0d246310c1d8ab3a8e47197fa7d4a53a9f5c","first_seen":"2025-07-12T14:20:01.335665Z","last_seen":"2026-09-05T14:27:27.425119Z","times_seen":11,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":45,"connect":14,"send":0,"wait":3,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/market-prices","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:27:02.842Z","timestamp":1788618422842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/market-prices HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"611-d07vQtU7oVnc8WE+BgdLzTHangc\"\r\ncontent-length: 705\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:27:02 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1553,"size_decoded":1627,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a380e9b29aa1c3800c573180870ccf6","sha1":"774eef42d53ba159dcf1613e06074bcd31da9e07","sha256":"b51a52231fa3930c68bb877d534644813e6fd12e4524800da30799e4dea816e2","sha512":"c73a48bd6703f7c263de42643fc1a66fa26ec4a2c392723b56ec36831777f3f6050cdec417af4e143fc8c5e9e3357e43c5ea2c3a198891f726d755c3dfb4acfe","ssdeep":"","tlshash":"ea3153d19f44d0a114d2b583cd9674d53eec1bf98f2087b883ddacdf28a115e210dc62","first_seen":"2026-09-05T14:27:27.425677Z","last_seen":"2026-09-05T14:27:27.425677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/market-prices","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:27:12.859Z","timestamp":1788618432859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/market-prices HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"611-d07vQtU7oVnc8WE+BgdLzTHangc\"\r\ncontent-length: 705\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:27:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1553,"size_decoded":1627,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a380e9b29aa1c3800c573180870ccf6","sha1":"774eef42d53ba159dcf1613e06074bcd31da9e07","sha256":"b51a52231fa3930c68bb877d534644813e6fd12e4524800da30799e4dea816e2","sha512":"c73a48bd6703f7c263de42643fc1a66fa26ec4a2c392723b56ec36831777f3f6050cdec417af4e143fc8c5e9e3357e43c5ea2c3a198891f726d755c3dfb4acfe","ssdeep":"","tlshash":"ea3153d19f44d0a114d2b583cd9674d53eec1bf98f2087b883ddacdf28a115e210dc62","first_seen":"2026-09-05T14:27:27.425677Z","last_seen":"2026-09-05T14:27:27.425677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/assets/index-CNAcbjdQ.css","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.010Z","timestamp":1788618407010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /assets/index-CNAcbjdQ.css HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Apr 2026 09:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39642\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":274096,"size_decoded":39873,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9c5bf720cd9c99c6e4caf6c210663a86","sha1":"6326f501e3221018f5712bc37fcde177ad4ffe9f","sha256":"e26a4d46c8cb942a96d060614bc17e2308d9685b7f9d6dfeaf4019263cffb20b","sha512":"24a1aa352e89269520a0246d4f80dbc1552583bd983b0475fb265052c6018305e1cf50539691eb9f34d88f4cc711eee744bb53d817d4139a7e9636470dbf2737","ssdeep":"6144:Eyw/BDR91pACQE+xYmQewPtsf1rGN0aRgiofb+:Eyw/BDR91pn","tlshash":"f24475697718603b3c1791f2d2ee699ca13a71c0df3616e6bc5211248ac1bf52e77b2c","first_seen":"2026-09-05T14:22:06.324401Z","last_seen":"2026-09-05T14:27:27.426872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/market-prices","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:57.841Z","timestamp":1788618417841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/market-prices HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"611-d07vQtU7oVnc8WE+BgdLzTHangc\"\r\ncontent-length: 705\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:26:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1553,"size_decoded":1627,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a380e9b29aa1c3800c573180870ccf6","sha1":"774eef42d53ba159dcf1613e06074bcd31da9e07","sha256":"b51a52231fa3930c68bb877d534644813e6fd12e4524800da30799e4dea816e2","sha512":"c73a48bd6703f7c263de42643fc1a66fa26ec4a2c392723b56ec36831777f3f6050cdec417af4e143fc8c5e9e3357e43c5ea2c3a198891f726d755c3dfb4acfe","ssdeep":"","tlshash":"ea3153d19f44d0a114d2b583cd9674d53eec1bf98f2087b883ddacdf28a115e210dc62","first_seen":"2026-09-05T14:27:27.425677Z","last_seen":"2026-09-05T14:27:27.425677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LHQJ5KSAL7VGAEIDSTEXCCOIUKFLT2I6/GW57XUEG4ZBVMLZZTQZTGYPROITRRQ5W/JA3IZUEMJ2J6WWT2OQVJOAWDXO3YL4YG.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.813Z","timestamp":1788618407813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 20:02:52 GMT","end":"Fri, 27 Nov 2026 20:02:51 GMT"},"fingerprint":{"sha1":"11:4D:60:9D:A6:69:AB:C2:D4:4A:84:EB:69:0D:8C:FD:B0:98:0F:D5","sha256":"F0:63:71:86:16:E7:6F:DF:B9:38:7C:E0:21:6F:D7:AB:1B:52:93:3B:FD:23:65:B6:08:D9:AC:87:23:0E:11:73"}}},"request":{"raw":"GET /wf/LHQJ5KSAL7VGAEIDSTEXCCOIUKFLT2I6/GW57XUEG4ZBVMLZZTQZTGYPROITRRQ5W/JA3IZUEMJ2J6WWT2OQVJOAWDXO3YL4YG.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vantageorigins.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38132\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"34583a631f37fc2aa9a004f0e00751ae-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:41:16 GMT\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-version-id: CO6cqW5UHPEeXhLHzEDT6JpkAddUDjsp\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KYYA_KPC3YrFejLzR6XFaQzruFtwbNjzGeYuLgURyQLlhEiYISb7AQ==\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/05/2026 14:21:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2c0b10dc8bb93ddc194a7a1a207d554e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":38132,"size_decoded":39381,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38132, version 1.0","md5":"8e765124680c81f492d970a01faea9e1","sha1":"7b5937ef1917752f50e38312592f91f80f5d8ac4","sha256":"49d3fbd2f1bcc9850d8d939cabf107d6ade508ce08419fca466b06879e4a0a8e","sha512":"f34be05c607c61f9a7c3d5fe790b26e3a4f9bc7e020b05999a4d9642468a7fb31a3a2b015069f5c2259cf5d550f63338c3a29ab1566cc0a028bd02cf58ea5dfe","ssdeep":"768:jm0pd3u/jcAwSSJtPEa233Zv6J8y0EtNPcYPqQsmkaovt3t2T4:jmwpu/nwSudEaE5ETElQ0n2T4","tlshash":"a303f10ea4ed4a779387b7e56389ea98da35f91f1ec01365300f6912093edf44a22df4","first_seen":"2023-09-10T22:35:03Z","last_seen":"2026-09-05T14:27:27.427866Z","times_seen":1456,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":42,"connect":10,"send":0,"wait":2,"receive":1,"ssl":4},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.814Z","timestamp":1788618407814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vantageorigins.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:42 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 273305\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28320,"size_decoded":29133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-09-05T14:59:43.827793Z","times_seen":8893,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":2,"connect":29,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/market-prices","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:52.823Z","timestamp":1788618412823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/market-prices HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"611-d07vQtU7oVnc8WE+BgdLzTHangc\"\r\ncontent-length: 705\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:26:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1553,"size_decoded":1627,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a380e9b29aa1c3800c573180870ccf6","sha1":"774eef42d53ba159dcf1613e06074bcd31da9e07","sha256":"b51a52231fa3930c68bb877d534644813e6fd12e4524800da30799e4dea816e2","sha512":"c73a48bd6703f7c263de42643fc1a66fa26ec4a2c392723b56ec36831777f3f6050cdec417af4e143fc8c5e9e3357e43c5ea2c3a198891f726d755c3dfb4acfe","ssdeep":"","tlshash":"ea3153d19f44d0a114d2b583cd9674d53eec1bf98f2087b883ddacdf28a115e210dc62","first_seen":"2026-09-05T14:27:27.425677Z","last_seen":"2026-09-05T14:27:27.425677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/market-prices","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:26:47.843Z","timestamp":1788618407843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/market-prices HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"617-mgdLug0gTtkLXZg6bKdMLAPE4VA\"\r\ncontent-length: 713\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:26:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1559,"size_decoded":1635,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0aa5902a127e814aec36807dd255c302","sha1":"9a074bba0d204ed90b5d983a6ca74c2c03c4e150","sha256":"9685863eff45b0961b20f564c895001b9a09be49d7212d076c43f05149c1d3af","sha512":"2b1fca9ccdc3d16de4e04870ec5ec42806e1d81f13992fdf2535043ad9b7efb3aaf7f7558d198a5f1ee4d7eff100cabb8b9c96d48e6cd3de06ca2d69b2be6b57","ssdeep":"","tlshash":"d53165e2cb94d0e518927613ce7672d93d9e2af9df2487b897cdeeee687401e1048c10","first_seen":"2026-09-05T14:27:27.429097Z","last_seen":"2026-09-05T14:27:27.429097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vantageorigins.com/api/admin/market-prices","fqdn":"vantageorigins.com","domain":"vantageorigins.com","tld":"com"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vantageorigins.com/","date":"2026-09-05T14:27:07.838Z","timestamp":1788618427838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vantageorigins.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 00:03:11 GMT","end":"Mon, 23 Nov 2026 00:03:10 GMT"},"fingerprint":{"sha1":"F3:2F:DA:9B:0D:5B:96:9F:48:7A:C8:5F:DE:67:AA:7C:17:AE:22:99","sha256":"D2:F8:F2:E2:1F:F0:AF:F7:9A:B5:1D:F2:74:E0:14:69:F3:64:26:D3:41:AC:E0:AA:E5:32:A3:26:4E:07:70:56"}}},"request":{"raw":"GET /api/admin/market-prices HTTP/1.1\r\nHost: vantageorigins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"611-d07vQtU7oVnc8WE+BgdLzTHangc\"\r\ncontent-length: 705\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 14:27:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1553,"size_decoded":1627,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a380e9b29aa1c3800c573180870ccf6","sha1":"774eef42d53ba159dcf1613e06074bcd31da9e07","sha256":"b51a52231fa3930c68bb877d534644813e6fd12e4524800da30799e4dea816e2","sha512":"c73a48bd6703f7c263de42643fc1a66fa26ec4a2c392723b56ec36831777f3f6050cdec417af4e143fc8c5e9e3357e43c5ea2c3a198891f726d755c3dfb4acfe","ssdeep":"","tlshash":"ea3153d19f44d0a114d2b583cd9674d53eec1bf98f2087b883ddacdf28a115e210dc62","first_seen":"2026-09-05T14:27:27.425677Z","last_seen":"2026-09-05T14:27:27.425677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"vantageorigins.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"vantageorigins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}