{"report_id":"2e33ccb3-91ef-40f7-a69e-f421b478fc61","version":0,"status":"done","tags":[],"date":"2026-07-22T10:19:51Z","url":{"schema":"http","addr":"tripwin.homes","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"title":"Tripwin: Crypto Casino \u0026 Provably Fair Games","dom":{"size":1195560,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"d9f4939c9c8fbf03a37ad242438db979","sha1":"3c8c29f431f84fbcdc80b828909180be9d769967","sha256":"200d4c81887bae49dee669185845467b6a60f4e182217a37ea124cb2ae0f77c4","sha512":"4ae7a496150e91da0fe720811f81c3a4fa0382e507e8cb9320478850847f1592e0b026b0945b943ac7407dc201da19714f664f3293ceaa782f118d3e5f2ce839","ssdeep":"12288:GWJ24cvYrZxWJ24cvYsSN87vIomx0wgH+vVKSN87vIomx0wgH+vVRaT+OT:X/cEZg/coNgvIh/VvNgvIh/VRaT+OT","tlshash":"a245cfba63184af5f2458bdde9717c7822f934ff7ff08048d25a9a8502a94bd4d1c8d2","dom_hash":"domhash968715551b6c0e043cdd9f74c3b0fed8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tripwin.homes","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:19:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"tripwin.homes","ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-07-22T10:10:29.274842Z","last_seen":"2026-07-22T10:10:29.274842Z","alert_count":47,"request_count":47,"received_data":3685904,"sent_data":23248,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2ejqww7jc4eul.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d0e8e7d51fcb85564ef2ec8c317a7d1","sha1":"c7baf6c49e7f8351bb94fa31fc95e20f58ffc09d","sha256":"2689c1feb38a72c357c1c364a387761b6d94754bbbe5b46a89c75815f1cdbaf7","sha512":"d4d020a99b50f07f2ae4a6c0680904846faa803ccc618b0108a1d9e4c857b730e7cc38b937dc52e330d86fc401a455d987c25554ee5728b0c69a9ef50e19b055","ssdeep":"1536:FMcXlrCaI/5smQPVROsuRuSjJmnUD40MLsUDG3BBN2EaRxt0GzxU7VRX/mJj2Ne7:m2f","tlshash":"9a04e7dfbba0a2f4f045e7f8d71214a8766b29fa7e12c668c3a81d55e54208cdd48dc3","size":174820,"data":"","first_seen":"2026-07-19T03:58:27.901405Z","last_seen":"2026-07-22T10:19:59.428268Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0t1cupau1mtgy.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65fa82058c40728d63413e352e7e834","sha1":"28b8f513935e450b29d4f31614c7d19301e2569a","sha256":"adfbe7cf3782ef2c3b8d7ac2d4549714353417e82de30163258f9dd4da52dcd1","sha512":"486520b53bf0a1e2bc52021d78124a0641b8798c11a9efa0a5013e7a6f73d93ea9b7174410e5684519f193deaeed1f583700818b071fa678ec1e64b4bd6287c6","ssdeep":"3072:M1Jtr3M4rF8Og/7NqDIQtrcRlazbJ8JcQHGXX5MubGvngKctS5:M1JtzxrF8OgT5QLQGnRivngKctS5","tlshash":"ba24fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","size":226466,"data":"","first_seen":"2026-07-06T15:14:58.078421Z","last_seen":"2026-07-22T10:19:59.453156Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-22T21:25:34.941835Z","times_seen":198271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"f47cf5c9b311f0862caf50f45bb62213","sha1":"3cafdc79499a7bd145dbe4a3335621c4659afb25","sha256":"fd1a049a05624f036832cc50e18d76687ab089e80e9da87fb4a93f4a6ce0661c","sha512":"2d1caad0b85b1d1b5325352d605a237776cb64e88e2f5f3b1ec435b63001cf40b85f45ced9e70489cab9ce86627b7d8df4b1bd79b7501a350816851dc4df25fa","ssdeep":"48:LZC6/584C6/5858khypC6/58zC6/58EC6/58lC6/58F8C6/58F1C6/58FNC6/58d:LlIt6r0NSJm5E6JfX","tlshash":"a881471be90afd40b832ce8f612f4f36c5d9d9b6c178426cf34cca99522197603a9dd9","size":4104,"data":"","first_seen":"2026-07-19T03:58:27.947646Z","last_seen":"2026-07-22T10:19:59.466469Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"dee7515d6ff56c28bf7f3001fbb00169","sha1":"a28d1741eb07653e856961f4af8bf7174640c317","sha256":"1f7d4aae8e59f4b0015be3d29bc00d3e99533d6c342d3a17463b5b5f9bdae542","sha512":"eede6c71dce5784e898a493e86dc1f74cc578622c83ec3c2025ce53f5c75c8b16f6ad80549aff4d9624e5562f107d1f6c9034a790c893f9f12306a880a820f27","ssdeep":"","tlshash":"ff61a10f7c05de06dc3a6c69023e8e7b54ccce7b8760d9b8919ece591a065b227d9881","size":3283,"data":"","first_seen":"2026-07-22T10:10:35.856736Z","last_seen":"2026-07-22T10:19:59.467249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"06caf078c4c22ade785ebec666d352ec","sha1":"936c725461de077f5b6dff96ec0ac45685ffd6ce","sha256":"a38c1d59bed9b608b8ba452cfa9fc53df323f74e901c5687f53c13a754341097","sha512":"3bd8a1228fa60aaf4245660e6040cd4e7b4d271458d6a73d4b9348df79bf8b8a51c7e8ab9d719538d8bd51f390e6c105d9578903174412cc0d495b5173fc0b35","ssdeep":"","tlshash":"387164272950c77b927716a4d17e3cf5b2a8847a0271c2a4a45ace6c1156cb963fecc8","size":3584,"data":"","first_seen":"2026-07-12T17:33:41.932295Z","last_seen":"2026-07-22T10:19:59.468631Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0079c68473ec17e39263bcbb48da2b9","sha1":"1e0339aa4c8bcb52371c5280a9467aa9acbf8e6d","sha256":"6674c1536aa3c58f7ca0b99ca0499aa3bed0c0b7a1cfbd5f7cdb164d4ee1b46a","sha512":"1e2f63022b9334c65111102e5f1218db21114475dbe7f485c19887e5395339675df9615d11979bf1ff91afef738aac5b33fcb60ba7154a28e4daa7453354ca38","ssdeep":"","tlshash":"35316633932826e207d308bded77269e73b41464730a449a9c7b820ce746145d27abdd","size":1839,"data":"","first_seen":"2026-07-12T13:10:22.964954Z","last_seen":"2026-07-22T10:19:59.469401Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3239d4fa4cd2ef35537bd51c4b10380","sha1":"65b22cdd7b9ab1265265587d42f31e69b48d42cc","sha256":"5484a06b000b3ecb77c057b9efc400604cf1c5caa40dccd0abbd954cd50ac2b2","sha512":"02aa0d3103d3316411746fe28e2bc2bea419b01213483029521a0659bd79bcf8d864ca3f505a59f07a2773cd4a9c7f15c937bceab6182fc7d2c7ed224823c3ea","ssdeep":"1536:nw514KIN/BqX5s+rdlsrXQA9pc2Pp9eIRnVslmq4a+cRyERnz6nYeVqXA/L:M14aX1lcNhp9FsmaRlnzaqXA/L","tlshash":"9673f80fa608d377cac31d563bbe3db6b6298114129284bc6dedc11c13958bce6b79e4","size":74786,"data":"","first_seen":"2026-07-22T10:10:35.862533Z","last_seen":"2026-07-22T10:19:59.470149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"c63754425ae67352aaac54960f03a098","sha1":"28483f235163ae097321d90e0e308ff634835cfc","sha256":"48af16b2685c3b050b5fbf0240ad8103a4d28a62138fd307358f00d6434d1227","sha512":"86d5a2c746507e1443cd442e3c8616c7ce03af0ad3138710d1cdda081630adccaf8b86e5bf7e7a87872559e32ad0a462794e8c3a2f263d831ebd8c56230bb606","ssdeep":"","tlshash":"5f21379f6849d94ad8797c2e673e6c3200cc8d37877196f8c18ece58065a4792be9886","size":1252,"data":"","first_seen":"2026-07-22T10:10:35.865052Z","last_seen":"2026-07-22T10:19:59.471425Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb8f01cb449cda00ecb0a957f58c0381","sha1":"e2baacd8a54676d415950b319be2ef208d441a2b","sha256":"4e44e9d85df19dc0410982c2457651a7248f0c35978958fb915da3247d91a9cb","sha512":"84c8732bab4b65a5fccf2205b710bd95f658d7c0dde580b132f7d7f018d09f9c992873276df50b1e2def3054a253499ba31a4db3234bdc8a2d1cdf75c7781612","ssdeep":"","tlshash":"f431a372ed14ec499bc26e281e7e3cf864ecc7618254645e95a9cc2809cf9349df1e61","size":1652,"data":"","first_seen":"2026-07-22T10:10:35.868656Z","last_seen":"2026-07-22T10:19:59.472699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/turbopack-0fvmr0zxyg2g-.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"965cb56b0b535b9a1b91fdc00573a1f4","sha1":"23c27f564b87708a080497b9f16b7bfc9cb7c1ca","sha256":"e0b4311bb3499a2e3b3566596fff1b2b00178dc94bdc0a0df40f82a2f8e046d1","sha512":"504df80e497188b3bfa18d8fda946db499928713e6256a8d6c5661bd0b747806a10d2f32ee569c29b31218ecf35b55a9f0271f3057268feda3c97edd2797916c","ssdeep":"192:1v4gMSBC88Esg6+9ErUO/lhjTNWn+S3sBT4fCT3cXXqroor2:B4gMSta/lHW+ssqCTMKA","tlshash":"bf22c7da37a6f073436f94eb906b4004f17984a9145e141cd3aca8e72c394aa85e7f76","size":10581,"data":"","first_seen":"2026-07-12T13:10:22.939637Z","last_seen":"2026-07-22T10:19:59.454632Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2hcx74mzmjjm2.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"286b10e27f0b63e57343a8094cc0099f","sha1":"3cece2d8e35bda433d07e09cf04c409057d02052","sha256":"e7440bc6ad5836136c69d493b510d4a0799b893a21379aa81d76ef5211b138c8","sha512":"12a8c37f385ccb525ee3298abd5f384539c1e571e46ba6bffbfb38e6dc37860a37376644ae0bd504227cc48e674213b53d203ba92b8075e8fc0aa252faabb52c","ssdeep":"384:mCn7dA9UkpFe6hc6umBBwhzqdZICSh4SUWwEmeBEQ0IJT7N:mCn7dAWSFNhomwhzqdZTSgwIi","tlshash":"f1d2e6a972d5f4921b9354a4803f500bf2392c7a286ce0b0b3e6ccf579a059de537f99","size":29154,"data":"","first_seen":"2026-07-12T13:10:22.956596Z","last_seen":"2026-07-22T10:19:59.425713Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/3a0yp5de6vyxz.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2a333d8a6e145659b2a71a3922f78d5","sha1":"0e9c69579a6af014a575ad6c06532c18269af2d1","sha256":"7dbabed0bacde27e6eac24b98e0be71acb72147a3b5ff971fdd072175be5e4ea","sha512":"1f376ab604cc08f2226b641a8609231e35647fa6d4df89054d02e106c1e41157f2e1594081d70e7d4f702f746579768a7fb1bd38dbdb92b105e79bf0767e6265","ssdeep":"384:yP3iWjRYhrDZ9iYgvpuvL96EipVpL5R1YHoOh0KU7D5UhEEsS:YZjRYhrV9iYgvpE9OLur0KiHET","tlshash":"1db2d778a7b4a4cde84207f8d7bfd8941b1da1fef416860dcd1d1420a05399fe867749","size":24347,"data":"","first_seen":"2026-07-12T13:10:22.93038Z","last_seen":"2026-07-22T10:19:59.462578Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2-53m74dqkhnw.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9bcced9f412e7cf40773a1256e1865","sha1":"17e82fa2064e3cdf0d0a74798eb7763c1d403b08","sha256":"4ff7682cc3283955511a5d4f88b95a27fbef2ddc7b9916c568082aecabc8f1c0","sha512":"1e7c6b520af60d8fa8e414c30e303ed9303d3653ce7ff5075d22bd35291c1e77d15d84ef04b78cf8d63ce3b8b9263f6811cda2e1da7afd7c622376eef13b3a5e","ssdeep":"768:7A0ZuJdCHq8di835F9Gwl/v+GMd9mML03RnyiGM:7A6Txdi835F6q3","tlshash":"fb33d5b572d4faa2529380f0d43f2017f23d0c7520ad7470a7e89cdb754898da6bafa5","size":53244,"data":"","first_seen":"2026-04-06T01:13:53.060116Z","last_seen":"2026-07-22T10:19:59.426421Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1uelwv_w1ge9z.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a59d4b47b4db310e67b7d7c1334c45f","sha1":"d0c39f97c3102697fe4bff397ccf909c2f393553","sha256":"65fd82304f8f65af470353881cdbc6cff1c99ec621adbec94529f5f78b387ce2","sha512":"ff4df6087420769e10f4601e0552cc38e23a757337d48b654c8ef5afe2c5d34f81988c3f1825aff911e34e65904b7ebe60ba283f89bc7ac5f7dca7f8d6c9f942","ssdeep":"384:yP3iWjRYhrDZ9iYgvpuvL96EipVpL5R1YHoOh0KU7D5UhEET:YZjRYhrV9iYgvpE9OLur0KiHET","tlshash":"9eb2d7b8a7b4a5cde84207f8d7bed8942b1ea1fef416460dcd1d1420a05399fe867748","size":24276,"data":"","first_seen":"2026-07-12T13:10:22.94192Z","last_seen":"2026-07-22T10:19:59.42916Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/3rz20y42s53q_.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f28d4baf4d3f9fac4122c5f7409d7b42","sha1":"dcb4b11cf9d0afaee8bec73d7f7c439e3ba938e1","sha256":"6240f5962e8fcfa0483c95d864ddd5d0e60b5096213ecd3fe1ff0d0772d317ab","sha512":"38a18d507ee1d995437f1c1b1201093afda3ea691e8b8c41262283d277c46cabb04242172673dcfc6ffdbf2a637c5ae3e7196070807c466eb9bbd653a6baac3a","ssdeep":"1536:3nSdcUEwZ6wxkszpGBpyfF2IerOSmF8eYSOWIbZTETWWhIEmAW5:3S7+gYuurEy37Ea","tlshash":"2dc3e9db5358957d7403c7accb33b0b2b66f15faba5ed280139e8738a5064ccea219d4","size":126604,"data":"","first_seen":"2026-07-12T13:10:22.922845Z","last_seen":"2026-07-22T10:19:59.460252Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0xs55ggx-x5or.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e8d8954c64f8991b0c03657a62fee17","sha1":"5382abc7dfae355d2c5b0d84ff6f27f917693e0c","sha256":"dcb13f9c95de6ba0366c2e438be8592492cf5fb116297e416a8adde55d7b34e5","sha512":"1dad1250fd911725dfd2f9c16d466a2f799db58d49e2a127cb331f6e4b8eaefcf9db77df88cc93fc16a340bcc59762ff907a8c4046bfc201a34582a75965a02c","ssdeep":"768:b6FyX3XNLBXlHYTHwyxbugOmisUNpGOyT5FLIbQ:W8NNXlkQyMQUNpGOyT5NIQ","tlshash":"3fd23cd5b140f8b4979742a0917f8209b23f29bc6c0e8054f7f98ca436259c9e2a3fdd","size":30319,"data":"","first_seen":"2026-07-19T03:58:27.925058Z","last_seen":"2026-07-22T10:19:59.424242Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1ntn7efqc-iiw.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","size":54763,"data":"","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-07-22T21:40:14.397223Z","times_seen":3151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0puoh-ufu3dvd.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c34713f1998087fa2f84273eacc37529","sha1":"88f514d8919109375d2f8a8463166a750559f955","sha256":"bfc31f28f01cbb5a04055228926786bff77d17f0b284905e981208afac531cb4","sha512":"adef4e926fe03da281afdfbc67191599be9c5b11e05b843efe650a03921600547f4e6a2953b216f598aaf48239ae83fe68404bf068dcf7357f2e18b06f37626b","ssdeep":"6144:XcrljpAQmINGbpJGDc0Lf1c/2sD0ecI5BEs:yljc04D0xI5is","tlshash":"015419597254343805c540a9906f094bf736292e246ac49cb36cf4efa8bdecd31beb79","size":305712,"data":"","first_seen":"2026-05-01T16:22:52.57421Z","last_seen":"2026-07-22T10:19:59.457098Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/21ccidu2vqfov.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"75ae2ad955e0205f84cd1f5196b4c7f7","sha1":"eda0d002c40b8ad93a40bf1cdc6a64f1117f2f49","sha256":"5839d3b2de2bf11bd6e2ae4880d18c54d2258eaead8d00eccfbe22ceacdc92b5","sha512":"8e601a6c8cc20adaf1e6adfc968200098c604db77b092065ec29e2c1fb9804b0c64db504313cdad14dae08f3bee5d740684d670e731738178fb378a9b2897d3a","ssdeep":"12288:RxIYTLljXNW4D93yq3F/1hWJ24cvYkeJe2e02xEzaIGTBrfzLd91WJ24cvYk23P4:k/cpw/cpLNgvIh/VhNgvIh/Vd","tlshash":"dd45b51cce6641fdaf14ac81ca4770658fe287432fd785ed9abb6e208bb159f4301e61","size":1276451,"data":"","first_seen":"2026-07-12T17:33:41.926811Z","last_seen":"2026-07-22T10:19:59.474192Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2nsq1ek51g625.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"da41fcae8900568d2d69f7784b94558b","sha1":"63a15a20dc03f9e4a95e3d8ea63e983971e6847e","sha256":"2a525c5d0366a8e61ba5c781ce15b00dc547be61e47bcda608a63e3d6d435462","sha512":"8549291a29f0f1710c142623754f9f2f524dd0018b3c09754a0af394cc8acb87cfd6b8824bc53e2b0c878dfc8ded0bb44ac7752dd9b545416d937b748148215c","ssdeep":"1536:L1A+g9MEnjxzsYo6dZcYp3zW0VOQd44bIApz0Hpsv6aYcafemr/W+eC07TP8ETOR:gTjxlo0ZN/VOQd447NYcammS+v0vPMXB","tlshash":"26d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","size":137711,"data":"","first_seen":"2026-05-07T12:23:58.018891Z","last_seen":"2026-07-22T21:40:14.417596Z","times_seen":698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1fb3j65e4wvcr.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"67b78c5f38c5a3406b794278f298866c","sha1":"36bed9981d9400e6721c78b15af0a211467a0a8f","sha256":"a70a038fbd1fac246c60b62572f04f54af05f867b57f683237ab33ed68f76ef0","sha512":"fb21c997b9d09608fe9523b61d823cfb0198381941cf811039c96a85b2ec3454effe113630dc0c8caaf90eba7a58912ce713192416d29528b15c34140d89a887","ssdeep":"1536:fQcA6Et7IqZu0ldNTInBAfxI2D6OWIbZYMeYUZrMf1:fQpdNTInBA5j6y+rMf1","tlshash":"84733aa5b3e8f5e4e047e3f4852fd028763b2df97a29c41863e85c54a96008d60b6fd7","size":75207,"data":"","first_seen":"2026-07-19T03:58:27.934177Z","last_seen":"2026-07-22T10:19:59.45621Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1ppqbi5rb03lm.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"472e154f2bb05e26a694aab084b73ec6","sha1":"7a9798527e0c79d5c8b1b5efb6bd14f41b39bcb7","sha256":"e6034bbbecfbfbcd702070bde02d2880e74f64020efba73082ce8d7bed6a84f1","sha512":"8fc8e316441f0f807a8ef20c8cfcb58c142861fc34dba531707155c3cc1a1b54bfd643fdce322f35180f250c6bf163831a4f3d1f7c6ac5ffc9a582ada669b679","ssdeep":"384:IgBSykaGkZS2rfQ9uQ7m0yGSaGkb665RwrJMba2BVplfy7ffa:Ig8yka9S6fQ20HSaGkb68eJMG2B714fa","tlshash":"f072fa90f295baf4f3668384512f5058f17e2eb5690e8414a3bd2cfa34605c8b5b6fce","size":17239,"data":"","first_seen":"2026-07-19T03:58:27.938474Z","last_seen":"2026-07-22T10:19:59.423142Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/161-f57mu9olk.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a80e99b2657b5e8d81bc0c45ad217a91","sha1":"da30be40b0189abe8dbfcad3580c4892e9a64cc3","sha256":"f4b42be6cdbc3c799dbdf32ac89dad1483c0ae9bc00e30e826c48efea6e7b17c","sha512":"3e65f450b0f1f0595c6e802fcc89cc5c57a8fa9791678d14e4824394e154a6346e8508394411ba72f9e8552aed466eaa919da49ff1e26ca5382b80ecb81256f0","ssdeep":"768:PguLhHJNPkOsCH71yZdATNEzzZLKm+lmfom0at3v5aCMOLnKaBtl5N2afBit7W4J:PlLhHJNPkOsMIMTziz3v5aCMYJi7WE8w","tlshash":"1403b561a28131260e8353da54290309afbe79b4178c541fb76c5ee72d52cca4bbeff1","size":40320,"data":"","first_seen":"2026-07-12T17:33:41.903376Z","last_seen":"2026-07-22T10:19:59.427254Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1ppqbi5rb03lm.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.737Z","timestamp":1784715557737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/1ppqbi5rb03lm.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"4357-19f7e839030\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17239,"size_decoded":7437,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17205), with no line terminators","md5":"472e154f2bb05e26a694aab084b73ec6","sha1":"7a9798527e0c79d5c8b1b5efb6bd14f41b39bcb7","sha256":"e6034bbbecfbfbcd702070bde02d2880e74f64020efba73082ce8d7bed6a84f1","sha512":"8fc8e316441f0f807a8ef20c8cfcb58c142861fc34dba531707155c3cc1a1b54bfd643fdce322f35180f250c6bf163831a4f3d1f7c6ac5ffc9a582ada669b679","ssdeep":"384:IgBSykaGkZS2rfQ9uQ7m0yGSaGkb665RwrJMba2BVplfy7ffa:Ig8yka9S6fQ20HSaGkb68eJMG2B714fa","tlshash":"f072fa90f295baf4f3668384512f5058f17e2eb5690e8414a3bd2cfa34605c8b5b6fce","first_seen":"2026-07-19T03:58:27.938474Z","last_seen":"2026-07-22T10:19:59.423142Z","times_seen":6,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0xs55ggx-x5or.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.739Z","timestamp":1784715557739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/0xs55ggx-x5or.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"766f-19f7e839016\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30319,"size_decoded":11817,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24191)","md5":"8e8d8954c64f8991b0c03657a62fee17","sha1":"5382abc7dfae355d2c5b0d84ff6f27f917693e0c","sha256":"dcb13f9c95de6ba0366c2e438be8592492cf5fb116297e416a8adde55d7b34e5","sha512":"1dad1250fd911725dfd2f9c16d466a2f799db58d49e2a127cb331f6e4b8eaefcf9db77df88cc93fc16a340bcc59762ff907a8c4046bfc201a34582a75965a02c","ssdeep":"768:b6FyX3XNLBXlHYTHwyxbugOmisUNpGOyT5FLIbQ:W8NNXlkQyMQUNpGOyT5NIQ","tlshash":"3fd23cd5b140f8b4979742a0917f8209b23f29bc6c0e8054f7f98ca436259c9e2a3fdd","first_seen":"2026-07-19T03:58:27.925058Z","last_seen":"2026-07-22T10:19:59.424242Z","times_seen":6,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2hcx74mzmjjm2.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.730Z","timestamp":1784715557730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/2hcx74mzmjjm2.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"71e2-19f7e839047\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29154,"size_decoded":9572,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25715)","md5":"286b10e27f0b63e57343a8094cc0099f","sha1":"3cece2d8e35bda433d07e09cf04c409057d02052","sha256":"e7440bc6ad5836136c69d493b510d4a0799b893a21379aa81d76ef5211b138c8","sha512":"12a8c37f385ccb525ee3298abd5f384539c1e571e46ba6bffbfb38e6dc37860a37376644ae0bd504227cc48e674213b53d203ba92b8075e8fc0aa252faabb52c","ssdeep":"384:mCn7dA9UkpFe6hc6umBBwhzqdZICSh4SUWwEmeBEQ0IJT7N:mCn7dAWSFNhomwhzqdZTSgwIi","tlshash":"f1d2e6a972d5f4921b9354a4803f500bf2392c7a286ce0b0b3e6ccf579a059de537f99","first_seen":"2026-07-12T13:10:22.956596Z","last_seen":"2026-07-22T10:19:59.425713Z","times_seen":8,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2-53m74dqkhnw.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.731Z","timestamp":1784715557731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/2-53m74dqkhnw.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"cffc-19f7e839039\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53244,"size_decoded":11668,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33211)","md5":"6a9bcced9f412e7cf40773a1256e1865","sha1":"17e82fa2064e3cdf0d0a74798eb7763c1d403b08","sha256":"4ff7682cc3283955511a5d4f88b95a27fbef2ddc7b9916c568082aecabc8f1c0","sha512":"1e7c6b520af60d8fa8e414c30e303ed9303d3653ce7ff5075d22bd35291c1e77d15d84ef04b78cf8d63ce3b8b9263f6811cda2e1da7afd7c622376eef13b3a5e","ssdeep":"768:7A0ZuJdCHq8di835F9Gwl/v+GMd9mML03RnyiGM:7A6Txdi835F6q3","tlshash":"fb33d5b572d4faa2529380f0d43f2017f23d0c7520ad7470a7e89cdb754898da6bafa5","first_seen":"2026-04-06T01:13:53.060116Z","last_seen":"2026-07-22T10:19:59.426421Z","times_seen":81,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/161-f57mu9olk.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.743Z","timestamp":1784715557743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/161-f57mu9olk.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"9d80-19f7e83901e\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40320,"size_decoded":12833,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30779)","md5":"a80e99b2657b5e8d81bc0c45ad217a91","sha1":"da30be40b0189abe8dbfcad3580c4892e9a64cc3","sha256":"f4b42be6cdbc3c799dbdf32ac89dad1483c0ae9bc00e30e826c48efea6e7b17c","sha512":"3e65f450b0f1f0595c6e802fcc89cc5c57a8fa9791678d14e4824394e154a6346e8508394411ba72f9e8552aed466eaa919da49ff1e26ca5382b80ecb81256f0","ssdeep":"768:PguLhHJNPkOsCH71yZdATNEzzZLKm+lmfom0at3v5aCMOLnKaBtl5N2afBit7W4J:PlLhHJNPkOsMIMTziz3v5aCMYJi7WE8w","tlshash":"1403b561a28131260e8353da54290309afbe79b4178c541fb76c5ee72d52cca4bbeff1","first_seen":"2026-07-12T17:33:41.903376Z","last_seen":"2026-07-22T10:19:59.427254Z","times_seen":7,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2ejqww7jc4eul.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.745Z","timestamp":1784715557745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/2ejqww7jc4eul.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"2aae4-19f7e839046\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174820,"size_decoded":65362,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d0e8e7d51fcb85564ef2ec8c317a7d1","sha1":"c7baf6c49e7f8351bb94fa31fc95e20f58ffc09d","sha256":"2689c1feb38a72c357c1c364a387761b6d94754bbbe5b46a89c75815f1cdbaf7","sha512":"d4d020a99b50f07f2ae4a6c0680904846faa803ccc618b0108a1d9e4c857b730e7cc38b937dc52e330d86fc401a455d987c25554ee5728b0c69a9ef50e19b055","ssdeep":"1536:FMcXlrCaI/5smQPVROsuRuSjJmnUD40MLsUDG3BBN2EaRxt0GzxU7VRX/mJj2Ne7:m2f","tlshash":"9a04e7dfbba0a2f4f045e7f8d71214a8766b29fa7e12c668c3a81d55e54208cdd48dc3","first_seen":"2026-07-19T03:58:27.901405Z","last_seen":"2026-07-22T10:19:59.428268Z","times_seen":6,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1uelwv_w1ge9z.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.748Z","timestamp":1784715557748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/1uelwv_w1ge9z.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"5ed4-19f7e839034\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24276,"size_decoded":7216,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24276), with no line terminators","md5":"5a59d4b47b4db310e67b7d7c1334c45f","sha1":"d0c39f97c3102697fe4bff397ccf909c2f393553","sha256":"65fd82304f8f65af470353881cdbc6cff1c99ec621adbec94529f5f78b387ce2","sha512":"ff4df6087420769e10f4601e0552cc38e23a757337d48b654c8ef5afe2c5d34f81988c3f1825aff911e34e65904b7ebe60ba283f89bc7ac5f7dca7f8d6c9f942","ssdeep":"384:yP3iWjRYhrDZ9iYgvpuvL96EipVpL5R1YHoOh0KU7D5UhEET:YZjRYhrV9iYgvpE9OLur0KiHET","tlshash":"9eb2d7b8a7b4a5cde84207f8d7bed8942b1ea1fef416460dcd1d1420a05399fe867748","first_seen":"2026-07-12T13:10:22.94192Z","last_seen":"2026-07-22T10:19:59.42916Z","times_seen":8,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/image?url=%2FgreenColorDSGN%2Fmix%2Flanding_zeus.jpg\u0026w=640\u0026q=75","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.880Z","timestamp":1784715557880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/image?url=%2FgreenColorDSGN%2Fmix%2Flanding_zeus.jpg\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=86400\r\ncontent-disposition: attachment; filename=\"landing_zeus.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: Y_4qBQwTpbPk0i-5zDrR0Yj5ZRkDGCVELtbSm7FNbUU\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\ncontent-length: 13404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13404,"size_decoded":14077,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73fc6f48440d319d34e826b57723c66c","sha1":"c7b2b81841ac13da844d1bbb545b85586f334db3","sha256":"63fe2a050c13a5b3e4d22fb9cc3ad1d188f96519031825442ed6d29bb14d6d45","sha512":"86a84de203a6d5ebb58f14b8608a47b05706a11ca619f4392ae6edbfd91ac961ae40c73735430d4716d17ed283287fa16a4eab350688cea203efc3292723af82","ssdeep":"192:x0xeYLh6gwhiegVFEhng+1P48PYF3t3TM3LcZUQvMpCv8oaExaiRrJg+ofn:x0x6TU2ngSPgMWvvMJAxaG+dn","tlshash":"2052c15fe19e495190f66031092cddfed7cc40c4b491dec2e0c949f7252b6679750dca","first_seen":"2026-07-12T13:10:22.943553Z","last_seen":"2026-07-22T10:19:59.430105Z","times_seen":8,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:19:17.249Z","timestamp":1784715557249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\nlink: \u003c/global/fonts/proxima_nova/ProximaNova-Bold.woff\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff\", \u003c/greenColorDSGN/bg/landing_block1_mobile.webp\u003e; rel=preload; as=\"image\"; fetchpriority=\"high\"; media=\"(max-width: 799px)\", \u003c/greenColorDSGN/bg/landing_block1.webp\u003e; rel=preload; as=\"image\"; fetchpriority=\"high\"; media=\"(min-width: 800px)\", \u003c/global/countries/gb.svg\u003e; rel=preload; as=\"image\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: BYPASS\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249119,"size_decoded":84966,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"80d8d7f167fe5f3e314f23ba2219ad19","sha1":"18d87084d72c833abdc365c19945c02d271394d3","sha256":"f23e277502d42f615e9bcf0200317e0453a30eb0d1bce6418b8a25b487c937b1","sha512":"03f639220c5e69956a7729f251541c0ff2a9614e4656354e6e5dcfc795b3bdedf43530d8398c3f254a88da57f8b30d481d1e9744b0713f581ef17bce17be6098","ssdeep":"3072:IyHXy5JSNY14aX1lcNhp9FsmaRlnzaqXA/p:IyQGmmaRl9XA/p","tlshash":"50344aafe354e2f4d0439fe8e63b6d75725b60fa6b12855c82dcc91862414bcc9b6cc2","first_seen":"2026-07-22T10:19:59.432427Z","last_seen":"2026-07-22T10:19:59.432427Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":102,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/gb.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.756Z","timestamp":1784715557756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/gb.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"49f-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1183,"size_decoded":1203,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-22T21:27:44.27044Z","times_seen":13318,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/free_reward.webp","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.840Z","timestamp":1784715557840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/free_reward.webp HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/_next/static/chunks/0uncxftugbmq9.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/webp\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"2582-19f7e838dae\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 9602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9602,"size_decoded":10124,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 390x108, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ff1da902b946265f24272fc301815b3","sha1":"395daddb9c99b6f15b2651985a115e6395128db6","sha256":"67f87d0d17d6c7549cb8dfca755651258f123d24bd28e67bf90a6d1777831edc","sha512":"3e60ab0677a151c7eee4111c0269503dad38b9e36e9a7d52e540968d642612aeecaab21091a3c3795943bfcd701b51efc87ffd283a8273a4159484de4a362e29","ssdeep":"192:AXpAE6uvkjO9qzNScQt9EXi9N6y7D+AKbr2i5+q1Hj70rl7zkmt:AXX6s/9qzNIjr7cbiIRjorhJ","tlshash":"35129e54b67eeac19fa7c5ef26f093931236a77d11b1e8c3087d1ca64464930f384a1e","first_seen":"2025-09-28T21:41:24.335314Z","last_seen":"2026-07-22T21:27:44.239795Z","times_seen":10318,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/stat2.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.843Z","timestamp":1784715557843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/stat2.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"fac-19f7e838dce\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4012,"size_decoded":2562,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cbab71b6d96ad7f65cb930bb401ba68","sha1":"48996ecb2d0d7d9c1ecd4ccf994b9a24dd52ec6f","sha256":"a1c783e7030d327da610a9c36e0359b2e07573771468225ac6a6cd3c2d7bf12e","sha512":"5e70c60a35359b551d6009e1f63ebef5911c29a63d89ec24225f48c7f20d33982b1f0353cade31e7f541d3df5d534984b6c69379373d086a7e1c5adf536eb780","ssdeep":"","tlshash":"3881d5d82bf585e4a2869be3df01582c3d0790fa2ec54840f39c6e682f55c7dcd128ca","first_seen":"2025-09-28T21:41:24.398473Z","last_seen":"2026-07-22T21:27:44.23349Z","times_seen":11574,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/footer_support_girl.webp","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.850Z","timestamp":1784715557850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/footer_support_girl.webp HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/_next/static/chunks/1d3pki28fpm06.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/webp\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"e1fa-19f7e838dad\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 57850\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57850,"size_decoded":58373,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5faac5f71c2e22c65bc69c285c0d3696","sha1":"fca1321d83571cd8e5cc3675251b7b1494657524","sha256":"9bdf3122176092018f424668f17ff2671b31372edca458b79c74cd9d499098e3","sha512":"2313bd524395624d329705b1f80dfbad7fe65729a4b5e02a2822ed990a6f9b0d78081b08210c70666d4b6076827ddd27948179654db24209eeb65cbe2ac9a5ee","ssdeep":"1536:MO09/ae5eKf1sIYm1Utg2OTeeydxh7F+euCxPO5U:69d551srmOTOTp+b3xPIU","tlshash":"ce43013c7ae9b930cda1243a4325ddd59c20c652f80b346abf9d86907224d7c9fc39e6","first_seen":"2026-02-06T07:23:24.013748Z","last_seen":"2026-07-22T21:27:44.225617Z","times_seen":9197,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/pt.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.248Z","timestamp":1784715558248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/pt.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"5a5-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1445,"size_decoded":1276,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e9db125513715df3ec213f701b912d8","sha1":"f0fbb6a6e5b7a068d28792280f397a4b879deeff","sha256":"3054e3bbce0d049b0ab3d157a16b24f7a572a7a45e73d342e3b7b8d5f28f0a4b","sha512":"06c04e06e44b97fc2b4379173dcaa7003f3cc5ed58db1697e0934f96878fc16928e08eef9a0be085cafd61b545718da8e8a7d8b456b57b194a51c1e22128c775","ssdeep":"","tlshash":"4a3174c9a335b0c24a17cfa87f2ef3c2044a67f8291c9884708ba90c3955bcdbac4d00","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-07-22T21:27:44.259584Z","times_seen":12536,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/tr.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.254Z","timestamp":1784715558254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/tr.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"2bc-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":700,"size_decoded":1246,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef653f48a5fc82dd7a9a819521830485","sha1":"189b1192a53182c35a9fcfe551b0a878f432cf94","sha256":"94b35f517ef32d8975e2d85ed88428eb3f4a08f8f2857e7cf187dda2b8fa9258","sha512":"a6a75609f5bcbf1ce58cae98ae7a615eb68348891bc83b0db52f28472992afed97bbc01c2c75b5533a7156693ea1abf78aba27c829c14496cfba8393650adf7b","ssdeep":"","tlshash":"3c01fed4d3f94378cfc88311467938e41e9d40bf5291514971d82ea83b71cee8cc68ea","first_seen":"2026-07-12T13:10:22.944677Z","last_seen":"2026-07-22T10:19:59.439332Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/image?url=%2FgreenColorDSGN%2Fmix%2Flanding_girl.jpg\u0026w=640\u0026q=75","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.878Z","timestamp":1784715557878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/image?url=%2FgreenColorDSGN%2Fmix%2Flanding_girl.jpg\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=86400\r\ncontent-disposition: attachment; filename=\"landing_girl.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: etPx2NhcZ3kMSiYxpknDek8Nq7yHtaanwhViSLQbVMs\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\ncontent-length: 9420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9420,"size_decoded":10092,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff77b93ada34f148568bdbc4ba93c84f","sha1":"1548df4238f67e939c5db8312b77987370c901f7","sha256":"7ad3f1d8d85c67790c4a2631a649c37a4f0dabbc87b5a6a7c2156248b41b54cb","sha512":"030eb662657c613e56e867778222af058c744235670b77843ec6915b0d26b0ab1e2565d2ecefda5e2b39feb6613d848cd1d00a2d10f21744f37b657537e8e369","ssdeep":"192:S3mQGKDZEO8LBgQboy+IfSfTIXZiul9IY6fywSPX1GSqERMV0bZ:SUKDZEO8ZzfSrIXEuzCavgtXabZ","tlshash":"6412bece828a6f51b2a55eebcf40011009b60c32342ff191baa06983e4d960bfb70d1b","first_seen":"2026-07-12T13:10:22.932491Z","last_seen":"2026-07-22T10:19:59.440306Z","times_seen":8,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/fonts/proxima_nova/ProximaNova-Bold.woff","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.932Z","timestamp":1784715557932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/fonts/proxima_nova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: font/woff\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"cb64-19f7e838d4c\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 52068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52068,"size_decoded":52590,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-07-22T21:27:44.257855Z","times_seen":25186,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/favicons/greenColorDSGN.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.012Z","timestamp":1784715558012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/favicons/greenColorDSGN.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"5bc-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1468,"size_decoded":1297,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-07-22T21:27:44.230812Z","times_seen":21893,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/es.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.245Z","timestamp":1784715558245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/es.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"275-19f7e838d49\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 629\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":629,"size_decoded":1175,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8224968196d0dd6d84e44c98093c280","sha1":"882b8a579de32e24e13e999b411abd814071cc2a","sha256":"f8cf69e4d0d285ff8e9be18f239b65e38fe1a235086a8daae53b1baa1e7a3557","sha512":"096da45f1e9c9fd020364a51f387110fe6b08969d607a52acd6acf7f01215e15ebb88c93484b7aef1392143f744ca491f8862151d5c4850ec8f7b9d4d419e870","ssdeep":"","tlshash":"bcf049c5743db18388098b742d6e70e6408e721b554814dd70079b28a3aa3df7ac2f6c","first_seen":"2023-04-17T16:03:39Z","last_seen":"2026-07-22T21:27:44.234809Z","times_seen":13031,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/it.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.258Z","timestamp":1784715558258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/it.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"10e-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270,"size_decoded":816,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d4f20f2f1c88447480002bbf675404a","sha1":"e4a918db17e02d130c9733d7457211389b459535","sha256":"41b974254f3dd5b0853af7585c0417998a1ffa52e97e000fe2af3eee2c916d57","sha512":"04e180d7684ab9fefd920a74433c7fdea73380c5ec2588d6174ea6c14a20bdf1ebaf250158977863fd79051cc5012e5da4b9453f88998262b5cdc1672810ad79","ssdeep":"","tlshash":"e7d02b9dd07de0c448229bb03e9e31c142962327364500daf04b271861cc3ef7e41f04","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-22T19:24:40.450824Z","times_seen":13010,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/kr.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.262Z","timestamp":1784715558262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/kr.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"5b1-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1457,"size_decoded":1163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57d2718c0f2330c0e06166d4b5fb606","sha1":"80100720aae2017e911dab7726ce4eeb73851661","sha256":"f69a22143e7948606729b9195cb0fa16993642322f9e21cd84533b28e8083ee7","sha512":"f7596cf54e8902e99fbd27113e9d718a95e60b9cf174897370b2adf3ec866686d1d177b230031c5a62d120ec03963d632aa9dd5ab739f1d02d51faaf7431295c","ssdeep":"","tlshash":"ce31dff66301841c97de05905f36b2d9d608f298d8cb84a5419dff55489ebda6b40a38","first_seen":"2023-07-15T21:19:48Z","last_seen":"2026-07-22T19:24:40.447167Z","times_seen":3315,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0lrpvaomt-__n.css","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.727Z","timestamp":1784715557727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/0lrpvaomt-__n.css HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"a5c-19f7e83900d\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2652,"size_decoded":1363,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1716)","md5":"1f85dfbf62797b5fdfefa320a0006132","sha1":"75a49550aebf0ebf94c45a14c01ebe4ae3691d01","sha256":"242c623a6aad2303a6fdc853346a5cc2d5613efabe124183d1559eba8bd308ce","sha512":"0b8e4ebd2414681d2e51f64fd3270fc6df157d362aa1df7e197099ab7a64fa539cdd9c342702c6623871bad37242c3e4c59db5d942fcd99905377b23b22e06b9","ssdeep":"","tlshash":"19513f478933da65ba37a0452484bb4b027a68429fe216b8f0869175c4cfad27757b4c","first_seen":"2026-07-12T13:10:22.927134Z","last_seen":"2026-07-22T10:19:59.445725Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/21ccidu2vqfov.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.746Z","timestamp":1784715557746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/21ccidu2vqfov.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"137a29-19f7e83903c\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1276457,"size_decoded":564431,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65494), with no line terminators","md5":"2dc6f929233d76e38dcfc80ac0c57f6e","sha1":"73b13778e8efb4d868e320027b87a965c2d31a42","sha256":"329e9c8051ce8a906612045aa40f298329f4898b91be46ceb823368d9b4647a8","sha512":"46c5d218593648cd3ddc6b3c66dd83d5c872dd6c21dcc82c7894726f8e492e8a4867cd6876a1fcd57e5edb83ad27f2c4be4ec3211e9d64a31f44cb924271bd9b","ssdeep":"12288:RxIYTLljXNW4D93yq3F/1hWJ24cvYkeJe2e02xEzaIGTBrfzLd91WJ24cvYk23P4:k/cpw/cpLNgvIh/V7","tlshash":"c825a51cce6641fdae58ac81ca4770258fe286432fd785eddabb6e204fb159f4301e61","first_seen":"2026-07-12T13:10:22.949591Z","last_seen":"2026-07-22T10:19:59.446615Z","times_seen":8,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0n5ikhya7k__j.css","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.750Z","timestamp":1784715557750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/0n5ikhya7k__j.css HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"533-19f7e83900e\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1331,"size_decoded":1161,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1330)","md5":"e63d5f17119424f04796d9d2da198e9e","sha1":"47a1a0bac6c777fa4ae3e4fe55a2b842fcfabee7","sha256":"29abb102cdc668e77bdcba0617c4adfdb4e77b7ca533225809f9463e3a0b4852","sha512":"7c1c38a485ec8a2b7e4ab13b8fcf6dd1a1905f5b92c0b5653d6fd4e7092fd4da9ed3b550cfaf44a04d3f90ea11d9364252083ee8f7b419360759059de3abfbcb","ssdeep":"","tlshash":"ca219e02bf60f10bfaa31c6de5a4d59a70418306d76a47ecfe834787a05e1c39fa1a09","first_seen":"2026-07-12T13:10:22.924053Z","last_seen":"2026-07-22T10:19:59.44745Z","times_seen":8,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/landing_block1.webp","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.754Z","timestamp":1784715557754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/landing_block1.webp HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/webp\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"22f94-19f7e838db3\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 143252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143252,"size_decoded":143777,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1692x502, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8201728c6e2cf2db0d1c3c296e9ec4f8","sha1":"1c5b38584ae934775d0ec23c9b0ebfa494bbb8e7","sha256":"308e698488e68037d3a4648279c289467061190da02ace13bddcff1f7dfb24a0","sha512":"76993a0e63c176ce55b170cfbff41c65712a660f800904f7ee54e504e66df07343bbfe33d810cefab3d7e959046e5bcc49685c1d82259c5cbe0d30902ad16923","ssdeep":"3072:jvdXxTC52KjJbmSFgMLRAQPodctih7E4opiSOVmDjXvzV:jVVC5/mAtLRoctiREXpUUDj/zV","tlshash":"3fe313be76b10ae8a8801cdf021e48b97f355f1355ee01c67b27a68f05a3519b5cdf0a","first_seen":"2026-02-06T07:23:24.023009Z","last_seen":"2026-07-22T21:27:44.232795Z","times_seen":9194,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/preloader.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.852Z","timestamp":1784715557852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/preloader.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/_next/static/chunks/1bnv6wez2p6rj.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"674-19f7e838dbb\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1652,"size_decoded":1425,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4cf0d8e07d5ff0a22dde176b5e6926c","sha1":"bb3f41bbc80202459f3bd9a27054f855523f8ea7","sha256":"caa934ceb360955e8ef4eae0984d9ee475137fa2eee2b013586e25461bc1703d","sha512":"03fa93b18e1610abefaaeee02782234d164bd6de0d27aff61c5aa02e260d50e0b69233306e46bcabac18c6de2ce085a5859bd4ee71c2480acb0e4a719a3c5123","ssdeep":"","tlshash":"703122c04abc425cf604a6a9cf122875be1a64ce578564baf3ce9d06935805b8e0299b","first_seen":"2025-09-13T11:18:32.012309Z","last_seen":"2026-07-22T21:27:44.253542Z","times_seen":21903,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/api/extra/postback","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.076Z","timestamp":1784715558076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /api/extra/postback HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\nexpires: 0\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109,"size_decoded":586,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0a292e7c9e62e7d3b367ff61d7fcf618","sha1":"64365923c1efc16243bf1c60953e19e5b03adb18","sha256":"0264d417c2e6597c7e0fc82b4d0e0de3ea20210d318d97e8aecedee417819ea5","sha512":"7ac882a373e1f482ae071c1aee5c256fcf47ddc0094b678c021193e31ef935f385e4bf342605b30080bc22bc8ed0834641b73e0111ba636f029940a208b9110b","ssdeep":"","tlshash":"31b01207252ca2630d33b3e33c738b0000fc0e40200c9a10c1182f2aca4ec7103dc3c4","first_seen":"2026-07-12T13:10:22.960798Z","last_seen":"2026-07-22T10:19:59.449999Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/jp.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.261Z","timestamp":1784715558261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/jp.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"ea-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234,"size_decoded":779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a58d8e5d92ed893921b644bebb7cc3e","sha1":"66489712a0cfaa93876ebc7168a32c729fcec066","sha256":"b964f3dd88f2596555a34c7ca3dc575aa061fa455256f0bcbfffaa62ee771c7b","sha512":"b88069e21cfaf5612503a845e79d159b57a71dabf3ce4b25e917dd3348f6371dbcd18469f426b8f9e4c19adcfe5f1b3c33547f8df1144f397fe0b325283ae406","ssdeep":"","tlshash":"a4d0a7a4d169d9c64810cda83eaa32c1554e53373645226bf0477b18e4cd6ef3245b78","first_seen":"2023-04-13T03:03:27Z","last_seen":"2026-07-22T19:24:40.476742Z","times_seen":3495,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/cn.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.263Z","timestamp":1784715558263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/cn.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"2b8-19f7e838d49\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 696\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":1242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d39728b84718665ada444d92579fadae","sha1":"11fb0d75502abe17cc325fc4c77fe0d3f507236d","sha256":"4db67ee7fc03992f7c0d6cc737441c67aac931442267bf896cd78d4c3e97ddcd","sha512":"3e0d290cd9f2b52709fe020527c4888c2a14d0f617de2ac2e4410526838f7b46df1e78cd9d15f6558cae357d8da73cba72efa824b1063dfa36e876d0661c0b88","ssdeep":"","tlshash":"1b01c09dc135e2c845ccc9987f4535ea141ab27a40b134c164c7ba58600bcfcf649a2c","first_seen":"2023-05-17T19:49:17Z","last_seen":"2026-07-22T19:24:40.45896Z","times_seen":3430,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0uncxftugbmq9.css","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.726Z","timestamp":1784715557726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/0uncxftugbmq9.css HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"14b9c-19f7e839014\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84892,"size_decoded":14227,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d88f2ad8448d8c4539ca7f8511ebdf83","sha1":"19cdbbddcb7ae2ccee8c4f0d9ee2e400cc1ce2e7","sha256":"c0894972d4a0fe5d89e46717d58e4a1657f62c622067c195a2df2050fa778b14","sha512":"45d81bd7a6f6f2552e759953aa800529822f051c4879bfbf6a878006158a945fb95f70bfb3facb934fffb5eda6792242721a499978b0d49ef7e193c2e34465b2","ssdeep":"1536:uh812iKVg7+UddO3CmoEpt6dBN/dilkbP6/4Nw9cXw+qicehzXu7Cg:A","tlshash":"9e83ca715339e03cbd77a82375c166ce7079d203aa73a6dee5a4b53980c76933a2274c","first_seen":"2026-07-12T17:33:41.88909Z","last_seen":"2026-07-22T10:19:59.452342Z","times_seen":7,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0t1cupau1mtgy.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.732Z","timestamp":1784715557732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/0t1cupau1mtgy.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"374a2-19f7e839012\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":226466,"size_decoded":71388,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e65fa82058c40728d63413e352e7e834","sha1":"28b8f513935e450b29d4f31614c7d19301e2569a","sha256":"adfbe7cf3782ef2c3b8d7ac2d4549714353417e82de30163258f9dd4da52dcd1","sha512":"486520b53bf0a1e2bc52021d78124a0641b8798c11a9efa0a5013e7a6f73d93ea9b7174410e5684519f193deaeed1f583700818b071fa678ec1e64b4bd6287c6","ssdeep":"3072:M1Jtr3M4rF8Og/7NqDIQtrcRlazbJ8JcQHGXX5MubGvngKctS5:M1JtzxrF8OgT5QLQGnRivngKctS5","tlshash":"ba24fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","first_seen":"2026-07-06T15:14:58.078421Z","last_seen":"2026-07-22T10:19:59.453156Z","times_seen":36,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/2nsq1ek51g625.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.734Z","timestamp":1784715557734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/2nsq1ek51g625.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"219ef-19f7e83904b\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137711,"size_decoded":38070,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da41fcae8900568d2d69f7784b94558b","sha1":"63a15a20dc03f9e4a95e3d8ea63e983971e6847e","sha256":"2a525c5d0366a8e61ba5c781ce15b00dc547be61e47bcda608a63e3d6d435462","sha512":"8549291a29f0f1710c142623754f9f2f524dd0018b3c09754a0af394cc8acb87cfd6b8824bc53e2b0c878dfc8ded0bb44ac7752dd9b545416d937b748148215c","ssdeep":"1536:L1A+g9MEnjxzsYo6dZcYp3zW0VOQd44bIApz0Hpsv6aYcafemr/W+eC07TP8ETOR:gTjxlo0ZN/VOQd447NYcammS+v0vPMXB","tlshash":"26d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","first_seen":"2026-05-07T12:23:58.018891Z","last_seen":"2026-07-22T21:40:14.417596Z","times_seen":698,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/turbopack-0fvmr0zxyg2g-.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.735Z","timestamp":1784715557735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0fvmr0zxyg2g-.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"2955-19f7e839074\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10581,"size_decoded":4741,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10581), with no line terminators","md5":"965cb56b0b535b9a1b91fdc00573a1f4","sha1":"23c27f564b87708a080497b9f16b7bfc9cb7c1ca","sha256":"e0b4311bb3499a2e3b3566596fff1b2b00178dc94bdc0a0df40f82a2f8e046d1","sha512":"504df80e497188b3bfa18d8fda946db499928713e6256a8d6c5661bd0b747806a10d2f32ee569c29b31218ecf35b55a9f0271f3057268feda3c97edd2797916c","ssdeep":"192:1v4gMSBC88Esg6+9ErUO/lhjTNWn+S3sBT4fCT3cXXqroor2:B4gMSta/lHW+ssqCTMKA","tlshash":"bf22c7da37a6f073436f94eb906b4004f17984a9145e141cd3aca8e72c394aa85e7f76","first_seen":"2026-07-12T13:10:22.939637Z","last_seen":"2026-07-22T10:19:59.454632Z","times_seen":8,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1ntn7efqc-iiw.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.742Z","timestamp":1784715557742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/1ntn7efqc-iiw.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"d5eb-19f7e83902f\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54763,"size_decoded":13529,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54761), with no line terminators","md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-07-22T21:40:14.397223Z","times_seen":3151,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1fb3j65e4wvcr.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.743Z","timestamp":1784715557743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/1fb3j65e4wvcr.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"125c7-19f7e839027\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75207,"size_decoded":28086,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35295)","md5":"67b78c5f38c5a3406b794278f298866c","sha1":"36bed9981d9400e6721c78b15af0a211467a0a8f","sha256":"a70a038fbd1fac246c60b62572f04f54af05f867b57f683237ab33ed68f76ef0","sha512":"fb21c997b9d09608fe9523b61d823cfb0198381941cf811039c96a85b2ec3454effe113630dc0c8caaf90eba7a58912ce713192416d29528b15c34140d89a887","ssdeep":"1536:fQcA6Et7IqZu0ldNTInBAfxI2D6OWIbZYMeYUZrMf1:fQpdNTInBA5j6y+rMf1","tlshash":"84733aa5b3e8f5e4e047e3f4852fd028763b2df97a29c41863e85c54a96008d60b6fd7","first_seen":"2026-07-19T03:58:27.934177Z","last_seen":"2026-07-22T10:19:59.45621Z","times_seen":6,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/0puoh-ufu3dvd.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.747Z","timestamp":1784715557747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/0puoh-ufu3dvd.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"4aa30-19f7e839010\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305712,"size_decoded":77522,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c34713f1998087fa2f84273eacc37529","sha1":"88f514d8919109375d2f8a8463166a750559f955","sha256":"bfc31f28f01cbb5a04055228926786bff77d17f0b284905e981208afac531cb4","sha512":"adef4e926fe03da281afdfbc67191599be9c5b11e05b843efe650a03921600547f4e6a2953b216f598aaf48239ae83fe68404bf068dcf7357f2e18b06f37626b","ssdeep":"6144:XcrljpAQmINGbpJGDc0Lf1c/2sD0ecI5BEs:yljc04D0xI5is","tlshash":"015419597254343805c540a9906f094bf736292e246ac49cb36cf4efa8bdecd31beb79","first_seen":"2026-05-01T16:22:52.57421Z","last_seen":"2026-07-22T10:19:59.457098Z","times_seen":18,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1bnv6wez2p6rj.css","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.725Z","timestamp":1784715557725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/1bnv6wez2p6rj.css HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"18796-19f7e839024\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100246,"size_decoded":19517,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (64709)","md5":"c554437c4d9f4a770caaf47cb614d601","sha1":"650783df2c56a14a460e95cee570f18d812ce1d9","sha256":"76626f81e1860a87dbd42024d275c49215cc472630c1f5d545e0c2afd96ccfd3","sha512":"8ac72d53fadc5bbeb55c74db56d2b8eceba6eff2547275b9070330e5fbfc8a488beb962d9fa794701b7fbdf4620514507e1c638ab239cbcd26c2cdc550161951","ssdeep":"768:CDkLpv8OTLkkAmfSKLakdx/+dSXzMvzzibA1yq0d15ulAFAF2cf0Vam:CDkdv8qLPAmfSKLtb/+dSAvXiHIMp","tlshash":"29a3e836a230913d7ee76935ba9cb98d313ac082ab3356def5597e25c1c70a33653384","first_seen":"2026-07-19T03:58:27.937028Z","last_seen":"2026-07-22T10:19:59.45788Z","times_seen":6,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/fr.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.247Z","timestamp":1784715558247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/fr.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"10e-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270,"size_decoded":816,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1a36c711f0ae0ab46c7dce06f63a723","sha1":"5cff6743ac6eed2912288bacd35c363a2d586d18","sha256":"861059eae96aea4c38466209edfad68fbd84ada37bae4ccac92d03011046a524","sha512":"e8d4869bd8d77613770a36de15c23dfade7a3bf3a465c4a6c79be55d9d6660874b5cbb60e631f04964840d3b4d736ceb25f31b30779e8d5ec64023f8e855cdeb","ssdeep":"","tlshash":"f0d02b9dd07de0c448138b703fde31c1418a6326364600dab047272861cc3ef7e40f04","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-07-22T21:27:44.220307Z","times_seen":13051,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/in.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.259Z","timestamp":1784715558259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/in.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"8fd-19f7e838d4a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2301,"size_decoded":1312,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0c892dde95804d59b20416b8db9fcbe","sha1":"41f09b07a8c26144aff93575ba4a07a0122bdae6","sha256":"aa82222076d0dd86dc6f37947faf10333212886549a33c4fcf6b44141b702018","sha512":"8eadf55e31f49edebffdb864eeec76900caf6f5163d2e3cf1988757271bb7c5e2c26c3986b4fe5b2f8953e733ea0c4bf4fb3cce0ec4d1010e20f5125abde3ac7","ssdeep":"","tlshash":"2e4165a9717df8cd9b01c6fda63bb9f1b00f50496b12d3a9b55b0f0a481a4fbb0056e0","first_seen":"2023-06-13T16:46:48Z","last_seen":"2026-07-22T21:27:44.239052Z","times_seen":12595,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/3rz20y42s53q_.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.740Z","timestamp":1784715557740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/3rz20y42s53q_.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"1ee8c-19f7e83906a\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126604,"size_decoded":31988,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f28d4baf4d3f9fac4122c5f7409d7b42","sha1":"dcb4b11cf9d0afaee8bec73d7f7c439e3ba938e1","sha256":"6240f5962e8fcfa0483c95d864ddd5d0e60b5096213ecd3fe1ff0d0772d317ab","sha512":"38a18d507ee1d995437f1c1b1201093afda3ea691e8b8c41262283d277c46cabb04242172673dcfc6ffdbf2a637c5ae3e7196070807c466eb9bbd653a6baac3a","ssdeep":"1536:3nSdcUEwZ6wxkszpGBpyfF2IerOSmF8eYSOWIbZTETWWhIEmAW5:3S7+gYuurEy37Ea","tlshash":"2dc3e9db5358957d7403c7accb33b0b2b66f15faba5ed280139e8738a5064ccea219d4","first_seen":"2026-07-12T13:10:22.922845Z","last_seen":"2026-07-22T10:19:59.460252Z","times_seen":8,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/fonts/proxima_nova/ProximaNova-Bold.woff","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.720Z","timestamp":1784715557720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/fonts/proxima_nova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: font/woff\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"cb64-19f7e838d4c\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 52068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52068,"size_decoded":52590,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-07-22T21:27:44.257855Z","times_seen":25186,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/1d3pki28fpm06.css","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.729Z","timestamp":1784715557729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/1d3pki28fpm06.css HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"10e12-19f7e839025\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69138,"size_decoded":11437,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"86961758129a6d1c9ecf9f0e30ba9109","sha1":"9428375a4b5b7d7750ddfe9239e7e8d4bd7e11ed","sha256":"8895f50862a91797382d654337a93e8d137f39e45ec08baeb3f5046ad21d0392","sha512":"6e78442a3c61b87ad682bfe2fe5817cd3d9f21fd31062d7c97cd7d3b4df858d631a52c11ded3922b85c977b0cedd4d214bef95d3f3fc27a9200bc25a02a0560f","ssdeep":"1536:+GPImqiozxManQpknVf/mHtTDt95ZW2KGoW2KbeHEQqIP:+Gwm4X","tlshash":"49638422b624723cb87799953941bbfd305c8b07963b86f9e541a53cd0c79e32ba3748","first_seen":"2026-07-19T03:58:27.906085Z","last_seen":"2026-07-22T10:19:59.461031Z","times_seen":6,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/landing_block2_semi.webp","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.848Z","timestamp":1784715557848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/landing_block2_semi.webp HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/_next/static/chunks/1bnv6wez2p6rj.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/webp\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"2c864-19f7e838db6\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 182372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182372,"size_decoded":182897,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03a41ebfc2822966ccc84b5f11fb4f37","sha1":"8a03e5c17973d563e27d03be49e710e14c70d862","sha256":"c6c3494d6e8ce461c4d7b6d1003a9f6c5131d4bfbc81150f033713cbd161c50d","sha512":"feef02093801d484436151ede3a28e4a652c7614aed8bd49972100bc8e7fe24d276415b4be84c6bed0ba871af142c1ca12d405f8a7fdb2d43f9820dbcefc3a62","ssdeep":"3072:ReuoArLIEpV1NVfhqB14todZgaqt6eOLZCfBEunnFvrQbOPPFp8+AjJZP5o3mCoA:o1A/vfh+1Tiaqt6H1KtYOPnaNg3mQ","tlshash":"5204122892bed919d2d85bebc73d50da380cdac3ece73623df162435640c9d39722666","first_seen":"2026-02-06T07:23:24.025684Z","last_seen":"2026-07-22T21:27:44.243504Z","times_seen":9197,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/_next/static/chunks/3a0yp5de6vyxz.js","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.749Z","timestamp":1784715557749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /_next/static/chunks/3a0yp5de6vyxz.js HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"5f1b-19f7e83905b\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24347,"size_decoded":7238,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24347), with no line terminators","md5":"d2a333d8a6e145659b2a71a3922f78d5","sha1":"0e9c69579a6af014a575ad6c06532c18269af2d1","sha256":"7dbabed0bacde27e6eac24b98e0be71acb72147a3b5ff971fdd072175be5e4ea","sha512":"1f376ab604cc08f2226b641a8609231e35647fa6d4df89054d02e106c1e41157f2e1594081d70e7d4f702f746579768a7fb1bd38dbdb92b105e79bf0767e6265","ssdeep":"384:yP3iWjRYhrDZ9iYgvpuvL96EipVpL5R1YHoOh0KU7D5UhEEsS:YZjRYhrV9iYgvpE9OLur0KiHET","tlshash":"1db2d778a7b4a4cde84207f8d7bfd8941b1da1fef416860dcd1d1420a05399fe867749","first_seen":"2026-07-12T13:10:22.93038Z","last_seen":"2026-07-22T10:19:59.462578Z","times_seen":8,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/stat1.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.842Z","timestamp":1784715557842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/stat1.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"e34-19f7e838dce\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3636,"size_decoded":2378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62014bb87def86bc408bac073b0cece","sha1":"24ce6cf0ee0ebe7956bc76e9bd16151ec3da5244","sha256":"69a3b7fd361a9307dd99ab7a8c12c3178f4ee11e5573a2c0f78fd014e04f4b64","sha512":"ee7ff1a7a9cf304d61ac90e25998182241854e3de44df25fd9541b3caddb222d206a4d3fa250e4d4d64ab42d595f79a0e24fc21ec4fb753f0b7ca2d64eb73282","ssdeep":"","tlshash":"d771e6cd2be812f0ec85b7f6df06642cb80e14b2598848b8f21d1f557b04ce98a4ac92","first_seen":"2025-09-28T21:41:24.045294Z","last_seen":"2026-07-22T21:27:44.24929Z","times_seen":11573,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/greenColorDSGN/bg/stat3.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:17.845Z","timestamp":1784715557845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /greenColorDSGN/bg/stat3.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:17 GMT\r\netag: W/\"ef3-19f7e838dce\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3827,"size_decoded":2463,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b07edac84752d7c56e382e1f7656115","sha1":"1ab72bc6895070dc7d55c8d87d4f4f907c19c019","sha256":"979df951bda3030c2abf6f6508fa7d5914c95535e4c0ed1f20a836cf2857bcbe","sha512":"97c1a7ff703378b6ae5555c686ab628ac9387b52614d1144beb72d575391ae717a0e25c981a4de8366948338760c57c8a8c19913f1d8b37661a2e96c1496af66","ssdeep":"","tlshash":"9a81b4ef5fd402b4d889d3e7ee3214993e4360fa5a8a0d04f36cae89575585cdd1a8c3","first_seen":"2025-09-28T21:41:24.193021Z","last_seen":"2026-07-22T21:27:44.228207Z","times_seen":11572,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripwin.homes/global/countries/de.svg","fqdn":"tripwin.homes","domain":"tripwin.homes","tld":"homes"},"ip":{"addr":"154.86.119.65","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripwin.homes/","date":"2026-07-22T10:19:18.252Z","timestamp":1784715558252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripwin.homes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:00:10 GMT","end":"Sun, 18 Oct 2026 16:00:09 GMT"},"fingerprint":{"sha1":"40:DB:32:D2:71:63:91:06:89:F1:76:79:43:40:F5:6F:FC:0D:BF:22","sha256":"F4:31:51:FB:B9:69:3F:6E:4A:81:36:73:B5:CC:7F:47:E1:E2:86:5F:5A:63:0D:0E:F8:7F:DE:C0:5B:32:AD:0C"}}},"request":{"raw":"GET /global/countries/de.svg HTTP/1.1\r\nHost: tripwin.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tripwin.homes/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:19:18 GMT\r\netag: W/\"10f-19f7e838d49\"\r\nlast-modified: Mon, 20 Jul 2026 07:52:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 271\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271,"size_decoded":817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"939afd91bea7074f84f4a328ca095295","sha1":"1a8edb7520cb812fd35996134ae823fe8ade03d9","sha256":"8e3c8f938c6fc4fc97c81f398a71d0d789b44b6be458469d7056372a2c05837a","sha512":"a3922e78b9ac5209cabea2c0945d474d24035a4e78297b3105779cea945b931ae83a59ffbf73e2877f2da42e0ff7fb5f23c297c1d7f7d09da3644ed63d82ef6c","ssdeep":"","tlshash":"c7d02bd8506ae8c04d16c7603e6c32c1288a6259238800dff0835338a6cb7ceb745f50","first_seen":"2023-07-03T07:07:12Z","last_seen":"2026-07-22T21:27:44.235477Z","times_seen":13035,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"tripwin.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}