{"report_id":"40539a20-5fc8-4810-a45b-fc9d810e8aa9","version":6,"status":"done","tags":[],"date":"2026-03-01T10:51:29Z","url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"title":"en-us-suites-trz.umso.co/","dom":{"size":57802,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16947)","md5":"019e1411ff8b82cfd3827afed22ac97e","sha1":"0e0aa9dd1dcc92d076b73c295bb83d49f0826331","sha256":"92b948007d72b1f96c80730f4397fe8446cdce0d4d84b0b99909ddc7e61f595d","sha512":"d76a9cfb2e40588e7f69ac340b50dfcf1a952f03a21ca8fbb5aa9f56f85e7ef7645060a2b0c55e43c1c98b4f22c93edc5614c947fa51f43b5a28b26822bc9eb2","ssdeep":"768:KKT0bFvI0NAKT0bzq0k6Kw6MAx0xsYWFbdhWpBOF/GpyQJFRFXX55FqSGzpUt1Lf:AC47xdhWpBOtGpyQJj9zUSGzpUtD8AN","tlshash":"4d43185132541224ba27d1f9b46bab6833399006e61fccac7be4116d1fc93e5c6e3f58","dom_hash":"domhashe737c8a19ce4f8ee50af6c30c7a50ff2","first_seen":"2026-03-01T10:50:41.93002Z","last_seen":"2026-03-01T10:51:30.259178Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-05T10:51:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"en-us-suites-trz.umso.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":21318,"sent_data":661,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"umsousercontent.com","ip":{"addr":"104.26.12.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-06","domain_rank":1597821,"first_seen":"2025-03-07T08:22:43.379124Z","last_seen":"2026-03-01T10:50:40.445648Z","alert_count":0,"request_count":3,"received_data":82089,"sent_data":1477,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":5,"received_data":187079,"sent_data":2875,"comment":"","tags":null,"fingerprints":null},{"fqdn":"en-us-suites-trz.umso.co","ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-08-31","domain_rank":0,"first_seen":"2026-03-01T10:50:39.934649Z","last_seen":"2026-03-01T10:50:39.934649Z","alert_count":2,"request_count":2,"received_data":58461,"sent_data":1047,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"11ee8eaca3fa322852c0cdc3299d7e56","sha1":"254fea4b3ef72ca12e41e0209a233dac513e4967","sha256":"d2dfa55654b9b12c9c195ac4b836d3b0d7d96a5805be28099eaa77a8daabb2e9","sha512":"ca77212f57d7424abc3b714de070f0a7fd03f16d0b1c668ef7f4dd1f03891f129ad00416ea03f4c98c351928f3670d22e223b43fd1cce4b73e8312e498fcb7ed","ssdeep":"","tlshash":"5a90040c0501577404d30dc314f3c5c475315cc1d4d5511440575c05c5404c7dc11ff0","size":43,"data":"","first_seen":"2025-08-08T04:52:02.745384Z","last_seen":"2026-07-13T21:30:58.843408Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"52a462d5980dd4700fb5b1c01f8d1551","sha1":"7c283fec38250614bc8fb64859b1c31d03451c23","sha256":"0f298f8e08186226cacc71c31d70200e5e8d5bf05c52d6beaef9bc0a5a631cdc","sha512":"4878e2cd7f6116eaa2914a2ab0b2a8a7b823f2906afad8fd2331f512c883d3d5565da7e31e31d78a5caca1e4450b1c813745712c0d72b6dd63847c4ee87ff623","ssdeep":"","tlshash":"f931ac3a31540e3b14e79ae791ef86dc3633058aacc3102415b4dd8b1e398d657b3dda","size":1542,"data":"","first_seen":"2026-03-01T10:50:41.939251Z","last_seen":"2026-03-01T10:51:30.266078Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e2920dd79778ae050103ada7d565f43","sha1":"78dbc2811117556271990cc07bbe8f6bc11f9f8f","sha256":"99e0bbf75dc76246bd1932650018bc1b7e2bcb5be3914e01f161c59fb9375807","sha512":"e0ca3aa571eaed95e62b390b11d5faeb0cae27957bb0a3629ec41ccb84cfa43f766835d070af6b3c87002f935580358bddae72ac232a78b618176f82b928cfa0","ssdeep":"","tlshash":"2d01c042365fb06ea293057bc43e02055e36199836728058ba7c544b2c6e9065f276bf","size":699,"data":"","first_seen":"2025-08-08T04:52:02.74785Z","last_seen":"2026-04-19T22:27:43.034718Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6faf1363b38ce04327595e26a4fd982f","sha1":"72742171feb07c125644a8dae213b0f788763f9a","sha256":"41b463d1ffab195e5a0d88fbd5c09ceaac6cc57a05b006e0d21db521288a85c3","sha512":"9416f72f5876a994b22d048d0530636b4501d44c4f386e0f567ec4a9578b32bfd1082d3b546271b6d12fb8cba8c11ef30708e4417022c358ad2aa44f3bbdcca9","ssdeep":"","tlshash":"98e0abc85c3c297501be6cff1a9a1fa9b813008e3a0cd08d746d4d4b2d69c5b19230c6","size":429,"data":"","first_seen":"2023-11-06T21:21:32Z","last_seen":"2026-04-19T22:27:43.035704Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1adb0e8e20f63793ece39df65c7e21e8","sha1":"3e7eaa894254fab2a2b2be10c867c6f626410ad5","sha256":"9ea251c3dc46033c4c437e22350dcf838b118bc7123065d39a2f18092f5958c5","sha512":"bee2192185e20d2c39775e374f1bb3b78ecf54ebf7470f29a53545525768af49c6071348d3a44383d769621e5bae752c11a0294728c964f0a19583f92bf9bbef","ssdeep":"","tlshash":"f12110eda05611b311b730bba6a3a30c217602597003dc9058e5cdd328ae90fd9e6e8c","size":1408,"data":"","first_seen":"2026-03-01T10:50:41.942033Z","last_seen":"2026-03-01T10:51:30.268088Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f8ce13774d6598e867e4105c28966c7","sha1":"95b0184f34d5d50660128bb4e4465eb3ae7abf2c","sha256":"03d842a30541ea92050b3a65d8488d85d77f5d583df023e10af96a9177354cf9","sha512":"744630831c943a863cd3cdf344ebb75c1bcb30d9bbce7dc470a4edafe207b00b22543fc5cc1cf06daf7a170e71ae36d182f68a060d26acf44bfa62a1f6142ab6","ssdeep":"96:98B5TZIOjGK3hAuEMbOmyDihMZwByXIlvd:cTZS0uYRXyXIn","tlshash":"ceb1c7ea39106b7246df51b0e09f9f0bb6754067394f1804921decd43878aaa425ff78","size":5298,"data":"","first_seen":"2025-08-08T04:52:02.756507Z","last_seen":"2026-04-19T22:27:43.038964Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,wght@0,400;0,500;0,600\u0026family=Cormorant+Garamond:ital,wght@0,700\u0026family=Alegreya+Sans:ital,wght@0,400;0,500;0,700\u0026family=Libre+Baskerville:ital,wght@0,400;0,700\u0026family=Fraunces:ital,wght@0,600\u0026display=block","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:ital,wght@0,400;0,500;0,600\u0026family=Cormorant+Garamond:ital,wght@0,700\u0026family=Alegreya+Sans:ital,wght@0,400;0,500;0,700\u0026family=Libre+Baskerville:ital,wght@0,400;0,700\u0026family=Fraunces:ital,wght@0,600\u0026display=block HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en-us-suites-trz.umso.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Mar 2026 10:51:08 GMT\r\ndate: Sun, 01 Mar 2026 10:51:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20632,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"db75acbac3d6c3378233f7d936292562","sha1":"31de3ed25ce3503bf22aae173ad3cbfb93711a7b","sha256":"92631609ba02ed33b00c807daaa13927fdd20ec2bc9134015455ada4da9e6f15","sha512":"366f08048d8ea4142b88407149a4c597dd99280f8c32da48e49966dcbb6896000392a4a6d920d79802587149209d7b4635f9b7aa35e9bbfdad4ffdbdf0cc40a4","ssdeep":"384:JU56m0SHDnAUT/YfmCzwy9pIZo0TF6CPSow9f:Jc6mtHDnNT/smCzD9pao08","tlshash":"eb920092042be940bb931cc677cf7e3aad8e10566045c5b99ffd1c88acdec261361b5e","first_seen":"2026-03-01T10:51:30.260002Z","last_seen":"2026-03-01T10:51:30.260002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":140,"dns":1,"connect":10,"send":0,"wait":24,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umsousercontent.com/lib_hpSYtQVhJEHeMlQy/t5awc8ovl794lkq1.jpg?w=1200\u0026dpr=2","fqdn":"umsousercontent.com","domain":"umsousercontent.com","tld":"com"},"ip":{"addr":"104.26.12.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umsousercontent.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 18:57:06 GMT","end":"Sat, 11 Apr 2026 19:57:05 GMT"},"fingerprint":{"sha1":"F9:E9:B0:53:79:83:92:F2:83:C0:DD:DE:48:AE:6C:AE:DD:B3:F7:CA","sha256":"BA:89:CF:74:94:54:2A:9F:00:43:3F:CD:8F:E8:C4:BB:21:1B:A0:AF:17:15:D9:D9:C7:84:64:DB:1F:45:9A:AC"}}},"request":{"raw":"GET /lib_hpSYtQVhJEHeMlQy/t5awc8ovl794lkq1.jpg?w=1200\u0026dpr=2 HTTP/1.1\r\nHost: umsousercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en-us-suites-trz.umso.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 10:51:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73271\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nvia: 1.1 ff78b299270b99e41cda1a1252610524.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Cv4Yw33E5J8%2BcGeesEdp98JZ7zybADxwEqMyGev1W1ScOV0C4x4YA6EJ3ZK514XkjgxYSwKgwutsNoE7mh4FN18v1%2Bwh4x663vS90dnjtsjNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nlast-modified: Sat, 15 Nov 2025 04:45:39 GMT\r\nage: 9180328\r\ncf-ray: 9d579acfd968dd16-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":73271,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1894x1070, components 3","md5":"bba41098a00f9a00e6c506f8a9378c3e","sha1":"d87d19636651113cc5bf8a3a30eeab3b4afac947","sha256":"17c497db0afdeade5280e75c72f9764520a4577d463bb299f5b53c0471c77b7b","sha512":"27b96853b1b287e3db4c1328e47a86be294b3c43fb30ab47f29aacb250d971a18255ae7d3eae9b60213d69026f091f7f8583f0baeae176e672fb489d10ff242b","ssdeep":"1536:aFFYJAmGf5Pwj048zEsj3sLRshG0WXhwRox4q8VJ:eYumGhwA48AgmXhwU4x7","tlshash":"6963f143ba046d84e56eb237ed9bbfc778820a836fa034b5cf412f1469d87e94613479","first_seen":"2026-03-01T10:50:41.932813Z","last_seen":"2026-03-01T10:51:30.260792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NUh8FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0K7iN7hzFUPJH58nib1603gg7S2nfgRYIcaRyTCf7T.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/fraunces/v38/6NUh8FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0K7iN7hzFUPJH58nib1603gg7S2nfgRYIcaRyTCf7T.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://en-us-suites-trz.umso.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Feb 2026 01:30:15 GMT\r\nexpires: Sun, 28 Feb 2027 01:30:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120053\r\nlast-modified: Tue, 09 Sep 2025 18:37:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18096,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18096, version 1.0","md5":"b8dca52ca5f9e27747e5db1cf8820465","sha1":"11682a0554e03989ff7ece38d11372a68035128d","sha256":"3a1de7711d147bad4422825045f87597fd77cca72e7c96d3b0a81735d00dda82","sha512":"983a5377a1a2c6f7291b19fabe0d0cc8babf4bb4e7cbd5b6a5b1c74b47dd17a3dfa8c9e3f26c28dfcde9daadf5a46ba63ca42113ce313d1e7357a90f9cde367d","ssdeep":"384:yjvUQOXjh52l2I6Y8laoyF86yMOScq+LzIO7J+oXDhzkrJC6IZpES:ylQjz2l2e8aoyFE9LUOrhArcPB","tlshash":"d682c06d7fcb2ac04894683c4ec52935d2b5be322d411398c6fddbcd0a1b7520de89ac","first_seen":"2025-04-24T12:32:16.391311Z","last_seen":"2026-08-20T02:11:01.212265Z","times_seen":447,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":16,"receive":2,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/librebaskerville/v24/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/librebaskerville/v24/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://en-us-suites-trz.umso.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 18:58:52 GMT\r\nexpires: Thu, 25 Feb 2027 18:58:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 20 Nov 2025 17:08:13 GMT\r\ncontent-type: font/woff2\r\nage: 316336\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33872, version 1.0","md5":"9e3a6b8702fdefcd8707583c3a8ac668","sha1":"b1bcbff31055046eee9cd71ed2fdcf4bf1f47f75","sha256":"22219fb90e3b9bd28debd1825fe8d9a0154a0e31f8b3fa601ac1a0a5aa5e6d1b","sha512":"9f5e12bdebdb488860d38fe973b7047de7df43e1976f050e2b73ded38fbf5fdfeec4c4f7c99b05bcc6633c65e97ff9a4c206c34498fde348cd01b1f88b2b5593","ssdeep":"768:d9ogmsKEHeO6zcL98WmToodwwD3x99QqmM/kX8yjXJYW9oxLWK81HhH:fobsV+6wdnz5yFYjxLBuZ","tlshash":"d8e2f2b47875242cc53235a7b5975f22fbce86c3a1f7183da45bcd0d0151b65cd2ad08","first_seen":"2025-11-21T00:02:01.133364Z","last_seen":"2026-08-20T08:46:35.312839Z","times_seen":4620,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":78,"dns":1,"connect":22,"send":0,"wait":9,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umsousercontent.com/lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200\u0026h=40\u0026dpr=2","fqdn":"umsousercontent.com","domain":"umsousercontent.com","tld":"com"},"ip":{"addr":"104.26.12.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umsousercontent.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 18:57:06 GMT","end":"Sat, 11 Apr 2026 19:57:05 GMT"},"fingerprint":{"sha1":"F9:E9:B0:53:79:83:92:F2:83:C0:DD:DE:48:AE:6C:AE:DD:B3:F7:CA","sha256":"BA:89:CF:74:94:54:2A:9F:00:43:3F:CD:8F:E8:C4:BB:21:1B:A0:AF:17:15:D9:D9:C7:84:64:DB:1F:45:9A:AC"}}},"request":{"raw":"GET /lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200\u0026h=40\u0026dpr=2 HTTP/1.1\r\nHost: umsousercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en-us-suites-trz.umso.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 10:51:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5777\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nvia: 1.1 344da95a1b2b3991850ec480fcb1eb50.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BdX9pMgJUmFrrgEO%2BnG6RGFOSCi6IiX9coA3d9eMAIwc1nDcISbjR9%2BPeJrEWNrp%2F3aChuY3a0zDxwWFcQ6LAB8Z4riifSukMiz7fFIrtDoxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9298121\r\nlast-modified: Thu, 13 Nov 2025 20:02:26 GMT\r\ncf-ray: 9d579acfd961dd16-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 375 x 80, 8-bit colormap, non-interlaced","md5":"67d3c4d9d6b7e39d4789905e4274117e","sha1":"01e8dadffe58e09094fe499da8a61cd387e409e0","sha256":"8798f81bd68494c4f0cc40f1b03c81700d3a9d14addda509dfff590696c7e5a6","sha512":"ed97b7d373db8c2809539f93a76223d986a027162b9242282970960d690195fd188ab57a7af110f2e336da2219ba8e88dafb04a83ca4f535ed7bf0855f59be2a","ssdeep":"96:siUVZSRwgmZmyTbdu/A0C0nVG5Ty54XxCCpvSMukbAI8rHahznil5KhFqQQjfRJ0:CSRwgi9040C0Vr4Xx3pvSMuSErHebilk","tlshash":"02c1bfd127d43c52e3a3a63f4602869fe0e5746875ae02cb42ce6cb65eed4c9c0b2600","first_seen":"2026-03-01T10:50:41.937064Z","last_seen":"2026-03-01T10:51:30.262457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":48,"dns":0,"connect":14,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://en-us-suites-trz.umso.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 04:27:56 GMT\r\nexpires: Fri, 26 Feb 2027 04:27:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 282192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-20T09:30:52.722759Z","times_seen":262104,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":78,"dns":0,"connect":8,"send":0,"wait":9,"receive":11,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/librebaskerville/v24/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/librebaskerville/v24/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://en-us-suites-trz.umso.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 18:58:52 GMT\r\nexpires: Thu, 25 Feb 2027 18:58:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 20 Nov 2025 17:08:13 GMT\r\ncontent-type: font/woff2\r\nage: 316336\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33872, version 1.0","md5":"9e3a6b8702fdefcd8707583c3a8ac668","sha1":"b1bcbff31055046eee9cd71ed2fdcf4bf1f47f75","sha256":"22219fb90e3b9bd28debd1825fe8d9a0154a0e31f8b3fa601ac1a0a5aa5e6d1b","sha512":"9f5e12bdebdb488860d38fe973b7047de7df43e1976f050e2b73ded38fbf5fdfeec4c4f7c99b05bcc6633c65e97ff9a4c206c34498fde348cd01b1f88b2b5593","ssdeep":"768:d9ogmsKEHeO6zcL98WmToodwwD3x99QqmM/kX8yjXJYW9oxLWK81HhH:fobsV+6wdnz5yFYjxLBuZ","tlshash":"d8e2f2b47875242cc53235a7b5975f22fbce86c3a1f7183da45bcd0d0151b65cd2ad08","first_seen":"2025-11-21T00:02:01.133364Z","last_seen":"2026-08-20T08:46:35.312839Z","times_seen":4620,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":164,"dns":3,"connect":8,"send":0,"wait":9,"receive":2,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://en-us-suites-trz.umso.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 04:27:56 GMT\r\nexpires: Fri, 26 Feb 2027 04:27:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 282192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-20T09:30:52.722759Z","times_seen":262104,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":16,"receive":5,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/api/view","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.umso.co","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 16:40:23 GMT","end":"Wed, 15 Apr 2026 16:40:22 GMT"},"fingerprint":{"sha1":"F3:09:76:BE:1D:89:C6:C2:4A:A8:8F:15:88:D7:CE:28:2A:F0:AE:6E","sha256":"BE:37:6A:CE:0D:18:F9:BA:87:C1:84:22:6D:47:68:1F:2E:FB:08:95:1F:00:2F:D1:F6:68:D4:88:4D:E3:8C:89"}}},"request":{"raw":"POST /api/view HTTP/1.1\r\nHost: en-us-suites-trz.umso.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://en-us-suites-trz.umso.co/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 57\r\nOrigin: https://en-us-suites-trz.umso.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"referrer\":\"\",\"path\":\"/\",\"isPriorBlockingEnabled\":false}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://en-us-suites-trz.umso.co\r\ncontent-type: application/json;charset=utf-8\r\ndate: Sun, 01 Mar 2026 10:51:08 GMT\r\ncontent-length: 16\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-20T09:17:37.089886Z","times_seen":184045,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"en-us-suites-trz.umso.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"umsousercontent.com/lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png?w=32\u0026h=32","fqdn":"umsousercontent.com","domain":"umsousercontent.com","tld":"com"},"ip":{"addr":"104.26.12.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-us-suites-trz.umso.co/","date":"2026-03-01T10:51:08.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umsousercontent.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 18:57:06 GMT","end":"Sat, 11 Apr 2026 19:57:05 GMT"},"fingerprint":{"sha1":"F9:E9:B0:53:79:83:92:F2:83:C0:DD:DE:48:AE:6C:AE:DD:B3:F7:CA","sha256":"BA:89:CF:74:94:54:2A:9F:00:43:3F:CD:8F:E8:C4:BB:21:1B:A0:AF:17:15:D9:D9:C7:84:64:DB:1F:45:9A:AC"}}},"request":{"raw":"GET /lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png?w=32\u0026h=32 HTTP/1.1\r\nHost: umsousercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en-us-suites-trz.umso.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 10:51:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 759\r\nlast-modified: Fri, 13 Jan 2023 16:14:05 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\netag: \"55d75a904530ed80ea2df690e5748c28\"\r\nvia: 1.1 923b257861428e30a3cf7fb7a3374926.cloudfront.net (CloudFront)\r\nage: 9300307\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdSMXDYnEMEXOCAchgt5Zk27FIzW9f0jB3cQQ98zCGvakCyUYhVS55jbivmw7ginDPDgUa3uR%2BjQn0KEAZrjVLyswT2bjvfPOW46MIqf0D2Dgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: 9d579ad2b8d8dd16-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"55d75a904530ed80ea2df690e5748c28","sha1":"855e3226d9eede09a6f4ea3b62086794b322e5c0","sha256":"278942717246f884f64880747e70939903429e7e05154980c4951247d9109062","sha512":"a28265f73bdd97e55a3e39c576d2aebfbf5237d52100e1c79b301fb2e1ede84571018badbfb7e02bf998291c63e0d2a49d426fbd93edeba16c90af2a8533a5a3","ssdeep":"","tlshash":"5d0160f810fe899193e88b266a2a4b03fcb90271203f491ac0b91dd50c2371226ae3b5","first_seen":"2025-08-08T04:52:02.735038Z","last_seen":"2026-03-01T10:51:30.264201Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-us-suites-trz.umso.co/","fqdn":"en-us-suites-trz.umso.co","domain":"en-us-suites-trz.umso.co","tld":"umso.co"},"ip":{"addr":"75.2.96.155","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T10:51:07.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.umso.co","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 16:40:23 GMT","end":"Wed, 15 Apr 2026 16:40:22 GMT"},"fingerprint":{"sha1":"F3:09:76:BE:1D:89:C6:C2:4A:A8:8F:15:88:D7:CE:28:2A:F0:AE:6E","sha256":"BE:37:6A:CE:0D:18:F9:BA:87:C1:84:22:6D:47:68:1F:2E:FB:08:95:1F:00:2F:D1:F6:68:D4:88:4D:E3:8C:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: en-us-suites-trz.umso.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\nx-frame-options: sameorigin\r\nx-umso-render: 2\r\ncontent-length: 14839\r\ndate: Sun, 01 Mar 2026 10:51:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57853,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16973)","md5":"76d39ec4e2b4a3cd2586cfed3d8c61a3","sha1":"232f27c6684ff2188a8e2158964fe5f73d1298a7","sha256":"741b2a122ef545c2b5919b66f5a29c312d77304d4316553c4649e0b54fbb8bec","sha512":"561a3cfa57a2b0b464a759bc32c96629ab407a8d40220ad1b0f9f2a0d342d3aa18d2c277120a9a1417d1d76279e5c19adae314a2fcda15643bcc2d725f43755d","ssdeep":"768:2KT0bFvI0NAKT0bzq0k6Kw6MAx0xsYWFbdhWpBOF/GpyQJFRFXX55FqSGzpUc1LX:0C47xdhWpBOtGpyQJj9zUSGzpUcsdiN","tlshash":"3043185132541224ba27d1f9b46bab6833399006e61fccac7be4116d1fc93e6c6e3f58","first_seen":"2026-03-01T10:50:41.931936Z","last_seen":"2026-03-01T10:51:30.264739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":47,"dns":1,"connect":1,"send":0,"wait":21,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"en-us-suites-trz.umso.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}