{"report_id":"405a632e-6f2c-48ef-bcfe-1bd772e205d5","version":0,"status":"done","tags":[],"date":"2026-09-05T02:27:37Z","url":{"schema":"https","addr":"trust-spend.org/","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trust-spend.org/","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"title":"Market Updates","dom":{"size":16898,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16886), with no line terminators","md5":"99a2ea23d2284acea97abd88905efb80","sha1":"c45b3b63c8c43aaf2d5305df7852dcc1d8bab4ae","sha256":"c91b8a5df71c39f568c5cc2f88e3ca62d1b5cbd0f0ba2f25d2ae60dfb2835fcb","sha512":"72d272217c4d133ff3b1f92cb3e673861cb3fc1ab47ea99d2a82027ee4c7c51a8ebe2cefcd3a0949bb7c41a0000f0a9cac5bfadaa9e2bbaebaca125feafd4ee0","ssdeep":"192:WW3CZuQA9n7i+yrBlNaNwU+Z9XBMIiXBMJRXBMCaXBMKiVXBM+gtVOBB4Wgnqzce:Ncu37iTrBlY6UA/MRMlMzM3MN85n","tlshash":"09729572e544d804b97bd884f070eeab7085c62ac35a8b948bdcf636e4c61762b317cd","dom_hash":"domhash6e2eb9a1928485e5e85d0f564436e434","first_seen":"2026-09-05T02:27:42.763111Z","last_seen":"2026-09-05T02:27:42.763111Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trust-spend.org/","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T02:27:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trust-spend.org","ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-28","domain_rank":0,"first_seen":"2026-09-05T01:33:19.928458Z","last_seen":"2026-09-05T01:33:19.928458Z","alert_count":24,"request_count":12,"received_data":621401,"sent_data":5804,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/app/layout-b80d1aabdbc086bf.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b8322f2be553ddd4baf56d89d47c9f","sha1":"9830b4e606cc8f050e985d40b4e21fff03f7b698","sha256":"57549cd957e57528609d41d06d10e69082cc92dbdcc052921aa47eeb13b6b68f","sha512":"c7add1b548541c7025a8ce0f1778bf9defae22dbb4dae81fe91d32d3bc7865e829feb79f84019dbc739380cb2359b36c70ac5183d75b7bc21d186b9dea5a1754","ssdeep":"","tlshash":"a1e0868e7a44762e19137cb4fa776c52357e44563826484025e4edb12cb326dd351c88","size":311,"data":"","first_seen":"2026-09-05T01:33:23.436254Z","last_seen":"2026-09-05T02:27:42.773003Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/23-f9c7e85b4a1d2fb3.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a2d7c3d59d9298d8e3dfdd6134a4eca","sha1":"e77d21b82dd7f24fe0e7bcfef2e0b9818b2fed65","sha256":"839d821426383cc0f978a6a20074e6f5524d23ad66f19bdb883f6874bca1cfce","sha512":"dd050b2fd17b99fbfb3575a3740e877ae4db5869a3744a84e4858b2c0f8876116cc554aec7a7669d3001e9a18b18a5a479b0d167070b5a96fe316486fd21d6eb","ssdeep":"1536:+3w31mN1OhIUEfYsdlaTy8mmN1zq5EfRv7:pcJ941G50z","tlshash":"7fc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":123350,"data":"","first_seen":"2024-07-25T23:19:55Z","last_seen":"2026-09-11T21:33:59.32164Z","times_seen":570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/fd9d1056-0395f68b8cc78a20.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172831,"data":"","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-09-11T21:33:59.346646Z","times_seen":3605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/563.81e05171fcba2cc2.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e334d13eeb1629dd7c5bd8dac20cf5a9","sha1":"792c2e76e67bcafac523c7f304aa4007b8f3de6d","sha256":"b24dd8017a633ea6f05843111ddc501b784e266d01ad760cc895a9ddac776815","sha512":"719c8c20d7b994105342feba42a5a1d411618ef296a5bbf22621ec6b9b0ba12819edf651919f04c378bc7dd15df0f0a19b212b033bbccbd95d0ba402847bab8f","ssdeep":"48:ibP6vTeKcP63TFItFCiNO3KVKcVvGWGfXbusNw+kVuK5VVN8dX2eklPDl+sz:zv4ijWFTNO3OKkbYHd4uK5/UklPMsz","tlshash":"ac912c11908477c8fe678099a29ba41c729f2548e16d4af4bbaccc7021a42f6732ffd5","size":4392,"data":"","first_seen":"2026-09-05T02:27:42.767417Z","last_seen":"2026-09-05T02:27:42.767417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/webpack-3d6d7d196e6f32ca.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e19a519bfedfba4129c58ef486c663","sha1":"714fe577bf55ffd4b8ee41c45e9dd58438d2ecc4","sha256":"79c50ac3136da694356cccb202f76d6fe3b8e9e1929359144e66d89b5a47c695","sha512":"f7ac85b73317f5d60ba3c005021f95839a3f98162bcb2f3cddd4a1063bf2859ba96898e2ddd267db5a3bc297fbbcff675b3bea65ad83cb662dab30a7fe0f32cc","ssdeep":"","tlshash":"a781a7dd71e4f8762793a8a0447fa416f23f24b2181ed0a0cb1ad4f5fc348598523fa9","size":3919,"data":"","first_seen":"2026-09-05T01:33:23.441318Z","last_seen":"2026-09-05T02:27:42.776878Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/main-app-ae2f06d50b9a15cf.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33eb87878e719582520a219629de1e6b","sha1":"ec97483018e7dbb44d0b3c42244d7a2729fc4054","sha256":"5fd8781501779c0887814e0038b6611063af3c60cbcff9c89469b6197f89870a","sha512":"9f42b1b8638a8a27408a8443ff6fb9bf82c90e202a44de20b1574773e585d76544f85ea1ba06d7a0dfe80f6703639eb6734dc3b1313752968b69d9c2e8c263cc","ssdeep":"","tlshash":"25f0829d274db12f2923aa20fee35c2e28ae517428675d506615edb12c3766883f1c38","size":460,"data":"","first_seen":"2026-09-05T01:33:23.454234Z","last_seen":"2026-09-05T02:27:42.764638Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/app/clean/page-43fdad0b361365a4.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a8f40e03ca83a8217441e9d2633e34a","sha1":"7cf8736f863f7aafecc14576e9a7eac4d874d779","sha256":"c3a39a74752903e5d3e64c85ed98c5db2a5e6ae9e83d230b6f2dc9ec179afc03","sha512":"1b8ebfcee8310059890bb254d1c11142f36b037096f615199a5f17517e3c9282018f02a5d855998bf8b385ca6bf7899116ef1aa3d1e2bf7d268a379b92ff7799","ssdeep":"96:JuAQSrOIB5HECALuibuW0LQE4ReiFmCj6:1Q5WXLKGds6","tlshash":"e891751632d1fe84b556d8c0853bd47fb469482f181a99f0a7bccdf269e220871f4f6a","size":4269,"data":"","first_seen":"2026-09-05T01:33:23.437206Z","last_seen":"2026-09-05T02:27:42.773833Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/349-c97b75cfd8689d8d.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2da6d1258bf5a3cb2a102bd0bf31999","sha1":"e102e2cf78622d89e82dd643210e3e2a491fe36e","sha256":"5efe3842eca451796a8c609e14dec9b29148a502d4f6325da35a45f07e7efc24","sha512":"5e2b40982cada30402a58decc8bb10cad3a6bae6304ce20a1023145f70edc37d885ce04557d0d5b290d85b60d14d842a86f857822cf0b1b2e22254300fc1c7b6","ssdeep":"3072:MjNW8JvqcGCN7a+yTKJhFYpjaL5o/agT+M3nH+O0nahv8eXTgs/D8MPWdFbKmx:MjNW8JvqcGsaWJXKhTLnvVbfpQ","tlshash":"eb247d2722d98f3e976916ea98d5770672ec0de177c105e0c1e9ae1c34dc6c89133eae","size":225679,"data":"","first_seen":"2026-09-05T01:33:23.455099Z","last_seen":"2026-09-05T02:27:42.772227Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/340.d57820deeaf81c1a.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90857ae28b75758da34aece7f0dd6a50","sha1":"9a9533bd8564df3f8c11f9eebac05a64d2bba18e","sha256":"c7c64058faa91a082229f94d8f9e2a06c13bb6dbca020a27effd08816b475f59","sha512":"61b342484be22fdf795f0c76daf4331fa8dc8779846ef55b2c455759fb171cbf6cd27266f5bd4dde86a4172da50c9aca48e80b961c9c10c538879fa26042d2fd","ssdeep":"","tlshash":"e081240657897748f967884cb29e505c716e1a18b21e46f8b7bc5c3612954f2323ffcc","size":4091,"data":"","first_seen":"2026-09-05T02:27:42.766333Z","last_seen":"2026-09-05T02:27:42.766333Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/main-app-ae2f06d50b9a15cf.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.814Z","timestamp":1788575226814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/main-app-ae2f06d50b9a15cf.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NIwwhajyY%2FH94rgArnXEBtK0dokug755QtRN8op6Ulo%2BiAWUfOCQepL5IC87DxvfqaZUiv8jbsZq16eyIWA3cPHosyt65rfJsCEDorIzjMTRaA6PZpGdsnn%2FmxlGBFV4Fg%3D\"}]}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"1cc-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nage: 3257\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a361caff9b51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":460,"size_decoded":965,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (460), with no line terminators","md5":"33eb87878e719582520a219629de1e6b","sha1":"ec97483018e7dbb44d0b3c42244d7a2729fc4054","sha256":"5fd8781501779c0887814e0038b6611063af3c60cbcff9c89469b6197f89870a","sha512":"9f42b1b8638a8a27408a8443ff6fb9bf82c90e202a44de20b1574773e585d76544f85ea1ba06d7a0dfe80f6703639eb6734dc3b1313752968b69d9c2e8c263cc","ssdeep":"","tlshash":"25f0829d274db12f2923aa20fee35c2e28ae517428675d506615edb12c3766883f1c38","first_seen":"2026-09-05T01:33:23.454234Z","last_seen":"2026-09-05T02:27:42.764638Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/favicon.ico","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:07.158Z","timestamp":1788575227158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\npriority: u=6,i=?0\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EC5dju378K5%2FoV2KsN7F%2BPC%2Fxd%2B%2Fz1QsvDHsoMugd8cJhtQ8bBMm4hVBl20%2BMfguktwMuyCaJ7045CkGxlHBQ6uqsxtAjfhoQ6fAng8%2FgdltTs3EKqdFCW6uUPT2Y8o3YxY%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a361cb01cb81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7579,"size_decoded":2970,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7579), with no line terminators","md5":"cd740d665babbbab174e824ae6b3a442","sha1":"9bcbf45f977ebf28bc101122028d05dfaf275455","sha256":"332add29a0cf84d8fe001fe28db0fb2773eb1d984fd4fc3c62fd52a760ae6f3d","sha512":"c36f35139a4a04d9a306b913c2e40f7f20701e8dd035a39afc1bcc0b3f7b80281657eab0b0f3949adb1f87feb5c658db18ad69c3f71a0bf488a21f9f435ec1ca","ssdeep":"192:L3CUOWnBWSzHkdaItsbgnqzcJmV+PqzbJP:LHOiBWTV+Z","tlshash":"83f1527a6804de4fed657c59017ebe3a60ce497f07a4ceb887d8ce1549810be6b92dc0","first_seen":"2026-09-05T01:33:23.438109Z","last_seen":"2026-09-05T02:27:42.765587Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/340.d57820deeaf81c1a.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:07.204Z","timestamp":1788575227204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/340.d57820deeaf81c1a.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"ffb-1a03bac9b22\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1maJBoigM1uPlPnmQzj9rhaZ%2BsSMOKzz%2F0o4vRloXXWtNoEPOfrYrwnZW20LcwvPBujzorkIoe4FV%2B1PrtWYqUgRZ3RpcnKAiwauKIHc33EOFg6%2BrnkcFyUlrrGyAQ198KI%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a361cb020b83723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4091,"size_decoded":2253,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4091), with no line terminators","md5":"90857ae28b75758da34aece7f0dd6a50","sha1":"9a9533bd8564df3f8c11f9eebac05a64d2bba18e","sha256":"c7c64058faa91a082229f94d8f9e2a06c13bb6dbca020a27effd08816b475f59","sha512":"61b342484be22fdf795f0c76daf4331fa8dc8779846ef55b2c455759fb171cbf6cd27266f5bd4dde86a4172da50c9aca48e80b961c9c10c538879fa26042d2fd","ssdeep":"","tlshash":"e081240657897748f967884cb29e505c716e1a18b21e46f8b7bc5c3612954f2323ffcc","first_seen":"2026-09-05T02:27:42.766333Z","last_seen":"2026-09-05T02:27:42.766333Z","times_seen":1,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/563.81e05171fcba2cc2.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:07.206Z","timestamp":1788575227206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/563.81e05171fcba2cc2.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"1128-1a03bac9b26\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J156plyS45Qcmm1pk1KK6SZlyZXqLDPeQa53MtwWThrh1WkpTn4Np8KHcdeSl6q9%2BuKEwSr1iMcOnKqR1cmTkozoc8V2EWgmhJ3jRBSgNXmx0%2BEuJ77V3BbKvltedkd%2BhFA%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a361cb020b84723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4392,"size_decoded":2233,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4392), with no line terminators","md5":"e334d13eeb1629dd7c5bd8dac20cf5a9","sha1":"792c2e76e67bcafac523c7f304aa4007b8f3de6d","sha256":"b24dd8017a633ea6f05843111ddc501b784e266d01ad760cc895a9ddac776815","sha512":"719c8c20d7b994105342feba42a5a1d411618ef296a5bbf22621ec6b9b0ba12819edf651919f04c378bc7dd15df0f0a19b212b033bbccbd95d0ba402847bab8f","ssdeep":"48:ibP6vTeKcP63TFItFCiNO3KVKcVvGWGfXbusNw+kVuK5VVN8dX2eklPDl+sz:zv4ijWFTNO3OKkbYHd4uK5/UklPMsz","tlshash":"ac912c11908477c8fe678099a29ba41c729f2548e16d4af4bbaccc7021a42f6732ffd5","first_seen":"2026-09-05T02:27:42.767417Z","last_seen":"2026-09-05T02:27:42.767417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T02:27:06.415Z","timestamp":1788575226415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: _cv=4; Path=/; Expires=Mon, 05 Oct 2026 02:27:06 GMT; Max-Age=2592000; HttpOnly; SameSite=strict\r\nx-middleware-rewrite: /clean?_cv=4\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EioeUGWbcU19fAtFCtlSTApdwB0g%2FsrR4HwfEojXwtfUYyc33tJJ6RdQuhsvdABQKrqo%2FmxxLhGx8XIBUq%2BnWaUSvhmHMIj1bURzv6pYAp%2BZDau4cydsBK3ykwfY8gERTs8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a361cafd9b1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_cv","value":"4","quoted":false,"path":"/","expires":"2026-10-05T02:27:06Z","raw_expires":"Mon, 05 Oct 2026 02:27:06 GMT","max_age":2592000,"secure":false,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"_cv=4; Path=/; Expires=Mon, 05 Oct 2026 02:27:06 GMT; Max-Age=2592000; HttpOnly; SameSite=strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":16813,"size_decoded":5219,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16801), with no line terminators","md5":"ec4e7759ad383f532aa70cef6f6fd150","sha1":"62cb26658e8c85911a4f1a74a58dc2474bb7bdaa","sha256":"9d0be8db2699c40a1d2d1c06b872313eaedc84b5377c5dbe890457f0d236d048","sha512":"91ed0c7c7983ba596da5204d915459c264c893eb70503104cc622f5227a903aff94ffbb5a63d9db61ef1e43ca1832b496a1ca2b2b7e0bdf917df95423f977ee6","ssdeep":"192:L3CUOdNn86i+yrNbmNaNIHU+Z9XBMIiXBMJRXBMCaXBMKiVXBM+gtVOBB4WgnqzR:LHOjXiTrNqY8UA/MRMlMzM3MN85R","tlshash":"af728672e544d804b97ad884e034eeab7085c62ac25a8b9487dcf635e8c61766b317cd","first_seen":"2026-09-05T02:27:42.768766Z","last_seen":"2026-09-05T02:27:42.768766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":64,"connect":13,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/css/9a9f90d53f010c36.css","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.808Z","timestamp":1788575226808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/css/9a9f90d53f010c36.css HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"bd47-1a03bac9b26\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTD0Dh%2FjgL6U0mij1QNDtw%2BWvFgUgfRennAnpX6J6NeofAJjJdkpvhfUa%2Bv%2BN3N%2BcRHauXCOGvmHbQzS5SUn2%2BeX0pREmarHOpw190O9rnH5SWUZEcSmRmRPU%2F0AyO%2Flb5w%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a361caff8b4c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48455,"size_decoded":9947,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (46162)","md5":"d50df3bef364eddb417acdf7fb6a0168","sha1":"76e4ab45dd76ce29f42443b0229efdff73dfd228","sha256":"05afb13c91cf5f80503b6ff1e909c238008ec4c2054752ef8d5252f098d299b1","sha512":"fd5a45d67071034db7ec703bd9b425c87c88264e38ba1a6abd8f905ee2ef4d2e299c8c2464f58827db3795f585d9f243de5cf3b1fc027fe831453eeb7d120928","ssdeep":"384:GHriuXbzhNKqtVnQK1WApYc3hC2dXdzUrcLI8WSHhrBoLQjoiZZorMx2f6FboNdU:GHFHJVnQuWApYd2F/hrB8rMdbM4km","tlshash":"0f23935e6b51103fbc1390f6d2a4baad7117b0c1ef3a11eab9931101afe23f65ca7650","first_seen":"2026-09-05T01:33:23.457276Z","last_seen":"2026-09-05T02:27:42.769938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/fd9d1056-0395f68b8cc78a20.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.811Z","timestamp":1788575226811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-0395f68b8cc78a20.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"2a31f-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NA%2BWjJrnOgzXBNFPp6ycp5e1VQBgUbPuE2zijznUxe3nxokot0CEU%2FvE07roSn3PzSCmQwlr55ONHCgogJPeUdC%2F2ZHRtIatZJ0j8aPqnxddDLuqBRy4Vf7yQ7E8f%2BWU3yk%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a361caff9b4e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172831,"size_decoded":54504,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-09-11T21:33:59.346646Z","times_seen":3605,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/23-f9c7e85b4a1d2fb3.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.812Z","timestamp":1788575226812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/23-f9c7e85b4a1d2fb3.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"1e1d6-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TObLgl4Dm67%2FQeYIAQmun90DeUEANra%2FxgjXF5sjkNAeDh11Xo7Jtxr2THmL%2F4IZU6s7jNSUDHTQ37FTb1pn9%2B%2Bl5LJ5y0q4ROP8yWB41kHS4H9hbuqjrME5wukzp2Muo5s%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a361caff9b4f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123350,"size_decoded":32390,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4a2d7c3d59d9298d8e3dfdd6134a4eca","sha1":"e77d21b82dd7f24fe0e7bcfef2e0b9818b2fed65","sha256":"839d821426383cc0f978a6a20074e6f5524d23ad66f19bdb883f6874bca1cfce","sha512":"dd050b2fd17b99fbfb3575a3740e877ae4db5869a3744a84e4858b2c0f8876116cc554aec7a7669d3001e9a18b18a5a479b0d167070b5a96fe316486fd21d6eb","ssdeep":"1536:+3w31mN1OhIUEfYsdlaTy8mmN1zq5EfRv7:pcJ941G50z","tlshash":"7fc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2024-07-25T23:19:55Z","last_seen":"2026-09-11T21:33:59.32164Z","times_seen":570,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/349-c97b75cfd8689d8d.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.818Z","timestamp":1788575226818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/349-c97b75cfd8689d8d.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"3718f-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mt0GCubZhXIXPQgNbOYlaiJW19EZVpSDWbQTDHtdxAOP6zsB2OcZ%2Bc5ikS8LXkqBwDa9W1M9w2PWLwdootHnDvhZPpLXjzPbzSoa6Kr410907SgDmoJuvNDeU06Fa95IiKY%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a361caff9b54723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225679,"size_decoded":64138,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62016), with no line terminators","md5":"d2da6d1258bf5a3cb2a102bd0bf31999","sha1":"e102e2cf78622d89e82dd643210e3e2a491fe36e","sha256":"5efe3842eca451796a8c609e14dec9b29148a502d4f6325da35a45f07e7efc24","sha512":"5e2b40982cada30402a58decc8bb10cad3a6bae6304ce20a1023145f70edc37d885ce04557d0d5b290d85b60d14d842a86f857822cf0b1b2e22254300fc1c7b6","ssdeep":"3072:MjNW8JvqcGCN7a+yTKJhFYpjaL5o/agT+M3nH+O0nahv8eXTgs/D8MPWdFbKmx:MjNW8JvqcGsaWJXKhTLnvVbfpQ","tlshash":"eb247d2722d98f3e976916ea98d5770672ec0de177c105e0c1e9ae1c34dc6c89133eae","first_seen":"2026-09-05T01:33:23.455099Z","last_seen":"2026-09-05T02:27:42.772227Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/app/layout-b80d1aabdbc086bf.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.820Z","timestamp":1788575226820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-b80d1aabdbc086bf.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hcAYR3vIwnO6eIgHTKLu1PN6g7kFj%2FxT5zvwOwqAxqfxkjX8449yme2ndfyzh%2F3C%2Fzr1yMbLnHGYKLp2%2FFgBdKTutb12TsQg73PWpb8m%2BiQjs0i9AoIq26yZTTNXw8aERs%3D\"}]}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"137-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nage: 3257\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a361caffab55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":955,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (311), with no line terminators","md5":"f2b8322f2be553ddd4baf56d89d47c9f","sha1":"9830b4e606cc8f050e985d40b4e21fff03f7b698","sha256":"57549cd957e57528609d41d06d10e69082cc92dbdcc052921aa47eeb13b6b68f","sha512":"c7add1b548541c7025a8ce0f1778bf9defae22dbb4dae81fe91d32d3bc7865e829feb79f84019dbc739380cb2359b36c70ac5183d75b7bc21d186b9dea5a1754","ssdeep":"","tlshash":"a1e0868e7a44762e19137cb4fa776c52357e44563826484025e4edb12cb326dd351c88","first_seen":"2026-09-05T01:33:23.436254Z","last_seen":"2026-09-05T02:27:42.773003Z","times_seen":4,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/app/clean/page-43fdad0b361365a4.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.821Z","timestamp":1788575226821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/app/clean/page-43fdad0b361365a4.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"10ad-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3CL1UYDhpNhPcbU%2BnpFFktjwvJa8B0E7uJ6aa%2FsHXIYS50yyARH%2B9Zzvc7KHOa4aRRN6aehQVjGgvpA9%2FgDQHfL2s9K4HMG8NX737r0li9%2Bq47RfkxQ1eRt%2FUzjkMPWxnU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a361caffab57723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4269,"size_decoded":2243,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4269), with no line terminators","md5":"3a8f40e03ca83a8217441e9d2633e34a","sha1":"7cf8736f863f7aafecc14576e9a7eac4d874d779","sha256":"c3a39a74752903e5d3e64c85ed98c5db2a5e6ae9e83d230b6f2dc9ec179afc03","sha512":"1b8ebfcee8310059890bb254d1c11142f36b037096f615199a5f17517e3c9282018f02a5d855998bf8b385ca6bf7899116ef1aa3d1e2bf7d268a379b92ff7799","ssdeep":"96:JuAQSrOIB5HECALuibuW0LQE4ReiFmCj6:1Q5WXLKGds6","tlshash":"e891751632d1fe84b556d8c0853bd47fb469482f181a99f0a7bccdf269e220871f4f6a","first_seen":"2026-09-05T01:33:23.437206Z","last_seen":"2026-09-05T02:27:42.773833Z","times_seen":4,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:07.022Z","timestamp":1788575227022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 02:27:07 GMT\r\ndate: Sat, 05 Sep 2026 02:27:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-09-13T08:39:31.411383Z","times_seen":5085,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-spend.org/_next/static/chunks/webpack-3d6d7d196e6f32ca.js","fqdn":"trust-spend.org","domain":"trust-spend.org","tld":"org"},"ip":{"addr":"172.67.219.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-spend.org/","date":"2026-09-05T02:27:06.809Z","timestamp":1788575226809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-spend.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 05:21:30 GMT","end":"Sat, 21 Nov 2026 06:20:07 GMT"},"fingerprint":{"sha1":"1B:10:30:0A:E4:92:39:0C:AB:FD:78:18:AF:33:86:06:BC:A8:C7:7C","sha256":"39:6B:C9:2C:59:40:AA:B1:FD:31:76:36:F6:D6:8D:11:F0:2E:93:6B:B9:14:93:7A:64:2F:16:0E:CE:55:A2:59"}}},"request":{"raw":"GET /_next/static/chunks/webpack-3d6d7d196e6f32ca.js HTTP/1.1\r\nHost: trust-spend.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trust-spend.org/\r\nCookie: _cv=4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 02:27:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 01:26:02 GMT\r\netag: W/\"f4f-1a03bac9b1a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDgRZzEzK6YeGpjEvBz4eWzY2La9AtCCKsC62mMDoyn5TgZVb%2B8Cj%2BbSzRn%2FjFiTXti7XLPT3SUNBKW9fQFfX6ynzbHhjnBl%2BkJv4uMfgK2%2F7SgQstvvpynznnAn9AOQsp4%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a361caff9b4d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3919,"size_decoded":2721,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3919), with no line terminators","md5":"60e19a519bfedfba4129c58ef486c663","sha1":"714fe577bf55ffd4b8ee41c45e9dd58438d2ecc4","sha256":"79c50ac3136da694356cccb202f76d6fe3b8e9e1929359144e66d89b5a47c695","sha512":"f7ac85b73317f5d60ba3c005021f95839a3f98162bcb2f3cddd4a1063bf2859ba96898e2ddd267db5a3bc297fbbcff675b3bea65ad83cb662dab30a7fe0f32cc","ssdeep":"","tlshash":"a781a7dd71e4f8762793a8a0447fa416f23f24b2181ed0a0cb1ad4f5fc348598523fa9","first_seen":"2026-09-05T01:33:23.441318Z","last_seen":"2026-09-05T02:27:42.776878Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"trust-spend.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}