{"report_id":"4a485871-3f2c-47a1-bb3c-433b6001011f","version":0,"status":"done","tags":[],"date":"2026-07-12T21:50:17Z","url":{"schema":"https","addr":"trouveclasse.live","fqdn":"trouveclasse.live","domain":"trouveclasse.live","tld":"live"},"ip":{"addr":"185.66.89.65","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"trouveclasse.live/","fqdn":"trouveclasse.live","domain":"trouveclasse.live","tld":"live"},"title":"Classe2027.com Site Officiel - Fiche Classes 2026-2027","dom":{"size":37232,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6c3b2c1cc21f34ca45dd024c2ef3cd4d","sha1":"ce601fdc4e3f08ae7ec873817e9adf0da84ce1f7","sha256":"4992a17b20a184944637a67c00613e1ecb25b44033e98a39276139634d41ee08","sha512":"0832d1887a1e91e51a9ee7fbfdb32180d66cd4b56904cc63f527a913beebff821b4bad913a83b6c17e02bf3b7c50aaf79ef42ea5786f7a65ecc6e59718c58bb4","ssdeep":"768:RyVOwykMjAPbzGoNdSDAP0Yz5lp8WrR2YEPD:Ry8wykMWIDAP0YVlp8WrR2YKD","tlshash":"72f2967931f7213306fb70b627d75306be248107e80ac408baac47585f9ed96d5e7ad8","dom_hash":"domhash75859e6fc9da2a99223f22e220a74c41","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trouveclasse.live","fqdn":"trouveclasse.live","domain":"trouveclasse.live","tld":"live"},"ip":{"addr":"185.66.89.65","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:50:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"classe2027.locker","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"classe2027.locker","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":3,"received_data":88743,"sent_data":1728,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":8415,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trouveclasse.live","ip":{"addr":"185.66.89.65","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-12T13:49:34.472548Z","last_seen":"2026-07-12T13:49:34.472548Z","alert_count":0,"request_count":2,"received_data":37998,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"classe2027.locker","ip":{"addr":"185.66.89.65","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-07-12T21:50:17.287388Z","last_seen":"2026-07-12T21:50:17.287388Z","alert_count":2,"request_count":1,"received_data":21431,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trouveclasse.live/","fqdn":"trouveclasse.live","domain":"trouveclasse.live","tld":"live"},"ip":{"addr":"185.66.89.65","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4435b2b8b37e7aee115ee3df1b150acb","sha1":"808d979c11a505e465abf5c7b26bebc840bb3900","sha256":"0015fc3c59c77233fcb4f663cd921ba39c85a36b5a7bd46b1b7dee516363c6f0","sha512":"b1bbe2b435cb7e33c1f7a7f06a3516e38f2c3687e7f2201fe0c4fdf489ad6f87a4e96c69830ff35e7230c776d527eede93f17848aec3eb8a5ad8ae4286e635bf","ssdeep":"384:0YWldlV1GodxkWdS5JA56oz0Yz5liOmvcpxhUJQ93nw4AhV1eRmrodrs6fR2v4G0:0PbzGoNdSDAP0Yz5lp8WrR2YEPO","tlshash":"1dc2967a31b3213346fb307a2bc75345ba2880076805d849be5c9718af9dea595f3fd8","size":26314,"data":"","first_seen":"2026-07-04T11:10:22.910264Z","last_seen":"2026-07-12T21:50:20.913751Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trouveclasse.live/","date":"2026-07-12T21:49:50.873Z","timestamp":1783892990873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trouveclasse.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 10:22:14 GMT\r\nexpires: Fri, 09 Jul 2027 10:22:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 300456\r\nlast-modified: Thu, 04 Sep 2025 17:09:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28768,"size_decoded":29581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28768, version 1.0","md5":"d0557afb3f0c7a3864f0e3f412bcd8ed","sha1":"b358d67d067e4cd71a3a6e51245fef72cb063c95","sha256":"4ac9b88dc5104c7450eb73bfd416a63dbe4bf6b6acac44b8c953e3567dc4a663","sha512":"596b009234f0f4df076f8f251485b06f7cdb3f0e7458ecb141229f2b3723873c68536d24a5123d55836cc458599da5e0057ce81542400eaede3efdefea4f1bac","ssdeep":"768:kFFnSMWY1gDAuZ0LqnutgJ6keQtlIXoj/fajyA:gnSXqgDARLqb6XQtqXojE","tlshash":"fdd2f2e40b2176e5fbc68c747331715edc714a38c3ef956b125e1ae4202a800b77be84","first_seen":"2025-03-11T05:38:45.137969Z","last_seen":"2026-07-13T12:48:07.201165Z","times_seen":7345,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":19,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trouveclasse.live/","date":"2026-07-12T21:49:50.543Z","timestamp":1783892990543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trouveclasse.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:49:50 GMT\r\ndate: Sun, 12 Jul 2026 21:49:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7731,"size_decoded":1407,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d89c1a68c8d7a7fc7958a4fef78a1375","sha1":"546182bfecd18cff117e5024d27c314d694c1c40","sha256":"2c680fed85fe48a953777e86cf733aa32c579d7f858ea0ec94244b634b940908","sha512":"4ac7f6f23e7e2081aee8c0e3b454a69218a6fe6c52e082ddcf06b0991c16171315a1128671173e50793c21fc301b01f950330230973c4da8d198b1aa171963d8","ssdeep":"192:Qogy/M3JIN+IoqIRM33yN0PoZPiM3QhNbV:vG9UUv2","tlshash":"39f18ca1545b9458ab831cc237cf3e256d9e6011b095c27ddffe288cdceac2a5291b1e","first_seen":"2025-09-25T10:51:29.8999Z","last_seen":"2026-07-12T21:50:20.900832Z","times_seen":226,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trouveclasse.live/","date":"2026-07-12T21:49:50.875Z","timestamp":1783892990875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trouveclasse.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 10:22:14 GMT\r\nexpires: Fri, 09 Jul 2027 10:22:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 300456\r\nlast-modified: Thu, 04 Sep 2025 17:09:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28768,"size_decoded":29581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28768, version 1.0","md5":"d0557afb3f0c7a3864f0e3f412bcd8ed","sha1":"b358d67d067e4cd71a3a6e51245fef72cb063c95","sha256":"4ac9b88dc5104c7450eb73bfd416a63dbe4bf6b6acac44b8c953e3567dc4a663","sha512":"596b009234f0f4df076f8f251485b06f7cdb3f0e7458ecb141229f2b3723873c68536d24a5123d55836cc458599da5e0057ce81542400eaede3efdefea4f1bac","ssdeep":"768:kFFnSMWY1gDAuZ0LqnutgJ6keQtlIXoj/fajyA:gnSXqgDARLqb6XQtqXojE","tlshash":"fdd2f2e40b2176e5fbc68c747331715edc714a38c3ef956b125e1ae4202a800b77be84","first_seen":"2025-03-11T05:38:45.137969Z","last_seen":"2026-07-13T12:48:07.201165Z","times_seen":7345,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":22,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trouveclasse.live/","date":"2026-07-12T21:49:50.876Z","timestamp":1783892990876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trouveclasse.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 10:22:14 GMT\r\nexpires: Fri, 09 Jul 2027 10:22:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 300456\r\nlast-modified: Thu, 04 Sep 2025 17:09:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28768,"size_decoded":29581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28768, version 1.0","md5":"d0557afb3f0c7a3864f0e3f412bcd8ed","sha1":"b358d67d067e4cd71a3a6e51245fef72cb063c95","sha256":"4ac9b88dc5104c7450eb73bfd416a63dbe4bf6b6acac44b8c953e3567dc4a663","sha512":"596b009234f0f4df076f8f251485b06f7cdb3f0e7458ecb141229f2b3723873c68536d24a5123d55836cc458599da5e0057ce81542400eaede3efdefea4f1bac","ssdeep":"768:kFFnSMWY1gDAuZ0LqnutgJ6keQtlIXoj/fajyA:gnSXqgDARLqb6XQtqXojE","tlshash":"fdd2f2e40b2176e5fbc68c747331715edc714a38c3ef956b125e1ae4202a800b77be84","first_seen":"2025-03-11T05:38:45.137969Z","last_seen":"2026-07-13T12:48:07.201165Z","times_seen":7345,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":29,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trouveclasse.live/favicon.ico","fqdn":"trouveclasse.live","domain":"trouveclasse.live","tld":"live"},"ip":{"addr":"185.66.89.65","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trouveclasse.live/","date":"2026-07-12T21:49:50.962Z","timestamp":1783892990962,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trouveclasse.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 14:30:32 GMT","end":"Sat, 10 Oct 2026 14:30:31 GMT"},"fingerprint":{"sha1":"61:90:2B:14:84:3E:D5:2D:B4:35:42:62:27:6D:E6:A0:07:EE:DC:7E","sha256":"D0:69:40:4F:AF:4A:87:FA:2E:DF:5D:25:79:1E:A4:36:B5:79:3E:97:D1:15:35:3F:36:DB:9A:72:E8:3C:17:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trouveclasse.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trouveclasse.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 21:49:50 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":487,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-13T16:12:32.112288Z","times_seen":44942,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trouveclasse.live/","fqdn":"trouveclasse.live","domain":"trouveclasse.live","tld":"live"},"ip":{"addr":"185.66.89.65","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:49:49.817Z","timestamp":1783892989817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trouveclasse.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 14:30:32 GMT","end":"Sat, 10 Oct 2026 14:30:31 GMT"},"fingerprint":{"sha1":"61:90:2B:14:84:3E:D5:2D:B4:35:42:62:27:6D:E6:A0:07:EE:DC:7E","sha256":"D0:69:40:4F:AF:4A:87:FA:2E:DF:5D:25:79:1E:A4:36:B5:79:3E:97:D1:15:35:3F:36:DB:9A:72:E8:3C:17:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trouveclasse.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 21:49:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sun, 12 Jul 2026 15:43:11 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37180,"size_decoded":10176,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"8d1f1482b1b85e22cfe1a1e2d366ea77","sha1":"3f42b1c9876f807973b0cabff62f0f127d45a6ef","sha256":"1c2f5064e4c73e2d5a8422f43b703a57e24e576eee1e3eb65a47514ddf522038","sha512":"6bf6f82db242d71a805aca0a238d721f3e78280f939b78b54be71309ff369077dbdeb65e1bf10002c4b4965e16637b961f17d8e84d2dd24e87d6668554e9b921","ssdeep":"768:tJtOwykMjAPbzGoNdSDAP0Yz5lp8WrR2YEPD:tJUwykMWIDAP0YVlp8WrR2YKD","tlshash":"5cf2957931f7213306fb70b627d75306be248107e80ac408baac47585f9ed96d5e7ad8","first_seen":"2026-07-12T21:50:20.9029Z","last_seen":"2026-07-12T21:50:20.9029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":157,"connect":39,"send":0,"wait":75,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"classe2027.locker/css/site.css","fqdn":"classe2027.locker","domain":"classe2027.locker","tld":"locker"},"ip":{"addr":"185.66.89.65","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trouveclasse.live/","date":"2026-07-12T21:49:50.545Z","timestamp":1783892990545,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trouveclasse.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 14:30:32 GMT","end":"Sat, 10 Oct 2026 14:30:31 GMT"},"fingerprint":{"sha1":"61:90:2B:14:84:3E:D5:2D:B4:35:42:62:27:6D:E6:A0:07:EE:DC:7E","sha256":"D0:69:40:4F:AF:4A:87:FA:2E:DF:5D:25:79:1E:A4:36:B5:79:3E:97:D1:15:35:3F:36:DB:9A:72:E8:3C:17:00"}}},"request":{"raw":"GET /css/site.css HTTP/1.1\r\nHost: classe2027.locker\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trouveclasse.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 21:49:50 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sun, 12 Jul 2026 15:37:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21191,"size_decoded":4766,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (391)","md5":"9990551e336b085cf7413c840ed71bb1","sha1":"f25b569c21bd367c03a70010be2e2eb568c54b72","sha256":"df594b08075ee6a468649e59ad2e0863c5bdb7625aa059017b599269564212e0","sha512":"19065ec0ecac37332e2d592ca18140b070cad53bd908381c9ff6c3c14c784c41849b2091f34a43433f59512e4dbc2c298f1e7e9945ed07626c193c9eea2de149","ssdeep":"192:sKVHnG3hYtOoxefqhfqAtptG/hMTCbNl0JXM9mgWRuwk9mzzFrOsGxOKG4nc0JbZ:sKVcf8fRXl6RpPiKl","tlshash":"5c9232296a630494bc6785657bfb6bc8334c60038c0ad77e7ad66254cfc83f4b691b8c","first_seen":"2026-07-12T13:49:39.636792Z","last_seen":"2026-07-12T21:50:20.904029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":168,"connect":40,"send":0,"wait":40,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"classe2027.locker","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"classe2027.locker","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}