{"report_id":"4e08060f-d08e-4cb6-b9df-f37c717a2f45","version":0,"status":"done","tags":[],"date":"2026-09-11T09:37:21Z","url":{"schema":"http","addr":"trisfou.site/trasasa/arservice/client/login.php","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":0,"asn":26383,"as":"Baxet Group Inc.","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/login.php","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"title":"Connexion  - AR24","dom":{"size":9841,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3198)","md5":"d375185962d7324271771244b3f6a3f6","sha1":"7c26697a48ebbcea35443103bef64477527db703","sha256":"0a44c00500fcbed903b05cfdbc798b36f745e3f424c98d5fe0d634470fcac69e","sha512":"c8d13c902645a414a2e77df14232bb288daef59e14590ebcf13654ccaeb34942f3193f391d5e3eab1dca43da84d6dcc6414d700dbe784537f40cd2766ef9b89e","ssdeep":"96:TJXLzMua4IgiDkSUAV7S9ihV2ftjb86/XO12cZicT7THtBTyMhNrQHZ2ftjb8xGn:TJ731iDkS0sa1v0BAcfTHt1DsHYfVpn","tlshash":"eb12b6b105f8619f54834f1eae156a01ef2f6263b79a6400345e0b7a2fc7d4ada035bc","dom_hash":"domhashf0257d76286040685ebff83d41ae4aac","first_seen":"2026-09-10T21:22:11.223091Z","last_seen":"2026-09-11T09:53:20.104823Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trisfou.site/trasasa/arservice/client/login.php","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":0,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T09:37:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trisfou.site","ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-08-25","domain_rank":0,"first_seen":"2026-09-09T23:40:00.267967Z","last_seen":"2026-09-09T23:40:00.267967Z","alert_count":46,"request_count":23,"received_data":138951,"sent_data":12647,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/js/user-login.js?v=1748258816","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3d03ca70b394999e1df74385cd0049f","sha1":"fefb4f1a30a7fe16e9c818a710922dbf08d57f85","sha256":"a1758f52719f4dbbc7378a5e3cd084df5063a532dd64a70c69dbb708efb0462a","sha512":"b93328485a8d1eb256a185a3d9b88388e9fef21b322aadda6e64c2456aa55499a77e1ec3cc234b8aebf192d007eb7452135119b5b744f79e89774c22897abb5d","ssdeep":"","tlshash":"36f096b72094093155aeb276311665107421f0532d16890dfe6ceb4c2b32e57ca66f7d","size":556,"data":"","first_seen":"2025-12-18T09:35:17.614315Z","last_seen":"2026-09-11T09:53:20.105763Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/img/frenchtech.png","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.694Z","timestamp":1789119412694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/img/frenchtech.png HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 17590\r\nlast-modified: Sat, 31 May 2025 13:51:06 GMT\r\netag: \"683b094a-44b6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17590,"size_decoded":17840,"mime_type":"image/png","magic":"PNG image data, 61 x 65, 8-bit/color RGBA, non-interlaced","md5":"552a0b8f615fed1fe0509962809457bf","sha1":"d483925d482ad312596883a092122c9b67b12d60","sha256":"0733f0938c31baeeb464a8779c7bf7edf7be50fdd92cac8afd278f9e6d1370e8","sha512":"855ade3f07f25439ed9e578d023427fa53730068f5825c4da9aa59384804623e506c52f65cf6538ccc8cab71765ba329cbe5d0f70b5554e0df185bc0e622cf6b","ssdeep":"96:eS/b8kEWmPXxgBMxNX7sc5Vscg3roV6tFYzK8Mc3nen4:eSAk6zwc+qc8NXe4","tlshash":"1882f924bdb0b474e189d5306ce62942dc398907eac48dc1bbce0a237f25be65c5f597","first_seen":"2024-02-29T19:36:55Z","last_seen":"2026-09-11T09:53:20.109685Z","times_seen":142,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/img/syntec.png","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.697Z","timestamp":1789119412697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/img/syntec.png HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 17000\r\nlast-modified: Sat, 31 May 2025 13:51:44 GMT\r\netag: \"683b0970-4268\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17000,"size_decoded":17250,"mime_type":"image/png","magic":"PNG image data, 80 x 31, 8-bit/color RGBA, non-interlaced","md5":"99205aa5b38af11ed2ac26af2a69682e","sha1":"776d1dd6141298ab8d9ec8f236b65d443a316e70","sha256":"ade43e488541b734d4c924becdf51617bd90289b7f8748598164e1ff3f53d410","sha512":"47e89700e4ddc6897ae665ec12bf9e7189753802ef12a7700ce8a9b23415668881982e6db146f92206712a30e769660ebbf4fb9c00ad2383a6520aa112f3ba47","ssdeep":"96:RS/b8kEWmFdGv4dLxNX7sc57ZAQvM5MbAQW0li6BBv3yj38mc4:RSAk6Fp3XAjqbU6zij3X","tlshash":"c972e798bef035a4e19bd4316cd02946dc671543e5c08d89bbce4c176f6abe94c4f187","first_seen":"2024-02-29T19:36:55Z","last_seen":"2026-09-11T09:53:20.11025Z","times_seen":141,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/barlow/barlow-latin-500-normal.woff","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.790Z","timestamp":1789119412790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/barlow/barlow-latin-500-normal.woff HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/Montserrat-SemiBold.ttf","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.897Z","timestamp":1789119412897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/Montserrat-SemiBold.ttf HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: W/\"328-659e59e80e602\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/login.php","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T09:36:52.227Z","timestamp":1789119412227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/login.php HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3470\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10823,"size_decoded":3702,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3154)","md5":"bb24d2a4951ec3e292d551f696b10418","sha1":"caff922fddd72e2fb0518da258413d99a46627ed","sha256":"f03351ced171f4f697876649de370c616b843e9f7bdb1972dac446adddb76597","sha512":"8f0aa3556302dd1e5328e8d6e8b5c51f1b724a7e57c2375cfc1bff207c54978d758d53130ea04305142a02d75ddbfcf19cc1968866403f21a5a0ea263b9a8296","ssdeep":"96:8LJXLzYEK4emKyIOffSEID2ftjb8kkO12cZicT7THtBTyMhNrQHZ2ftjb8xwP0WL:8LJ77SmKyIrruDk0BAcfTHt1DsHYx+Rg","tlshash":"1c22d8b105f861de90874f2e9f256611ef2f61a3b7596404349e073a2fc7d4ada035bc","first_seen":"2026-09-10T21:22:11.232081Z","last_seen":"2026-09-11T09:53:20.107412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":113,"connect":30,"send":0,"wait":43,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/img/eye_close.svg","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.691Z","timestamp":1789119412691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/img/eye_close.svg HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2100\r\nlast-modified: Sat, 31 May 2025 13:52:56 GMT\r\netag: \"683b09b8-834\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2100,"size_decoded":2352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"260741425a39ef84beebaa37450d219e","sha1":"043e918706090db1e938f4320057b7b883d25774","sha256":"1d77270d9707a11bffa6309ea81cd2747cfe1829779b5932747e044eb8a19f5a","sha512":"a46f42e99248734e1cbd02300bffd0267a840b5d58c71941e2f5350a3f2f328601501172394663366e21785b26c821c1889780755794493b23fe4b07267d34c8","ssdeep":"","tlshash":"b84165e27694d2e4bc0b5bd2f916c665652f3cffbf8d8ed99098add85131084c8c1d90","first_seen":"2025-12-18T09:35:17.619939Z","last_seen":"2026-09-11T09:53:20.106383Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/montserrat-latin-wght-normal.woff2","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.746Z","timestamp":1789119412746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/montserrat-latin-wght-normal.woff2 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/barlow/barlow-latin-400-normal.woff2","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.747Z","timestamp":1789119412747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/barlow/barlow-latin-400-normal.woff2 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/barlow/Barlow-Regular.ttf","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.834Z","timestamp":1789119412834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/barlow/Barlow-Regular.ttf HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: W/\"328-659e59e80e602\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/montserrat-latin-500-normal.woff","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.854Z","timestamp":1789119412854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/montserrat-latin-500-normal.woff HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/Montserrat-Medium.ttf","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.896Z","timestamp":1789119412896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/Montserrat-Medium.ttf HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: W/\"328-659e59e80e602\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/css/user-login.css?v=1748258816","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.680Z","timestamp":1789119412680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/css/user-login.css?v=1748258816 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 286\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 31 May 2025 13:53:38 GMT\r\netag: \"210-6366edb8cbc80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":528,"size_decoded":612,"mime_type":"text/css","magic":"ASCII text","md5":"911b9f9f0bd5262138b939f5662cd688","sha1":"0f629f04896868c4bde54ce860fd6ec93a719779","sha256":"57163d214563455990a229d58c6082c34d508e7ed0be9f1a9bbd2501d60da4a4","sha512":"4291c4f8415b328bdd968d0d42bb0321d8a6c31ff28af08612f1588c369d20099aed7fa348fdc91afaa703942eb32417457ecc6d34a4032b7bce76eb3cc152e9","ssdeep":"","tlshash":"f3f02b422a731a20591b95198ec59707213dd083c48fa49c7d4693698fc77c8d762f6e","first_seen":"2025-07-02T06:47:51.458915Z","last_seen":"2026-09-11T09:53:20.108667Z","times_seen":28,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/img/AR24.svg","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.693Z","timestamp":1789119412693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/img/AR24.svg HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1566\r\nlast-modified: Sat, 31 May 2025 13:50:30 GMT\r\netag: \"683b0926-61e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1566,"size_decoded":1818,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc98fec7243c0fe0271c1e7a4023cfea","sha1":"4cc27405bb9634b603bcec4526cab8b9a3a2f6a2","sha256":"149e686c6b5d92f4b7692c33a39c8e8cb03b78a51f572080c2260b3d5014b48b","sha512":"75271d9d2fb3ee8800874a8ab8582e81b3246030f509bf4d015f1e81f2988f4cc2deb661a046468f8fe7114b60e859badca04594f1327e84f8be552234aa27a2","ssdeep":"","tlshash":"9731f0ff471862cc699b9f8cdf3269f4470f94ba76a506c1859ec7ae44c38c8e907850","first_seen":"2024-12-10T11:38:40.948442Z","last_seen":"2026-09-11T09:53:20.109168Z","times_seen":81,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/img/regionalsace_grey.png","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.696Z","timestamp":1789119412696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/img/regionalsace_grey.png HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 17233\r\nlast-modified: Sat, 31 May 2025 13:51:24 GMT\r\netag: \"683b095c-4351\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17233,"size_decoded":17483,"mime_type":"image/png","magic":"PNG image data, 54 x 63, 8-bit/color RGBA, non-interlaced","md5":"7fe3f17113eeb0c359f53079972c237b","sha1":"54161f22dbef6d64a39807f1cfb99b9dfb87c0da","sha256":"5f1c57d5cc1c7d50fc34197f2c8c55b62df63643aad27cd8d569434f3613ae06","sha512":"d36690e8e07ff7a0b8eaca490f1afd78eb81b7adc996d6b589eba2f3265630fe3b1e41dae7bb8dcfea0328c8ae66b6881513cc5aef56dc087b076ba20fa7522b","ssdeep":"96:pS/b8kEWmwpwn6JtppyxNX7sc5jKM3hWj367zRZTCKDpk95Gx6CmLkhfZm7:pSAk6EhwwmhWrgz70Gx6V0fZm7","tlshash":"8e72d8a4fcb0306085d9e5322ce56846dc3a5583bac0ad42b5ce8d233f24bed9d4f58a","first_seen":"2024-02-29T19:36:55Z","last_seen":"2026-09-11T09:53:20.106893Z","times_seen":142,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/images/logo/AR24.svg","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.731Z","timestamp":1789119412731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/images/logo/AR24.svg HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: W/\"328-659e59e80e602\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/barlow/barlow-latin-500-normal.woff2","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.744Z","timestamp":1789119412744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/barlow/barlow-latin-500-normal.woff2 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/barlow/barlow-latin-400-normal.woff","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.793Z","timestamp":1789119412793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/barlow/barlow-latin-400-normal.woff HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/montserrat-latin-500-normal.woff2","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.810Z","timestamp":1789119412810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/montserrat-latin-500-normal.woff2 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/css/min.css","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.679Z","timestamp":1789119412679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/css/min.css HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 May 2025 15:24:58 GMT\r\netag: W/\"683b1f4a-d5ee\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54766,"size_decoded":8136,"mime_type":"text/css","magic":"CSV ASCII text","md5":"52b0569da43e0b75acaaca545a2b636b","sha1":"058b99a463d80f3267a6b8ba4d9b52e158f71a41","sha256":"6448996fc586e607250d557b144d41110aec189bf9ab958e79d97f4dcea07482","sha512":"7580ccf5c08854d6eb92679c4dc7353ca3ad6ef7268c097c5876769b8652e114f3724c257e6251cc446ec1df06b12bb030cc9dc56ce9eda808ce59f9b6ae5a44","ssdeep":"768:SGVd7WjT+E0LaUgrwKE8Dh4sv0MHujbQHcQWltDFepRAesLvNCAE/e:VVFWjTfUaUgrwKE8isv0qujbQ8QmB","tlshash":"bd338640aaa12500b113985820d37fb4bb1d9013780aed3d77f978d8bfd9d9692b3b6d","first_seen":"2025-12-18T09:35:17.619088Z","last_seen":"2026-09-11T09:53:20.108132Z","times_seen":5,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/trasasa/arservice/client/assets/js/user-login.js?v=1748258816","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.686Z","timestamp":1789119412686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /trasasa/arservice/client/assets/js/user-login.js?v=1748258816 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 261\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 31 May 2025 15:22:14 GMT\r\netag: \"22c-6367018687580-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":556,"size_decoded":601,"mime_type":"application/javascript","magic":"ASCII text","md5":"e3d03ca70b394999e1df74385cd0049f","sha1":"fefb4f1a30a7fe16e9c818a710922dbf08d57f85","sha256":"a1758f52719f4dbbc7378a5e3cd084df5063a532dd64a70c69dbb708efb0462a","sha512":"b93328485a8d1eb256a185a3d9b88388e9fef21b322aadda6e64c2456aa55499a77e1ec3cc234b8aebf192d007eb7452135119b5b744f79e89774c22897abb5d","ssdeep":"","tlshash":"36f096b72094093155aeb276311665107421f0532d16890dfe6ceb4c2b32e57ca66f7d","first_seen":"2025-12-18T09:35:17.614315Z","last_seen":"2026-09-11T09:53:20.105763Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/montserrat-latin-600-normal.woff2","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.812Z","timestamp":1789119412812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/montserrat-latin-600-normal.woff2 HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/barlow/Barlow-Medium.ttf","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.829Z","timestamp":1789119412829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/barlow/Barlow-Medium.ttf HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: W/\"328-659e59e80e602\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisfou.site/assets/fonts/montserrat/montserrat-latin-600-normal.woff","fqdn":"trisfou.site","domain":"trisfou.site","tld":"site"},"ip":{"addr":"193.58.120.113","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trisfou.site/trasasa/arservice/client/login.php","date":"2026-09-11T09:36:52.853Z","timestamp":1789119412853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trisfou.site","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 20:18:48 GMT","end":"Mon, 23 Nov 2026 20:18:47 GMT"},"fingerprint":{"sha1":"71:60:A2:5C:2E:DA:39:E9:4C:85:EF:54:7B:CF:9D:FA:1A:12:86:68","sha256":"C5:C2:41:B9:C6:FB:60:89:1E:CA:68:0C:28:CE:73:0C:B2:E5:E6:0A:F1:67:73:75:06:36:11:E9:52:A3:26:E3"}}},"request":{"raw":"GET /assets/fonts/montserrat/montserrat-latin-600-normal.woff HTTP/1.1\r\nHost: trisfou.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trisfou.site/trasasa/arservice/client/assets/css/min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 09:36:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 808\r\nlast-modified: Tue, 25 Aug 2026 21:16:41 GMT\r\netag: \"328-659e59e80e602\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1036,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-11T09:53:20.105236Z","times_seen":39115,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"trisfou.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trisfou.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}