{"report_id":"5a6e337e-aaa7-48be-939a-7641efd1bd96","version":0,"status":"done","tags":[],"date":"2026-07-12T21:51:11Z","url":{"schema":"http","addr":"truenorths.xyz","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"title":"TrueNorth | Agentic Brokerage | TrueNorth","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"truenorths.xyz","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:51:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"truenorths.xyz","ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-04","domain_rank":0,"first_seen":"2026-07-12T12:04:51.337394Z","last_seen":"2026-07-12T12:04:51.337394Z","alert_count":14,"request_count":14,"received_data":11718055,"sent_data":6545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fef6add118721332c0a4459ad21f6189","sha1":"0d62e24712a761475c452e28bd6507ccb093ea7f","sha256":"4144d8398ea47e5cb5554a699ddd7c3fe9844ef46f1a16e221980d90acb3b9ba","sha512":"dea46a9a5cc00f3331b3ea2c80f6ec6400061070ea7ab5a68cdb39ba33e81a7fca8ed6a054f4eadc9a3e026f8bf92ef978b8efd1c72e4e340e984c19d04a23b2","ssdeep":"","tlshash":"18c080a4dc7c4670456d008b35789187b1d0365c81e3a0c5c1ad8e5a6c0efc94f4c5b9","size":181,"data":"","first_seen":"2026-07-12T12:04:55.237235Z","last_seen":"2026-07-12T21:51:16.967695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"876569d4e649eb2f74f701b3087e5581","sha1":"2569d9470b3ba6117c094d1598825ccdbf49aea5","sha256":"824e65767aacb31ba856c8d87a54b8ab8bc016d4e10da16bc75d6a9f1d462742","sha512":"4eaa051811efaffbedbd15758591a65cbacc24324e20af45645c8bc8743bd67d1f01dc6572127b3b6966461ed61b740e6fe56418071d16bf02a1029d7fa0f661","ssdeep":"","tlshash":"64f0c82df2245b337cbdc47f647366df3eb3612dd2052460245bad0935b4d41aae4e05","size":638,"data":"","first_seen":"2024-08-25T23:33:17Z","last_seen":"2026-07-12T21:51:16.969381Z","times_seen":723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18cac7103d77db8a2f9fe3c16fedec2e","sha1":"eea484ad237c2466d38003e2275f5e1fbd2c47b9","sha256":"25bd8ca5d868621a21ce82e9697d5ad3db552df81c32ef28366f19c3e7ad400c","sha512":"33f49bdb7bd1c4e280f635b7279c91d1a8bc496984e5e3f4c20f42559ea0fb5e1049a043a727287496e99dacaa828576d0a0dfb45c9cac7ce0def5da9fe22c09","ssdeep":"","tlshash":"4841279953fd2632427b176f539273fd27214052354b89fe2bd88b801ad0f902c6b9a7","size":1909,"data":"","first_seen":"2026-06-28T15:20:06.600404Z","last_seen":"2026-07-12T21:51:16.971707Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/5w30e.php","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a5955003399df40b811d7603d55deff","sha1":"f7ff5c1aede1866e5a53de3fb61abb3360c35c89","sha256":"0582f94abaa9667e64fb0e83e127921c58da51d7157703c112f90e4d08d076e5","sha512":"d48e93b8c4a8213700bff85eb6055e40244569ea9617f8595c2071649218535fccfe91dc9405c5ffdb6a3bd7eccae0e8b9f53a73ff6aa9b03988b5ca00223e44","ssdeep":"1536:TsQXzl7jOQMo9fDbsxiMUlrBawRmM0/eMIBisomrjmz+YlTBg20:TsQXzl7j/9nscMUlx0/pIBiFmr6z1O20","tlshash":"b4c3d5e5db6782dc9ed8708fc0b3f884e9984e228d1c7167de2dcdc5661ab21808717e","size":129484,"data":"","first_seen":"2026-07-12T21:51:16.919007Z","last_seen":"2026-07-12T21:51:16.919007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7bec20c6bc251a8487bc51e70c9c1846","sha1":"16a997342e4971a3c724a0c0e9f4cdc296ea0d46","sha256":"941b4660eea422515f54d996c1504ae748d1247081406ddc255160c3fa35822f","sha512":"4db4578e72fd8320938be4da8f89cb71b1ddc7b7dae9bd6af72fb207d55516521b8ce82fb74673dc2cc6b0846efc246d264ed830265a88763665ab136b95ad15","ssdeep":"384:nIBUBLy9eYb+1qKePXkIcYIcMKoys7PVDmRVcvKJI6cGLHjJHq/Vp2c3ERYpkBQm:n2CsTcdcMK2Icg7cGvoacY4wc+Ou","tlshash":"500340e1a51be4e49e5210eed037ec02e0281967ceacf093b92ddec2b51df26854753b","size":40161,"data":"","first_seen":"2026-07-12T21:51:16.975017Z","last_seen":"2026-07-12T21:51:16.975017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-14T20:17:13.962167Z","times_seen":3338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-14T20:17:13.959021Z","times_seen":3252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-14T20:17:13.985923Z","times_seen":3194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/73d40736-fac8-4679-835f-2455e70bf423","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04454da58cb330ca5f054eefddca9d9c","sha1":"3bf24e6a8269c3365df4a5c6bfe232a9a5524a7b","sha256":"54ac74bd5f926e8aa1ae6bfaf9fc312efc9a3f54556a7d6107c0257fa9fb6b4f","sha512":"46f6048b9012587457dabe6742cf5fb5fc0f78381682eab033f457108317cd1a019d97940c5f8d7e503399293c8443a823595245acfcdc97b493e4adb60c00c0","ssdeep":"49152:GgKc7OwPEZJsK8ooqtwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtLWE:D","tlshash":"67f523822c97a9b68f48536570b75d0724990d13889cf0dbe758f9c1347efa2c0eb92e","size":3644043,"data":"","first_seen":"2026-07-12T21:51:16.981227Z","last_seen":"2026-07-12T21:51:16.981227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-14T20:17:13.974798Z","times_seen":3092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/o42kexc.php","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1044d4f2f2804343332fba8bf1ce7925","sha1":"21a13879f26d7a4818da2677a585095656f25c8e","sha256":"8308fc12b7fa3e78f91283306a9eebf16152731729a39e8dee18cc5db60fb7aa","sha512":"322d3be1752a8a07babca9b2c47c0258d1c04231c2bdc447868a83ce6b69abdf133b51b65abea3950b87d800a500debb3c30ef8d46ab01c627d4f2e84cb2ea00","ssdeep":"1536:vsQXzl7jOQMo9fDbsxiMUlrBawRmM0/eMIBisomrjmz+YlTBg20:vsQXzl7j/9nscMUlx0/pIBiFmr6z1O20","tlshash":"6bc3e5e5db6782dc9ed8708fc0b3f884e9984e228d1c7167de2dcdc5661ab21808717e","size":129486,"data":"","first_seen":"2026-07-12T21:51:16.963664Z","last_seen":"2026-07-12T21:51:16.963664Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/pZGpa-QX.php?s=%2Fipfs%2FZx38dGXMocKj2DbDTxPnEw09a169d05591d723a8ea04d803693760%3Ft%3D1783893034221","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad4927d97a3d8457ae3431e7e1f6aa41","sha1":"b4fa63c37413e98b7d796050504b340db5c25147","sha256":"a89ede7a9c05f5855f0df1e5653c002712ff08ebe331eb0ac8b2e6af29a5c2c7","sha512":"f0903f55b2619a2221073e50e398dcb550d154cb617a02acc780f68d069f6ee6f266e8ebd3ca9629dc4135861c29390b5a3ba9b1ee97d9fb0e3fa8d3b17d5cb6","ssdeep":"6144:Bh5gDWQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsWQDC6m7hFqa/J/","tlshash":"b3d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","size":619128,"data":"","first_seen":"2026-07-12T21:51:16.943264Z","last_seen":"2026-07-12T21:51:16.943264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-14T20:17:13.97585Z","times_seen":3296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"truenorths.xyz/5w30e.php","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:34.243Z","timestamp":1783893034243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /5w30e.php HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 21:50:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLjqnYZyXwKhIaSB84kDJmgym%2B51nkSB2%2B44Bsb7%2BJtGtUXK%2BhAzlqUPD702kC49UBQD%2Fmx3Fit7jiEQQO%2Bnsxvim168lj9hwCZRQ2Ea3PvnuCb4lLvZrDAanyK0BSkRGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a343a80d89569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":129894,"size_decoded":47583,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56668), with no line terminators","md5":"0a5955003399df40b811d7603d55deff","sha1":"f7ff5c1aede1866e5a53de3fb61abb3360c35c89","sha256":"0582f94abaa9667e64fb0e83e127921c58da51d7157703c112f90e4d08d076e5","sha512":"d48e93b8c4a8213700bff85eb6055e40244569ea9617f8595c2071649218535fccfe91dc9405c5ffdb6a3bd7eccae0e8b9f53a73ff6aa9b03988b5ca00223e44","ssdeep":"1536:TsQXzl7jOQMo9fDbsxiMUlrBawRmM0/eMIBisomrjmz+YlTBg20:TsQXzl7j/9nscMUlx0/pIBiFmr6z1O20","tlshash":"b4c3d5e5db6782dc9ed8708fc0b3f884e9984e228d1c7167de2dcdc5661ab21808717e","first_seen":"2026-07-12T21:51:16.919007Z","last_seen":"2026-07-12T21:51:16.919007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0003.png","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:34.253Z","timestamp":1783893034253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0003.png HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:42 GMT\r\netag: \"e71-6a495422-50aafd91b27a60d1;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLFHPTDenewDu3ZASFPjbfEy3r38W7fTXFU60MKuDY5w8CIaYzLkAtwFXvgp4iHfnlbpMvzLeYAdJqFetN954bsz%2FjnRS4xdtIvLZJK09feGbGSs3ma%2BICyceXRbIQd3WA%3D%3D\"}]}\r\ncf-ray: a1a343a81d8c569d-OSL\r\ncontent-length: 3697\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3697,"size_decoded":4583,"mime_type":"image/png","magic":"PNG image data, 321 x 58, 8-bit/color RGBA, non-interlaced","md5":"fe29dfbd407be681445aab834d92033c","sha1":"23fb40ea22138f836e3e55179aa5634919706d6e","sha256":"b5afc6080bb5dd4d52ecceda7396769271d2b7f20f84897be22c842666e5593b","sha512":"6cfdd7f20edef5790e1985e8b43985bdccf21425a89c60ade2b2b724c48ffe114e254d5b681945abc2b063faa5584cdb16efa239337bcbe7b05cd4dc193d8a9c","ssdeep":"","tlshash":"b9716dad52f1b03dc36aad30f8736158c98d8d86a82c500f949160e959f710de6f974b","first_seen":"2026-07-12T12:04:55.230634Z","last_seen":"2026-07-12T21:51:16.928743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0005.woff2","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.188Z","timestamp":1783893035188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0005.woff2 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:13 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Jul 2026 18:42:42 GMT\r\netag: \"7268-6a495422-d4432f34bc35bba4;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhQFVW%2F%2FpGm5AXSh2G7Mm9LW8IhDGVJOfybL7JQLh4B%2BBKrCe8FdTWKPgoSglvLaYuKGsOwD1q6qmqxZkWXeFxrtrh1GsrGSMN%2BZKiln8egBjI%2F%2Bz47XznWdYk1sfpsxLQ%3D%3D\"}]}\r\ncf-ray: a1a343adfdd5569d-OSL\r\ncontent-length: 29288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29288,"size_decoded":30188,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-07-15T05:26:33.89761Z","times_seen":7267,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0005.woff2","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.196Z","timestamp":1783893035196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0005.woff2 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:13 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Jul 2026 18:42:42 GMT\r\netag: \"7268-6a495422-d4432f34bc35bba4;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cLH66EUH3Hb2N6EvZKAs%2BWj6CxHEMs1%2BeXyGvZqluS3m6c%2BR04UGU4OnQgnYinKR1HPTCwPluWgG8TNv%2FYtp%2FXkjbW00FcetdND7n4QGoOv64Ey75PJMjfb1lojUGbPCg%3D%3D\"}]}\r\ncf-ray: a1a343ae0dd9569d-OSL\r\ncontent-length: 29288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29288,"size_decoded":30186,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-07-15T05:26:33.89761Z","times_seen":7267,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/5w30e.php?m=2973155","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.261Z","timestamp":1783893035261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /5w30e.php?m=2973155 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iymy7gcooRdMDfJuFPS0n8hEYWwC1gfYS98Rcg9l%2FCI5iHmb7G5sjUJzDrkcbckKdaY9RhnR6sISHLXU0uUCBjZ%2BqttiYgQly4fx%2BzTzvmuy5JIoUaI2ccDB3Apbq2ExXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1a343ae6ddc569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3644043,"size_decoded":2702934,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2c2329ff30e4ce17f009b62569085018","sha1":"e44e861f2f913a7595bf24959883884a1a7f8820","sha256":"785fbb27399b1b59f02b35e7319546c5d8e2af50cd7cfcaa4234d2ec3d600b82","sha512":"ed9b46ec032f17dd7960f17259f4cf00d030662e090926ec1439bdf22d109b4d41cd7bd5fb93ae7fa9a8578cee9c30d45a79daf0183d76482c60ca2289a6d7c2","ssdeep":"24576:pQlg6vCCCgvnQ9V8/8Yae0PgGswPpBroS7Inwbjtsy:GgKc7OwPEZy","tlshash":"352523502d63e9ba8f4cab6a7477ad4669424f0304cda0dfd961f8c4117cbb281dea4f","first_seen":"2026-07-12T21:51:16.935055Z","last_seen":"2026-07-12T21:51:16.935055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:50:33.787Z","timestamp":1783893033787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Jul 2026 18:42:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsuJRkwxMWH9TEoZVLiUoL2FUZiQaJ70ERCeMo2UCFdRPca7ZPkCeucNnH24PendtSRU6aMlukjuh86dY%2BFL2n9U5esAUA2X3LiY59a6BxzuhdH7rF1hpPyu1F%2FB2NAOww%3D%3D\"}]}\r\ndate: Sun, 12 Jul 2026 21:50:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a343a5bd57569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132038,"size_decoded":26238,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64792)","md5":"38c6bd615a7aac9c0590f29488ea1bf0","sha1":"26141fec8470d7259edc49903fea731b3ad601d0","sha256":"09097a58f77d030411be5c24efcbc33cecb2708b28f1cff2abc0c24d26e9ca2d","sha512":"4c3b59f16f19f80f76ae101408d5bc63228672c2f5f1f93bbacc2d5a73a5bb1179fab6229f9c528faf4be3a667e97743b3768b5be5e887cec40474881193a943","ssdeep":"1536:OU/cgi7yUNf4Rj2kEW8Iz6sEiXM8jT3AMFsJ5lm2pXNxKm1NQq:P/XiGUNf4Rj2RWbz6TiXM8jcMFE5pWq","tlshash":"69d3b765f3b1863fac0345bd6298f63d6a2f9042ce258fb8b629731027d76d375e2604","first_seen":"2026-07-12T12:04:55.233109Z","last_seen":"2026-07-12T21:51:16.938414Z","times_seen":2,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":68,"connect":18,"send":0,"wait":194,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/pZGpa-QX.php?s=%2Fipfs%2FZx38dGXMocKj2DbDTxPnEw09a169d05591d723a8ea04d803693760%3Ft%3D1783893034221","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:34.249Z","timestamp":1783893034249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /pZGpa-QX.php?s=%2Fipfs%2FZx38dGXMocKj2DbDTxPnEw09a169d05591d723a8ea04d803693760%3Ft%3D1783893034221 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIAwwZPQ2nyTa0hHGJlKMJ%2BmoJL%2F13vXfgBXCXr6yzBBV3wUpYNG6fdFvC0LYSqNPapdXkrhrvhht5bgebwNKbM7%2FX9abd%2BMVyN9n2E2MJEmPxnGVoCNKIBXWAJ2%2BUcavQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a343a81d8b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619128,"size_decoded":149401,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ad4927d97a3d8457ae3431e7e1f6aa41","sha1":"b4fa63c37413e98b7d796050504b340db5c25147","sha256":"a89ede7a9c05f5855f0df1e5653c002712ff08ebe331eb0ac8b2e6af29a5c2c7","sha512":"f0903f55b2619a2221073e50e398dcb550d154cb617a02acc780f68d069f6ee6f266e8ebd3ca9629dc4135861c29390b5a3ba9b1ee97d9fb0e3fa8d3b17d5cb6","ssdeep":"6144:Bh5gDWQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsWQDC6m7hFqa/J/","tlshash":"b3d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","first_seen":"2026-07-12T21:51:16.943264Z","last_seen":"2026-07-12T21:51:16.943264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0004.woff2","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.190Z","timestamp":1783893035190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0004.woff2 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:13 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Jul 2026 18:42:42 GMT\r\netag: \"8ab4-6a495422-24f100398dcb0aa6;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckbP4NKJK1urG6GA1StTupsbjH61bgOzkcBQFpLFHCsafDz%2BQhv%2Fq7WozGQDk2VUjOKar%2Fn0eV7oOuDnuWayDzC%2FnV9qHWpxQmKnxDXzqczB5yEa1xlz4QBzDBGK9dRFEA%3D%3D\"}]}\r\ncf-ray: a1a343adfdd6569d-OSL\r\ncontent-length: 35508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35508,"size_decoded":36404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35508, version 1.0","md5":"c154477b9affa3a0a47f894c8b80c03c","sha1":"b6711decba0d571b538ca01de8a6e70ae4d219af","sha256":"6438d7b8ea9c7c3992d5e2fd2afdb1ff948570a3ef0bedae76247b51632960ba","sha512":"4573c7b0c16c726dcccb6319d6e7fb0d163fb90e1fcfd4228f7c471d52dc4076a5a59b6516c5ab613eadd6cd269b327b3f2cb4f14c2b336c28d31b3809283df0","ssdeep":"768:/plpZnTpd3+CSeY9oJ/P17/4T1HHAG9i6XG2g4voyj2i2619EHGh:Rl/Z9d7/8v/mGCL6fEHGh","tlshash":"b8f2f2c17e122f303604f5f6c0b653f67372e495ea5b8bc098a65576cb06f15dcd904a","first_seen":"2025-09-07T12:48:15.206931Z","last_seen":"2026-07-15T05:29:43.195509Z","times_seen":12705,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0005.woff2","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.192Z","timestamp":1783893035192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0005.woff2 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:13 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Jul 2026 18:42:42 GMT\r\netag: \"7268-6a495422-d4432f34bc35bba4;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjhXpqtJ4clTXkAut2vHL1WPDi%2BBiAt%2B%2BUGdWP%2FifIvGsRWfJdJjmur2IPFTyWByI6AV6ezCH%2B01ziqw089uh4%2Bm6TL0LHO%2B8TUK%2B84EqDd%2BIAg587L1o3t6DXN28ONEoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a343adfdd7569d-OSL\r\ncontent-length: 29288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29288,"size_decoded":30194,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-07-15T05:26:33.89761Z","times_seen":7267,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0001.ico","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.260Z","timestamp":1783893035260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0001.ico HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:14 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 04 Jul 2026 18:42:42 GMT\r\netag: \"3c2e-6a495422-6aa96b5562f91c61;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1eNBGt8fZg%2FPusBsnu7S8A4GIXLlw24xwy693bjN0wddRMeGUGzKy0uWB%2BS2wuPb8rNZL7D0ydrQfBWiBKrV6feExlGX7f4QYfmiBTTc37P1uugTcTWYCXBrmY3B9aVbYA%3D%3D\"}]}\r\ncf-ray: a1a343afbdf9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2853\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3791,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"1a741eb007a75ea25611da175f281a98","sha1":"2e0d77d3e46910bff9529c109dd024eb86bccf58","sha256":"c4b9b4a20994143c86258efb8fb873f1edf182f5372f08dcbff6b0e8e6a738d9","sha512":"2837df738f66ffc1dbffeaef737e2c8b3b3f9b8bf5329bb54332a2544e89ca9002c4b5c5b555f5fbc236ad5b108ba59e7941eb8b44220714ede946ecbb7618e6","ssdeep":"96:7HhkUovcFn0ulNlqA7FhXZ+52HwVSPta/VnbP4+rFkKQ:7HhHovl4qA7FhJ+5uwVat2nS","tlshash":"db620f5c7f600818ea5cd6b0bc66438ae7e8ed87746c670f6703b5424f878e98c05de8","first_seen":"2026-07-12T21:51:16.956219Z","last_seen":"2026-07-12T21:51:16.956219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/o42kexc.php?m=2973155","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.262Z","timestamp":1783893035262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /o42kexc.php?m=2973155 HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nnr9C9sEqP2AqIp%2FAZiSNINEXnXfjN90fxjM2VE235lhDM31pvOW%2BjV1sAZQLQLY1S9S2YvyPMuutA0pA3S9JnyuyQf1eNrA%2FCVmQYNLuvP6jCQjenANS1GOutNX7OoXIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1a343ae6ddd569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4044293,"size_decoded":3006622,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"af97d57891ab6833eb6758ad21df65f2","sha1":"40d6f2e32468f50a1ee6c36a89c5547c727dbb5c","sha256":"b6002e5378170783fbcfaaf9cec4d27c379647356e0c287042b7dcb66238394f","sha512":"d55510b4bfa6956eddbeac474db36eafa1a466c3de793bdb45a5d9acf97744558b08310b87abf4d9d447fc39673413272c00cf1d7f961099436046e29eaa84ad","ssdeep":"24576:mVE7M0RGkqK165OSUBWZCksJQUYZRs4ItHQ147Bl1Y:mVE5Gkr+UBbn6Ga","tlshash":"352523149e46ed148b0caa7f34f74e5b48b14cc6ccddcaa7a4c8e5833adebb50665c09","first_seen":"2026-07-12T21:51:16.96146Z","last_seen":"2026-07-12T21:51:16.96146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/o42kexc.php","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:34.247Z","timestamp":1783893034247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /o42kexc.php HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 21:50:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4PAO5FvrpTaw7cnczN5gbu14Bo9SuVejFpitGgWLADr09wFZzxWNbFykVhwNQPhYTjJe3WAzjjgQz%2BG1wzTq%2Bi1vHkx5tzZzwt64KFTxXtoBj6vLcB%2FpAJt23Suy4oHjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a343a80d8a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129896,"size_decoded":47563,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56668), with no line terminators","md5":"1044d4f2f2804343332fba8bf1ce7925","sha1":"21a13879f26d7a4818da2677a585095656f25c8e","sha256":"8308fc12b7fa3e78f91283306a9eebf16152731729a39e8dee18cc5db60fb7aa","sha512":"322d3be1752a8a07babca9b2c47c0258d1c04231c2bdc447868a83ce6b69abdf133b51b65abea3950b87d800a500debb3c30ef8d46ab01c627d4f2e84cb2ea00","ssdeep":"1536:vsQXzl7jOQMo9fDbsxiMUlrBawRmM0/eMIBisomrjmz+YlTBg20:vsQXzl7j/9nscMUlx0/pIBiFmr6z1O20","tlshash":"6bc3e5e5db6782dc9ed8708fc0b3f884e9984e228d1c7167de2dcdc5661ab21808717e","first_seen":"2026-07-12T21:51:16.963664Z","last_seen":"2026-07-12T21:51:16.963664Z","times_seen":1,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0002.png","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.156Z","timestamp":1783893035156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0002.png HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 18:42:44 GMT\r\netag: \"196f1b-6a495424-25d5e427bf924c79;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xT65rva%2BjKRBj0IN8jbllGMqjGO6QCFC1vZmVH8BKJPAGo%2BMr8BnyB3ro%2FqkZ31LrqfK3kHgMNhLqnU6xf3oBI7Y2r2jnpeQQgQbUv5rxsTHPgmBxrGzB5MiP3ByVZqNwg%3D%3D\"}]}\r\ncf-ray: a1a343adbdd1569d-OSL\r\ncontent-length: 1666843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1666843,"size_decoded":1667737,"mime_type":"image/png","magic":"PNG image data, 2560 x 2048, 8-bit/color RGBA, non-interlaced","md5":"c8504e262a99a23965705f838ffa6fce","sha1":"b257a375200e2ce909d3c7093b72668541598b87","sha256":"8008f446a35f2df10057b7cda96f0548200b4d14181c2dbc8b20372707c93e9f","sha512":"73b36c0e6b66e8d86d8de665c0a99459721df73a3799c162609063bd559a972286cef2a26d00b2dc6b3a9dd20a5965722e60d3d01af77479dde5269caa6c0c40","ssdeep":"24576:cERFxxjEyIOhB8wFOrlYKmn3Acidt4rlJIAuSNtl8T8vn:cERxjEyIinAlYKmn3ABzIluINtqMn","tlshash":"6325231298c706b957af66dc2cc32354bf43ad3d4599427bc938f0be215b623ae93e14","first_seen":"2026-07-12T21:51:16.965115Z","last_seen":"2026-07-12T21:51:16.965115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truenorths.xyz/assets/asset_0006.ttf","fqdn":"truenorths.xyz","domain":"truenorths.xyz","tld":"xyz"},"ip":{"addr":"104.21.75.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truenorths.xyz/","date":"2026-07-12T21:50:35.186Z","timestamp":1783893035186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"truenorths.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 18:15:18 GMT","end":"Fri, 02 Oct 2026 19:13:49 GMT"},"fingerprint":{"sha1":"F3:21:09:04:74:13:39:7A:E5:F9:7D:2D:96:4B:A9:D2:88:48:20:DF","sha256":"4C:E0:16:4F:35:05:28:33:29:33:3F:D4:F3:48:AF:C9:DA:CD:18:8E:66:01:DC:84:3E:60:9C:BF:2D:1C:1F:27"}}},"request":{"raw":"GET /assets/asset_0006.ttf HTTP/1.1\r\nHost: truenorths.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://truenorths.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 12:03:13 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Sat, 04 Jul 2026 18:42:44 GMT\r\netag: \"124308-6a495424-4192ee93c67b490e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 12 Jul 2026 21:50:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 35241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhYCd2I3O5atfnsuGdMgI93aNvFdFownyiNyj9HKkH13kzeM1w%2BLccJ6SNx6kJVaTcpAMjNFGccmqqZITDF9yhNQQ1L2JEa%2F24aNRaKmomzlpNgxG4AhpqYTqfepMMYuBw%3D%3D\"}]}\r\ncf-ray: a1a343adedd4569d-OSL\r\ncontent-length: 500686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1196808,"size_decoded":501638,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 21 tables, 1st \"BASE\", 132 names, Microsoft, language 0x409","md5":"ae42cccd6209a6c6fe2d223797f6041d","sha1":"d5bbcbf462d71f3b9879a8e123ee562066770ffe","sha256":"63fe51500c57596b46f4967e71cc9180b02605a6525b65f3e4adae857cd28151","sha512":"e11f88e1b0f6a204c35919204062d61a227d2513d76d14f5cb830a085e731e23f798f09279aea7f344c2e69dab9a9a27e83c5c31ae59e4e6907f71a21d313ee6","ssdeep":"12288:IobivzYeY1V/qLK0UEt5K8MUzS5O99zNceOr7fAYLh:3bnBcPUEt55nqO99zNcZph","tlshash":"d6259d12f042df46d681673850f7276a837e24aaff57670d672af631eda73c1ba12240","first_seen":"2025-08-03T18:22:43.229008Z","last_seen":"2026-07-12T21:51:16.966929Z","times_seen":47,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"truenorths.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}