{"report_id":"628b3984-9d6e-4fdb-ba3e-2ae212937aba","version":6,"status":"done","tags":[],"date":"2026-01-25T00:12:48Z","url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"172.67.156.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"title":"Trove - Trade the rare, Speculate the future","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T11:07:12.655044Z","times_seen":17760269,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"172.67.156.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T00:12:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":4,"received_data":137948,"sent_data":2116,"comment":"","tags":null,"fingerprints":null},{"fqdn":"troveupdate.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T14:16:40.140065Z","last_seen":"2026-01-24T14:16:40.140065Z","alert_count":27,"request_count":27,"received_data":6737911,"sent_data":12523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":4776,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-08-04T05:46:09.707972Z","times_seen":1576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/18d617a8-1abb-4071-b996-c6cfe4a11135","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a6a940a35a7a310b8392f11bbe0e442","sha1":"141cfb1ced57a112ac1dedbd7495b9f895d7d4a4","sha256":"6cd8b611195c40b9962b01e70d1d2fb8b3188844475202ef580540d8418b4fe0","sha512":"9d434633c65b2d320371f382b6c0ee6ef5326b1e82aa858c75fe21ede52a623596f14904a97c310961eade908e97ba47dd6fd15eed0a8728fe4c8003cfda1c51","ssdeep":"","tlshash":"b611c2cd3e9bf5c265fbeb91598f644b9c39e659300c8402c64893e828954ecd287f74","size":1000,"data":"","first_seen":"2025-06-29T22:01:12.821928Z","last_seen":"2026-05-30T18:20:38.910489Z","times_seen":508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-05T23:53:54.837406Z","times_seen":3265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-05T23:53:54.843805Z","times_seen":3395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/file-loader.esm.js","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe3867010e693ed7cbc9fe8fa482c19a","sha1":"17e0e9d48acc9671e6865432f329d5dd717cce94","sha256":"8d63d90e3fabcb69956efaac418aafea3b5298b1c8a0822551bb2ac058877e58","sha512":"f41a8183b5b4cbb4973ea58518c9c25adb72346a969534af3947ec675aaad2ca8b18a3bde1dc00e957a61031c3dad6b776db30d2327564d2d5637dc09f3a8c95","ssdeep":"6144:pXwNec2fz170u0jpHnioPLcZgY+eyIcbIwgCvt:pxjxnOY+eyIcbIwgCl","tlshash":"fb84466a2f9220a6df2d4178da39efdedc44147cc3ae5cb59d22a08bd881c3051d677e","size":383718,"data":"","first_seen":"2026-01-24T13:38:56.188653Z","last_seen":"2026-02-14T06:05:44.016816Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-05T23:53:54.842182Z","times_seen":3480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-07T00:51:32.33266Z","times_seen":1955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-05T23:53:54.838461Z","times_seen":3227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ff9280f236dc0092125aab913c4fc4a","sha1":"03a6167283dae2e7ebb300d5613909b39fadbeb6","sha256":"9c0994c8f76ac859d31b3f347260c8f05f0c8030cb11419130f7e38d37b5e3bb","sha512":"3f83a8f06dfdb29d06ec529e3a7bc5478a79be04f0c04b7ce2d82935221771bcf0d014f9b1ae1ad24e047a94946cc1ec39ef8999fdec6e56c51c2c5d0300b3eb","ssdeep":"6144:lLkaxCmDA00jpJnwGbLeZ40eoyWcjIwgCVl:lbku9a0eoyWcjIwgCL","tlshash":"d28444692fa220a6df2d5178da39efdedc44143cc3aa5db4ad32a047e881c3051d677e","size":377032,"data":"","first_seen":"2026-01-24T13:38:56.223028Z","last_seen":"2026-02-02T22:13:20.434Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-05T07:20:00.230465Z","times_seen":3443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/ultratools-3.3.2.min.js","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e1356e084d6b8ac078751b90807adc0","sha1":"75e147bab80047e8116b5250a5cc721f86ec97c0","sha256":"f90492f8fb6020f9a772c06450fda2d62df006bcc10f3342200d6712e4ff85c9","sha512":"66717e7714c38334b03475295dcd7a6ee9d5b0b51c60837b7432c06f742d8fa7b04d7752e42014293fcda0cccad2cb3daa955e12a4ac3971453804ba7c3cafea","ssdeep":"768:y/nAUc9dvJ9rbh/3q6/sDxDadI35OtsrRuUBASBrW9G3i5c66czcjzLcOgcoXcXO:nvJ9/1/UxDadwwsrRhNr9I/+8ss","tlshash":"8d931bd5990bd4e58e1261cdd433ec15e4285963cdacf1a3ba2ceec2785ef62844723b","size":89299,"data":"","first_seen":"2026-01-24T13:41:29.683672Z","last_seen":"2026-02-14T14:47:57.15199Z","times_seen":3360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-05T07:20:00.227598Z","times_seen":3335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60f85a4d62b3d13efcfb2e9b0b2d5e9e","sha1":"966160ad7ccdedd32586b3c5545e2f1c9cabb564","sha256":"e6de9306c3b52a68e9a2bd33a9cbc371d2cffb0c5cf28b93bf4d16a02dbb27b5","sha512":"0d800d3eba944792cf347eef1f887450ae89ea3f1cd35ace3c3f5c72e5d5ee43cb83ea9cc398b0b9f4d9fbf41954ae197055b1194b39333273a4919d0bd6354a","ssdeep":"","tlshash":"7531123cf01c593fc1f8a4b1d1eb1966b98b36467701c1aa865e9c4afa031c5b8634bf","size":1701,"data":"","first_seen":"2026-01-24T14:15:49.292368Z","last_seen":"2026-01-25T00:12:51.159484Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10f7758691690617c1e32ed73356a571","sha1":"e9131a49daf9a9888bb254a75b9332afea150214","sha256":"52eda4285fadb5bcbe26904880964dc4c077ec2c58d25abd9980e8cba4208bc2","sha512":"eed288b6f91fc76edb4e154f22d463fb44b86b862e3a59dd7dc549282c7ac784b4705267310df42579fb4ac0deef22b9a1de537a2c45b0df463b3b590be1dc94","ssdeep":"","tlshash":"1f21ae9b7f285f7905f96abb60d756f47d6748413d0a905149be8cd10620dc120779e3","size":1353,"data":"","first_seen":"2026-01-24T14:15:49.309163Z","last_seen":"2026-01-25T00:12:51.160269Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fvue.bundle.cjs.js%3Ft%3D29488332%26u%3DlUTcFk670ogWzwXJGDY5MjU2NDQwMjhjZmYzYzM0MDI3YWY2ZLly3iluitETpm_IyA","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"troveupdate.live/3cb8ac12c968266b.css","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /3cb8ac12c968266b.css HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: W/\"69735c86-9e57\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMiVzSIViEPYwnYDpaFjLMuE4XsAfVJnvZsqgYAQyVeTc6Pn4l%2BHmtvJA8qfZ6pONFu%2FHs04n3NQ8CNW46oamKAnxHZRmKNgcPmIdjhH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b02b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40535,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23230)","md5":"62114b3887391010c6862e578ffe3b55","sha1":"7d8b9a2870011ac0f0661f265cef4bfbff42b88a","sha256":"0cf19321977851aa74bedb34d784c1018422a7c37c5a5c089d3c00cc65f0a9b8","sha512":"78ae613d898dbeb8c85f70a4e11c573f088677eaea54c337a916539637231e4f2a0b142a651efc7ebedb8ac0bc7cba41a2c20f043bfe7aeed6a70c98a0647cd1","ssdeep":"384:4RqLoIFgcR6Qg1iXZPU6x4/GX74uE4IYaDXqX8XFXgXcXPXdpbFArqwR5mKLmOGy:nq25mKLE1HCsDl394neFFMsDhNZsnkU","tlshash":"5a03ea368928203efc33f5d260c5bf6bb43d6084ef2955a1ea5612149fdb5f719d2b08","first_seen":"2026-01-24T14:15:49.253545Z","last_seen":"2026-01-25T00:12:51.115462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/solana.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /solana.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 9837\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-266d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42GxhBARxGHWDjGNBL%2F4G%2FLwDJIYf1BhckyHpD10EN%2F9nopAVbH8XiiJR8TNpnN1rbHZ0kHxWqiS8f80iLycymkAl8TVPX1%2BpqnQFG7d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b09b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ce05b7956f0b4a0bb1516ea1983c7696","sha1":"dec030582e00fd1d594df6d52e576f8240be523c","sha256":"f3d0f45a102a1f8241ae981996cda39798abbd74cda8e6eb053719aba953c73f","sha512":"12c5773b1b66f5c7a2681491c71e65e5a23413ec98c5154f44f9757685ad1ae89890b95b7c9329762db4c755d9a9a81452f542014f2d199fb813ac02188815e5","ssdeep":"192:gnDHVQIP3k1cIeTkWnekaR7+nkWC9v6Rg1nkyKWObTLexXxZzhWP:yDHVt2bR7+nk39v6RgqyObophE","tlshash":"93129ec368dc7457f399b527cbd41289ee3df192368e7488006315e43b270e6554a7e6","first_seen":"2026-01-24T14:15:49.280456Z","last_seen":"2026-01-25T00:12:51.11671Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/fe20774fd71cdc6056bf016007a7c67935a6671c.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /fe20774fd71cdc6056bf016007a7c67935a6671c.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 35168\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-8960\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4iQU9nCLuVTxCNuvmnX1rLu%2B3OwuMuhtdmg38iW3phd2GJmSMEqIW6yaYIeg3bJ8WxAcdQ1cuR10q8TW0BP9Z%2FaCiSprEFsDZUP5JQd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c8b13b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"9388fe659a18b09ae07bb9846c54812c","sha1":"fe20774fd71cdc6056bf016007a7c67935a6671c","sha256":"b376831fbf757060eb192aa45f3f4bb2412f40904ca453007e139acef698fdb1","sha512":"b6d193a075cd0f9b6bf8bc828c5d5f4c6d458d4fc6bf43a4153314cd055c011d3fbb782209d537971abd6bd6e8a56a7bbe66300c94ece9724733bdf322bc2310","ssdeep":"768:SNpewrpkqO7hwldqqeL3D4VzwjJ4dCAuIfn4TibV+BHNuzMD:KpewrpkqOOldcL3DYW95IP4TiwH","tlshash":"d6f2e1e7cb827aa66e61e9764c11be593a05829c104d0dfd614a300dad7ee8c54dc3ef","first_seen":"2026-01-24T14:15:49.276887Z","last_seen":"2026-01-25T00:12:51.117861Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/solana-2.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:25.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /solana-2.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 404\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-194\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRlg8xsO6OmPOI80bs38ScXoFW%2BvCsUiWk6BeJgGKS4YBeoU4afvE7zA1saMZwUzZP6h4w%2BVqPT%2F8qqNg4FxwYhn2s%2Fw%2FVFAULod4SYN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f107e01b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"3d59b464371a1c7fc2935b30893f1b5e","sha1":"d50fef541f7e7a4884c28312d367d2df78890c8e","sha256":"129c34cddabf3f1de3a663cd3d5934ad029fe8e41194e66150d79f5593b7a644","sha512":"49a29053a0f29e9d235c990cf8ec4542068299e97e734c452c06cc67567ae8cce71305e8912000d23f63b3aeced7c89d77fd7e27a1b0d982df762d7f3e86f63f","ssdeep":"","tlshash":"c7e0f8ca8e803db3d4880ef209ac41209f6e808d8529baea81201906fc2087c66b43c8","first_seen":"2026-01-24T14:15:49.279492Z","last_seen":"2026-01-25T00:12:51.118987Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T00:12:23.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqggkpGSGwlwmUQSNabx9uKTdFu3SmUJG67YA64HZUbXsJgohQlpzkUC2sjSw5F3AH7lUOVoDvjBvULZ128n3pbRxPY6OWOY1Mhl0Bh%2B\"}]}\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c338f0b4ae5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371049,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (14946)","md5":"9f22d654e66772b2fe17b951d6318cd5","sha1":"81971759e0a752a1d57b4594c67321e6f553f13a","sha256":"fef23f918ff6b0e329dab93e3832b61133d5211b2c07b8e911da5499949ec459","sha512":"2d54a10c417e7c2d1ec415b9a33fb9da23b858ba460b9c65cef5860b56c13c6b147d7c9cdc050504d3016e68e22becdbfdd3e909e2433280e16bcb11cdbf555c","ssdeep":"1536:d16XzNtRkJ6v2FDebx/c64Jysq7vuRqkgTDQJ//zo3sWFVmUipfXJn4kvHyJX0WR:HeRoeRWF3NBFNBXNB3NBzK5N","tlshash":"3f843df12333117ae947fcc5a9e317c922bca8a5afba4294d73d5a5f588b9d0d412f00","first_seen":"2026-01-24T14:16:44.327389Z","last_seen":"2026-01-25T00:12:51.120035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":250,"dns":237,"connect":1,"send":0,"wait":19,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sora:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:30 GMT","end":"Mon, 23 Mar 2026 19:52:29 GMT"},"fingerprint":{"sha1":"86:D6:34:52:EB:68:D5:4F:25:44:58:CF:88:1B:C8:55:D6:9A:23:A7","sha256":"4D:67:BD:08:81:96:64:4A:7A:02:51:95:46:0E:60:D7:FA:5D:84:3F:53:29:E5:C8:84:87:AC:12:B6:97:C2:8E"}}},"request":{"raw":"GET /css2?family=Sora:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 25 Jan 2026 00:12:24 GMT\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"01d4acde97d0cf0a4729ba705f5a4557","sha1":"4a96d6f4eecaf0f19a153b75295f8a041ba82ce7","sha256":"12fa406d63c8c870528d17fd50581fbaa70f0998e99939ddf611daf52a601858","sha512":"e8c1eceda7daf80d948c025153072da6ff65823ae8f416267061b9886cd8fbcf81928ada82b819d859c46dcfbe95534fee8844e72e0037c8ea1458b65b3e087b","ssdeep":"","tlshash":"8a81c181046ba504ebe31dc132ce7e37fe5e6151a845d938aefd1888fc9ec2a5351b4d","first_seen":"2025-09-09T18:08:58.558022Z","last_seen":"2026-08-02T16:03:14.515858Z","times_seen":310,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":141,"dns":1,"connect":19,"send":0,"wait":33,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/ultratools-3.3.2.min.js","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /ultratools-3.3.2.min.js HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: W/\"69735c86-15cd3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIsQTZd%2F7C%2FVcH3nORWnBCgPKvhDfjFCfdBeL6I2s%2BhP9AC3IloHGhMSgjN6IqyHBm4yaaXcX0s52fYWIGAaJIUBxjBYTFWObtDCJcv2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b05b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e1356e084d6b8ac078751b90807adc0","sha1":"75e147bab80047e8116b5250a5cc721f86ec97c0","sha256":"f90492f8fb6020f9a772c06450fda2d62df006bcc10f3342200d6712e4ff85c9","sha512":"66717e7714c38334b03475295dcd7a6ee9d5b0b51c60837b7432c06f742d8fa7b04d7752e42014293fcda0cccad2cb3daa955e12a4ac3971453804ba7c3cafea","ssdeep":"768:y/nAUc9dvJ9rbh/3q6/sDxDadI35OtsrRuUBASBrW9G3i5c66czcjzLcOgcoXcXO:nvJ9/1/UxDadwwsrRhNr9I/+8ss","tlshash":"8d931bd5990bd4e58e1261cdd433ec15e4285963cdacf1a3ba2ceec2785ef62844723b","first_seen":"2026-01-24T13:41:29.683672Z","last_seen":"2026-02-14T14:47:57.15199Z","times_seen":3360,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/990946167d2741dfcf05db763506d34f88aef6df.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /990946167d2741dfcf05db763506d34f88aef6df.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 41540\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-a244\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpcgPUHg%2BHI7cmU3eWtzpTixhZJ6%2FZmxcLzOGF5V4hjYtROy1AqWKkN0feqggqYt8pO3A89H0jIdqVSKPuQ9DFPa0I2px9JuaiAVfji7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b12b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"10944057af3a6be7e6a00fc9120f9f3b","sha1":"990946167d2741dfcf05db763506d34f88aef6df","sha256":"628c2cd8e39bbc643b648e38fe86d2b8882a5e078a4ea3843e1305b5a5246a49","sha512":"8b94cc5134d258dcdcff399676e8b9d1d64967c78bed3afdee9beab1a248eae6d3d33a49510b6ff68be5ad98787ab0308ab7a396f43f3a525b5671edfbdb6420","ssdeep":"768:mj1z6YshVDrQtnk/qkFnal3NYrDG6HEBqF2K9jINKfjiNuEyVV:mj1WfDrak/Jq3NWLksp4KdF","tlshash":"f013e1d5cd6a49b888a7c4c3d5bc3dd899e221ff92dc18d72a255cec23e1744698f160","first_seen":"2026-01-24T14:15:49.267477Z","last_seen":"2026-01-25T00:12:51.125194Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/sora/v17/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://troveupdate.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33652\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 19:09:27 GMT\r\nexpires: Sat, 23 Jan 2027 19:09:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104578\r\nlast-modified: Mon, 08 Sep 2025 17:59:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33652,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33652, version 1.0","md5":"0d0e5e4d2f9fef29f3aff5e8e0e659c4","sha1":"93f322133a56cd58cb13fd9d3e3555426875e255","sha256":"fa26406eeda9a3c6ec3d9ea8813c3045d6dc755e30c716d5c094e8ef43be5a7f","sha512":"5b62778ffd0054b895ddb493ff46f760f96d0dcbc6e171466ea5497c02ce02c7a12238ebde1e73c7e95530634a0eab7fe1c4f1ca9d24f6f54cf6a9e9d9bab9f2","ssdeep":"768:ROxePX1Sw4LXk9Hj8lO1W87tUx7HfPrKF5:RBdS7jk48W86xL0","tlshash":"64e2f15d7d932490c4b41899c6e20e56eac508e1bad5ead3ff1b0d0eb71a4f4ce4e1e8","first_seen":"2025-09-09T08:23:20.681058Z","last_seen":"2026-08-07T10:52:43.606814Z","times_seen":4053,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/favicon.svg","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:25.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvw90vM8Z8frbwCdDBgFkCUoMp8tE09zYL6P0d3rtwm3FDQOmf0aPxkL8CBgZEBln6YzHSrKqcn7fSvLvtlz%2BpVJ4lrDgZcNDd%2FRz2Jc\"}]}\r\netag: W/\"69735c86-85d\"\r\ncontent-encoding: br\r\ncf-ray: 9c338f11ef11b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2141,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11ec4b243fbbc4ab8dedcdc10e232e80","sha1":"108865f1800c271418383d8621219931df582c9b","sha256":"0329d3dc694470d52d396227b4666bc4685a8c988d100dec7ee0474ac610885b","sha512":"24bc565b2dee7e8b49cc72d2cf79fb8fd4fa2b1400d70b944c47e21d947d8545123efb6c6c1a1e5b54ded7a528ff3494f7034fc04a2feb50e585bb521fe5b93f","ssdeep":"","tlshash":"614140ccbfba41c482accbc93f68199a3c69f0b366d4ce18e89a4f74425452ccc15983","first_seen":"2026-01-24T14:15:49.273351Z","last_seen":"2026-01-25T00:12:51.127126Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/bg.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 140220\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-223bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjkzX0oiGEkObrzA52rjYHc8GMIsjCO4x1pFGDjovtejGQAzDQKeTW88Cw4l273ElbqSv%2F9Rvp8kAF3KPAhwBfH008xNwn40zpO6cTh3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0fad80b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1913 x 1051, 8-bit/color RGBA, non-interlaced","md5":"f8133b093eecaab0b4b307d4291823f4","sha1":"14d2c2c41b58296e7382abb2416d5a445d410ac9","sha256":"d0e9e5b459092bbbed34b440b72ada9cdeae6526c0066f6405c41b0d82ecc9bf","sha512":"c04f28c74dee877c9c9240f216f8c13eea3a6d286e22b63b1ef0a62d4521d734f561c15a1a9686b716a9c1095dd1cd74513aabffe48b3cf1220cc9259ca4cac7","ssdeep":"3072:5vfX5T8QRKkP9rdo2xrHcoyYrfZss7sItAHOlUYfxUXb:5vf1JKkHoq8o9rxsWztLdSb","tlshash":"9fd31251cd32c0a5ed27603d52b19fcbe583b6b1e1cc1dd5892a35bf09a7e583b282d2","first_seen":"2026-01-24T14:15:49.25649Z","last_seen":"2026-01-25T00:12:51.12807Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/0f379608cc4c6a12.css","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://troveupdate.live/index_1.html","date":"2026-01-25T00:12:25.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /0f379608cc4c6a12.css HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:25 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: W/\"69735c86-195d7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcnomoHJ7lAk%2FecnjxeQKMRFAAD2PwgmXrL%2B521erdC1RogNprUJ6S5OFKr%2B%2BpfRQUJBoTecCJOnUcKm7yomB%2FYnsSFqym%2BWroK7G%2F1u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f114ea9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103895,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"7fe372373ef66f71836dc0d7e882025b","sha1":"fb23afb041941a31d9901d8752d27b62029ceaf2","sha256":"0509086290ff1ae25ef2fb3814afd22ed73c7b4ec5627ac7761518a5b85fe803","sha512":"5f5efede594ab64204dc9a1b58f94c746b8952f980706c70581e1e79bebd73397c96663ebdd6c94938c147c572fcc4f06a1949d14b05ad0bb54a88fe3b426a4c","ssdeep":"3072:MGQhfVREBCmC2cMH9Q2wytybjrSWxDhbEgzx:MGQhfVREEm7LtybjrSWxDhbEgzx","tlshash":"18a3711df652113f3c2780f9c25cedada116b1c0ee3a6be6be4221118ac67e35de7254","first_seen":"2026-01-24T14:15:49.272325Z","last_seen":"2026-02-08T21:53:09.64078Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fvue.bundle.cjs.js%3Ft%3D29488332%26u%3DlUTcFk670ogWzwXJGDY5MjU2NDQwMjhjZmYzYzM0MDI3YWY2ZLly3iluitETpm_IyA","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:25.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fvue.bundle.cjs.js%3Ft%3D29488332%26u%3DlUTcFk670ogWzwXJGDY5MjU2NDQwMjhjZmYzYzM0MDI3YWY2ZLly3iluitETpm_IyA HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=vue.bundle.cjs.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/25/2026 00:12:25\r\ncdn-edgestorageid: 879\r\ncdn-requestid: fc186b83d69f6b069d2648424684555d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVvz%2BCMfVTN94yUPBVhb5tgAv2%2BPZ1kiAsqpsR0E9ZzCySoMihmgzWECaZcOSjk24ek0ZJvcTOYPNn4qTomDdyvk5%2F4%2FFPGH5D5hKSpE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f122f2eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/zenith.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /zenith.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 5885\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-16fd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wGbxNyQiEIcf5W2ErvF6WxDmLtKbM6N0m0ZVGYPt66HrfOzCYZABB3MTEuf0%2Bf%2BRX%2BhGwoQKou5G85MR41ZO%2BisSTpdluOjXTI8hibdZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b0cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"6c37cf7af97600146d3be3c29c21520d","sha1":"6ed0ad358f24dfc4936d6ae0f753da4f91345f96","sha256":"9f98d499bfe49cf35d897c13f8a86002382202035a8d6e99ebe42ebd45138e0a","sha512":"e703392750836f51600d361c438d1da2372c033ed03352c90e80c5951a8a0cdd270bd62bcda375ed5df00de2f34639b3494ac30a31375f7cd658cf0f88ae1c87","ssdeep":"96:hMByNU+M4vXd/gjWVIpE7pi5csHbOIpafNuHa06qJfU0Z2vyNG8u/H11FQfHZvR9:QynXVWSdY7OIpd9TJ9Z2vy4l/mxVHB84","tlshash":"1cc19ebbca14a03a4c764a7dcd3809e3930138468b1496277d3952edfb0cac8e5635ea","first_seen":"2026-01-24T14:15:49.255475Z","last_seen":"2026-01-25T00:12:51.130781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/c82a38c1529cedf444a911214fd56997bf1825da.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /c82a38c1529cedf444a911214fd56997bf1825da.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 162915\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-27c63\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wN44t0CbE0nT0ag%2FXLshrICrJowfuKhBrCOxUh6wMKj80NXQdibD%2BMKDJvXkCZm8KmUOio33Gz6D0bN5lBz2TDlEdHzTbryC8m45ksX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c8b14b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1155 x 1173, 8-bit/color RGBA, non-interlaced","md5":"2fc0e95508f79eda92b4e4f7262cc7a1","sha1":"c82a38c1529cedf444a911214fd56997bf1825da","sha256":"faea276f3cf3c4158e7416622d876f462a8c8c65a4ccf36635838e61ae21bc9d","sha512":"965fbf719b856034ff125dc3d1c8a6685a625b997fc43bfb47873ee5a84e6c2e7cbd7b9e2efdb3ed119a524ccb375289500606f1d354bc873e13d7ed570f92a7","ssdeep":"3072:YeMHAla6GSxL0RX+4hKqEnprBcIE3p7v9scBnyD0GyXcUo5P6zyc73zN6yR7Cj9f:1W+ahSx0RXDN5qc9ywGyXcUMiz1V5R6","tlshash":"02f3df80a05a4572a1ff7b293a444e65b4337505d108fe264b29a6fc7f4a1b27c72bfc","first_seen":"2026-01-24T14:15:49.25201Z","last_seen":"2026-01-25T00:12:51.132883Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live//secureproxy?s=%2Fjmpd%2F","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:26.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://troveupdate.live/\r\ncontent-type: application/json\r\nContent-Length: 2201\r\nOrigin: https://troveupdate.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2201,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e1-69eehFI78Y7/wYKa61ri6t0Y8r8\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769300006463\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/25/2026 00:12:26\r\ncdn-edgestorageid: 879\r\ncdn-requestid: b221fb61884b27354c2fc8b7c93e11e6\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4cFcbEzBg4uwuK5SgIe%2FnZ01ZOFaAiDGfjOq0RM1iWHajyjiimPqAtg0LDdFt%2FnL7he%2FeT2Uf84a4ofBts9L7ozwFuiCUcG5gYTdzCm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f17eb36b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d509a2c5e77c18f51db39821435d819","sha1":"ebd79e84523bf18effc1829aeb5ae2eadd18f2bf","sha256":"21b7f1fc94d9e88c3ce134706d95786abb51a4c5306e9aabb8539677bc8e7c03","sha512":"ee59240fa9571de4c2f37d4f6b8aa462dbb6edaf1c815c5a7598cbcd63216ec6022da42eaa7832d81d2caeec7572b71f3a28fc7f8797be402b2d5e9d822eeb74","ssdeep":"","tlshash":"f4d0978cb9930ca7446481065abb3aea2a361738be1118ec3a02088295c85912828293","first_seen":"2026-01-25T00:12:51.133809Z","last_seen":"2026-01-25T00:12:51.133809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":749,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/ethereum.svg","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /ethereum.svg HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dvXoYKT6GRFBkWQPYDRk34wvX9YQTPlzglMJ2pMyccK5OyfO3o9FKyuki39OzoymRcnOJOvdU3bMu84AMZFRWdttFFaoh57XiMfdeMyA\"}]}\r\netag: W/\"69735c86-1e98\"\r\ncontent-encoding: br\r\ncf-ray: 9c338f0c7b08b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63a51f574b630f3e5bb1ff7855f2ef8a","sha1":"78b7d7fd90cfa0a2bc869cb145479c0a17af9ec5","sha256":"8775f0d24a2e99f977857e85716deb7d5e97d9f4fc7183707f937531061e6523","sha512":"c491b8fda527b8a717192a908b3cbbd71ad74f5dcee957ef2c5d31cc12da17b1ecb0bce85ba83738e64a53fcc15f200205e9e398bb57aa2bec721c815537746b","ssdeep":"192:w7Wxv3lT7eKjBdwWUUzNELLDNK1Eyr5BUjy1zf:aUv31qKjBdUUuXDABAczf","tlshash":"ecf1af643c0a9d0e9c8c552854acaf5d8a22708fd2d442fbf4841dcbb47afde480c49f","first_seen":"2026-01-24T14:15:49.260332Z","last_seen":"2026-01-25T00:12:51.135841Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/certik.svg","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /certik.svg HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKbaKhEypTaMYmhKyZt5WU%2BI07xCay6DTV2eLvh9mXw5bGMsIcqzT%2BQjfkoD6CSvulJJcxtZlTidSJ3f%2F1%2F0085XPMINEx1Y%2F3NPAik6\"}]}\r\netag: W/\"69735c86-fa83\"\r\ncontent-encoding: br\r\ncf-ray: 9c338f0c7b0eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64131,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bad90c053da194e0581cb6f614ba81d5","sha1":"25bcf76046bbc5af4fb53da0d1ac28f5e4d6992f","sha256":"8be70341ace347a32f969da9754f8f8e9588a1e19a9470a3210c8bb643b385f6","sha512":"b86b8dfa12cb8fb0c0443850dd37a499a10716a3cf5bf9ceef0288a7b69ea2794448152cfc23ef8ac9ebd72dd4deac663693639288ceee427f3710afc68b4bd3","ssdeep":"1536:1TGG4Pk7Qpo11nFcUgr0nq3LbXQKFbJgdBb:hBY73LbgqJgr","tlshash":"385302f0300c190f5b7022f228946d48b747aa8df1ceabe7cfa49b929e194571163a27","first_seen":"2026-01-24T14:15:49.264134Z","last_seen":"2026-01-25T00:12:51.136707Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/7066e6843c2a3bfb04672b536607f305d9cd5e1a.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /7066e6843c2a3bfb04672b536607f305d9cd5e1a.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 25485\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-638d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qi3q1aNgnDcqTEF6c%2F93LR7SVl2TOtEcuR87m0jQf1c3FoiVoDlNGA1B1EspRLMQ4alFdNuhmVrzrPdic%2Bw4vrzstpQs7ThMFdMhQ%2Fgq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b10b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"4e534a2b557847c4472891112f1d75ab","sha1":"7066e6843c2a3bfb04672b536607f305d9cd5e1a","sha256":"95eb475b1c8831a3d76bf253d7398684cb7883f213bd4844d9184cf9a61d6e5a","sha512":"7799d2776ead6bcccdb4bd6fd99d36b6b1c2aabf5bb82527941814a35e565468a5a584672eef97276a2da8e7fb52850cbc29d980df9b09df2296390ee57fd6a6","ssdeep":"768:JSsZ+AokekBBb0GwCpaRaRLOmd4qLWL/Z1Z:cs8HkfCCpCagaNqLh1Z","tlshash":"6cb2e0619a44c57af1c7521b7d54be32aad3e0d10170d038b6ade77d4f578ca2063fa8","first_seen":"2026-01-24T14:15:49.265003Z","last_seen":"2026-01-25T00:12:51.137579Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/sora/v17/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://troveupdate.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33652\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 19:09:27 GMT\r\nexpires: Sat, 23 Jan 2027 19:09:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104578\r\nlast-modified: Mon, 08 Sep 2025 17:59:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33652,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33652, version 1.0","md5":"0d0e5e4d2f9fef29f3aff5e8e0e659c4","sha1":"93f322133a56cd58cb13fd9d3e3555426875e255","sha256":"fa26406eeda9a3c6ec3d9ea8813c3045d6dc755e30c716d5c094e8ef43be5a7f","sha512":"5b62778ffd0054b895ddb493ff46f760f96d0dcbc6e171466ea5497c02ce02c7a12238ebde1e73c7e95530634a0eab7fe1c4f1ca9d24f6f54cf6a9e9d9bab9f2","ssdeep":"768:ROxePX1Sw4LXk9Hj8lO1W87tUx7HfPrKF5:RBdS7jk48W86xL0","tlshash":"64e2f15d7d932490c4b41899c6e20e56eac508e1bad5ead3ff1b0d0eb71a4f4ce4e1e8","first_seen":"2025-09-09T08:23:20.681058Z","last_seen":"2026-08-07T10:52:43.606814Z","times_seen":4053,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":79,"dns":1,"connect":27,"send":0,"wait":24,"receive":8,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/secureproxy?e=jscdn/getFile","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:25.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://troveupdate.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://troveupdate.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"e13orrm3pju659chffpw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rotXMU0V8WggdPxKDN8%2BwL%2FFBRbzFj6WLbaW0XZpUeCFOQFaqccPITEDW1vCiHRrMjuYcy9wLKLmNJfD%2B%2BVqpYoryJOEW%2Baef6lk17EhRUid2Q%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c338f113e9eb4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4346523,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b7c8d07e834563cfba8865eae2cb6c6b","sha1":"fcee2655c5ec989715da0a415705c992054030ec","sha256":"9e3528ced533b12f9192979fe95df200787428ceb60eb45c8b31c18a91c960e8","sha512":"0881d6a2367480f9935e4b6151a63c618024e2bb359ac3a91888033a600a986d4eba8576d241d0772724f83cbb6932cdd817dd694daa7fac26da5b6494c26751","ssdeep":"24576:WdFep7lamQuI5QQrmWZSdu+nww7fJO8C2R4ITAIBaKkh:W3ertDQfZQlwl/IBLkh","tlshash":"262512d77015f0e17332943962d29adabc2681ced7e173366940ef48d8aa05aa7ccdd3","first_seen":"2026-01-25T00:12:51.138405Z","last_seen":"2026-01-25T06:10:50.83457Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/index_1.html","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kG%2BHIUcS2yjjz5geqEF46mOTjDvtpriCUHwyA5KdARV%2FPyXYOkkuxhNwKk61Qagv5gtX9yfz0nlGgg8JR8TNRolfqa4VKbvf1Zk3tAiz\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c338f0f6d60b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1341), with no line terminators","md5":"45daff77ec84a1ad1094c93f37d57114","sha1":"6ce60ade5253387422f3b267b36c7ec310b18fbc","sha256":"67d56d0571e36876cf27ae563c032cabab4067ab3f30d59b962f7ab59e0583f2","sha512":"292919ae6ff77ef2220885c10a8012cba27936bf31b916fc84b1d57fc20bce2418ba41bca50fdba8a6d6f107b073c2207ecd00b25e2873b1a82db9c4ab08402b","ssdeep":"","tlshash":"8221a8b23801ad19501bb3e5dcc9a049a917fb1feb4018d8bddd990eddb993c105588c","first_seen":"2026-01-24T14:16:44.337078Z","last_seen":"2026-01-25T00:12:51.140342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/file-loader.esm.js","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /file-loader.esm.js HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: W/\"69735c86-5dae6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAzyjdXWOXk%2BjC6vqQpl%2B%2Bqt7fSUpr1DMQnWPjNujvGbheuyNbqXC11GIqsfNyFye3ye2AgbslIJbuVeZ7vF%2Byx%2FGTKH47by7ekxJ6PU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0c7b06b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"fe3867010e693ed7cbc9fe8fa482c19a","sha1":"17e0e9d48acc9671e6865432f329d5dd717cce94","sha256":"8d63d90e3fabcb69956efaac418aafea3b5298b1c8a0822551bb2ac058877e58","sha512":"f41a8183b5b4cbb4973ea58518c9c25adb72346a969534af3947ec675aaad2ca8b18a3bde1dc00e957a61031c3dad6b776db30d2327564d2d5637dc09f3a8c95","ssdeep":"6144:pXwNec2fz170u0jpHnioPLcZgY+eyIcbIwgCvt:pxjxnOY+eyIcbIwgCl","tlshash":"fb84466a2f9220a6df2d4178da39efdedc44147cc3ae5cb59d22a08bd881c3051d677e","first_seen":"2026-01-24T13:38:56.188653Z","last_seen":"2026-02-14T06:05:44.016816Z","times_seen":255,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/sora/v17/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://troveupdate.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33652\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 19:09:27 GMT\r\nexpires: Sat, 23 Jan 2027 19:09:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104578\r\nlast-modified: Mon, 08 Sep 2025 17:59:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33652,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33652, version 1.0","md5":"0d0e5e4d2f9fef29f3aff5e8e0e659c4","sha1":"93f322133a56cd58cb13fd9d3e3555426875e255","sha256":"fa26406eeda9a3c6ec3d9ea8813c3045d6dc755e30c716d5c094e8ef43be5a7f","sha512":"5b62778ffd0054b895ddb493ff46f760f96d0dcbc6e171466ea5497c02ce02c7a12238ebde1e73c7e95530634a0eab7fe1c4f1ca9d24f6f54cf6a9e9d9bab9f2","ssdeep":"768:ROxePX1Sw4LXk9Hj8lO1W87tUx7HfPrKF5:RBdS7jk48W86xL0","tlshash":"64e2f15d7d932490c4b41899c6e20e56eac508e1bad5ead3ff1b0d0eb71a4f4ce4e1e8","first_seen":"2025-09-09T08:23:20.681058Z","last_seen":"2026-08-07T10:52:43.606814Z","times_seen":4053,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":91,"dns":2,"connect":15,"send":0,"wait":16,"receive":17,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/pashov.svg","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /pashov.svg HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzAXkdAKWKjpu16giDVMtpPvcFZu0Aa2X%2FiV4fw0lQ6vitVzq5L%2BPF4hs4wifW23GYip0d4mkfDW6yxVXSBCDwaXie%2FFVw5lMCFon2AL\"}]}\r\netag: W/\"69735c86-2190c\"\r\ncontent-encoding: br\r\ncf-ray: 9c338f0c7b0bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137484,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a40028508490cce8faaa99ab7cd8a5b9","sha1":"710a537658fb75e549dc9d062dedf16bdd9d92b5","sha256":"a79960f5be219d71075d169730ec28dcdfb2cd917ab2d1dc72ce959cceb97191","sha512":"b751a075e62ef42767113df0e16fd241b231dbf53e02c1d3630fff21544d24aabc2eb89e00377db8eef07c1fc6d6be9233ae5401167e8fcb8630734e59008887","ssdeep":"3072:T8EXFVfGcDaac24s01s1L4fCMGpPfr1uqbZs97LKp:NXzQacjG1mjYPf0qFsgp","tlshash":"4dd31216d428ccb3406cd16cfcac0b5be7508862c964d9e7bfd874935e90b96cb345ad","first_seen":"2026-01-24T14:15:49.259402Z","last_seen":"2026-01-25T00:12:51.143992Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/secureproxy?e=ping_proxy","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://troveupdate.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 24 Jan 2026 14:16:15 GMT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfeO0B6W%2FfbvdHIp1j54MS0OTlQZ%2FkI0OjmMpUGUI14UE9Nj9LIuSyCk0E4FmQHi0rR12rqHAGlxGQCgZa5XpsTuk%2FTmNlrsbWDyZojz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c338f0f3d30b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-07T02:31:31.630366Z","times_seen":9011,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/register-timer.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /register-timer.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 73886\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-1209e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41nz69VlqRed7VaUy1HhgGH3xx4vejYgatTJ4IY5Tvi6Ok7h%2Fk3DAT%2BGtOK3Ft5Kug1pBicF8PEz43PDLHiMT2OEW0rvW9aR09TITpa%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0fad83b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73886,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 371 x 243, 8-bit/color RGBA, non-interlaced","md5":"602e9c25a16fc667f307356b75664400","sha1":"07f5c7f61f88509139e595720028f2a132b636a8","sha256":"0b6ceb5630999f83361394e101cf03752039057c66818dd89c28fff206666dcc","sha512":"b703b72d3e84a06ad60ca029a0b5db563eabb7652c32f6b5ee76af30b593056a2c6bda140c6798ea4b628428121b65f347f839fe620452d7c1621bd87b568642","ssdeep":"1536:w1GP6fiCwbxwb3NUVxR2vckyH32s0jHlniF8sum1e0aWmGbBEGAjUPq:gwbxENUbMCHCE5bJAn","tlshash":"dd7302215845edf73783620b8d56cc71da70ca3b522f5a8bc791a2c6be0219f2ad2573","first_seen":"2026-01-24T14:15:49.265946Z","last_seen":"2026-01-25T00:12:51.146307Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/2767b4ae3b300dbd7ca0af2d3051eb3f8f2f9fa7.svg","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /2767b4ae3b300dbd7ca0af2d3051eb3f8f2f9fa7.svg HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PGgX5dEU29fWxK8Ay5vw%2B7ZAFMkxVkfjpRFJp7XmcNfDrxZ4A8cJGkYZDa%2BMvXWBP%2Bd1EG05fTWVZaXciVv3x3v9hSbZrKlNu2EwVJM\"}]}\r\netag: W/\"69735c86-d7\"\r\ncontent-encoding: br\r\ncf-ray: 9c338f0fbd88b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5bd2be556aef0c8fa5e6a797c2bb07e6","sha1":"2767b4ae3b300dbd7ca0af2d3051eb3f8f2f9fa7","sha256":"932e41d90150c95224e590d7315c8cefbb9c923f61aef0b51375218f7f54300c","sha512":"caf1d59238c0b64e6cb5a626c9a8b6366a4d259d294c71cc4275a7060054f4cd8f0b5a945d023af693e611b2f4028934144a89fd1e7429b00ed50e45a917edf1","ssdeep":"","tlshash":"dcd0a9edc384082d805807b0ee396c28860a548122a62181caa22a2de00615b2eb24e8","first_seen":"2026-01-24T14:15:49.278337Z","last_seen":"2026-01-25T00:12:51.147263Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/sora/v17/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://troveupdate.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33652\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 19:09:27 GMT\r\nexpires: Sat, 23 Jan 2027 19:09:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104578\r\nlast-modified: Mon, 08 Sep 2025 17:59:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33652,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33652, version 1.0","md5":"0d0e5e4d2f9fef29f3aff5e8e0e659c4","sha1":"93f322133a56cd58cb13fd9d3e3555426875e255","sha256":"fa26406eeda9a3c6ec3d9ea8813c3045d6dc755e30c716d5c094e8ef43be5a7f","sha512":"5b62778ffd0054b895ddb493ff46f760f96d0dcbc6e171466ea5497c02ce02c7a12238ebde1e73c7e95530634a0eab7fe1c4f1ca9d24f6f54cf6a9e9d9bab9f2","ssdeep":"768:ROxePX1Sw4LXk9Hj8lO1W87tUx7HfPrKF5:RBdS7jk48W86xL0","tlshash":"64e2f15d7d932490c4b41899c6e20e56eac508e1bad5ead3ff1b0d0eb71a4f4ce4e1e8","first_seen":"2025-09-09T08:23:20.681058Z","last_seen":"2026-08-07T10:52:43.606814Z","times_seen":4053,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":131,"dns":4,"connect":15,"send":0,"wait":16,"receive":5,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/index_2.html","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://troveupdate.live/index_1.html","date":"2026-01-25T00:12:25.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BzyGGllcY2XmZ2yqMA%2FURoRiZDed7QBH8Ts%2F%2BnjoURimPHnSbac7I%2FthdkifQTicjujDZug2xGShP1GlKIqi4DaPbwEws3OHAth2LjS\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c338f11beebb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0043baabdf16fca37148f72e8555ae9","sha1":"2ef15aa1adc09bde0d07b36592914e0db26fc7d8","sha256":"fb6571d56760d1c18a9634d89797d272311844e5b92b7fc71c6f8da6743bd392","sha512":"99d092b1f8481246875dfc2c2114e4b437e491f63812b438ee7fbf02a24223fe27223351c2fe05afbdfa95cd4579dfd98e5efb7eb946d08a15250affc52b23cf","ssdeep":"","tlshash":"bfc08c229800480e29009e91cb8ae1c4c402dc2ce8215c00b862a144a9a8121c012548","first_seen":"2024-07-19T02:09:55Z","last_seen":"2026-08-06T23:22:21.671319Z","times_seen":245,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/css2.css","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/3cb8ac12c968266b.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: W/\"69735c86-840\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 35769\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M73Bl2%2FZq%2BCTe%2BujPukjPN7qI2%2BlLqp7PeR5HligoXRHLaIZszLvUIZIP1nDAxrjIYsJEVKb30S2TLOhOqr2cfmEtaTaJRjEDJ0BBeLl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0cfb6cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"94008a89c8d6024db3d861cb7ba4a4f4","sha1":"51705aa43b6b5fe174beb82b06c56178246906ec","sha256":"0a0b13c690f1a1ed9e59cf520667bb9f3d3cee7e8ea89318a03f40ba9b9cf05b","sha512":"e54628d0a2daf050618534f61b4283e15f80ba17123dab3289050740e501a76d9dff62026199c6e2c7df929a7e2d7e3c56b0e22d47a4877dfcd71176264467e0","ssdeep":"","tlshash":"41418b80087ba504d7931cc122ce7e32ee2db19064459d346ffe1498fc5bd59a3b2b4d","first_seen":"2025-01-25T17:56:03.203401Z","last_seen":"2026-08-06T00:00:00.587793Z","times_seen":902,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troveupdate.live/desktop_logo.png","fqdn":"troveupdate.live","domain":"troveupdate.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://troveupdate.live/","date":"2026-01-25T00:12:24.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"troveupdate.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 09:27:41 GMT","end":"Thu, 23 Apr 2026 10:26:23 GMT"},"fingerprint":{"sha1":"56:17:28:27:D1:6D:71:A8:F4:15:15:92:6D:F5:F9:3A:8A:6D:AD:7B","sha256":"58:5B:96:81:C7:08:B3:3A:1D:19:34:6B:DD:F5:6D:8E:A5:15:FE:82:7A:D8:1E:25:D4:D7:22:56:D6:A6:29:6D"}}},"request":{"raw":"GET /desktop_logo.png HTTP/1.1\r\nHost: troveupdate.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://troveupdate.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 00:12:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 8720\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 11:33:26 GMT\r\netag: \"69735c86-2210\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 35768\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6SENhDCubnE%2BQLfINkccFT8AShdNjbxgKEGMyxMU16tazj%2FrJpiyn7Fd2hN5x8Wdzv8IiupuEr0mF75N27w%2FeWt00DyHmADo34ZT9Vn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c338f0f7d64b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 73, 8-bit/color RGBA, non-interlaced","md5":"9eb8a9c646911a3708168e2980040602","sha1":"0ff4af80e80889c9b34aa8d97b3ba0a6308dc2a7","sha256":"2c2f0724b10451b0b5ca190838363d0c2bed549fb80f4526dec0a42ba3812fbf","sha512":"c9cfe4dd75c8f98fe049ba0f85d0033a9870f8b17111b9a9a7cf49a1ff4cff5cc7c3f4d2381b9620358325a8a77f5903baa33c5f45dd6f2ade7fbba7f9c89e82","ssdeep":"192:nhUhB6D0m88i9uOd7+4T7Mdo89tmwiPCXCk8nEzQooh2O:hmsDK8iFQ4Edo89tJiqXb8BooYO","tlshash":"3602b0a0a8c0c81e864ac5d1efdffc8dfc5c504e23896d34d7e8f62a0966830889b715","first_seen":"2026-01-24T14:15:49.258404Z","last_seen":"2026-01-25T00:12:51.150331Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"troveupdate.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}