{"report_id":"7d8b537b-98de-4634-bc27-43cf56deda0f","version":0,"status":"done","tags":[],"date":"2026-10-07T15:00:43Z","url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":0,"asn":20473,"as":"The Constant Company, LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"title":"trip80 – Аналитика маршрутов и мониторинг автопарка","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":0,"asn":20473,"as":"The Constant Company, LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T15:00:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trip80-co.icu","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-09-23","domain_rank":0,"first_seen":"2026-10-07T15:00:48.194557Z","last_seen":"2026-10-07T15:00:48.194558Z","alert_count":57,"request_count":57,"received_data":4586220,"sent_data":34151,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"195c051904dbe0eba8446c6cf6f68100","sha1":"222735039a7383abe9383b6350298d7740a5a9f1","sha256":"46f3412a7c25ad269c98d040c66bb93f257683a631f893d02bb5af12405c4515","sha512":"cba717455f4bd1c10bdd77abda5c1d70a3ffac872bab3b0fa8f24d939b2bf65e811bb8a5578fc73f196e078d5de78d9d124e045f54700439dc6be92a67bc9afc","ssdeep":"","tlshash":"55f024dfa4e370b4c027f1ad4f5bc7203276a8c33009ca70784c0d881f1425456f4e95","size":532,"data":"","first_seen":"2026-10-07T15:00:56.10048Z","last_seen":"2026-10-07T15:00:56.10048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"583796cfa57dd2d6ca6a000174c02759","sha1":"a4578332fbce19a9d781bf0ed46692a44aac04b0","sha256":"c93ca1978049c50876dec0c9a12e50638530e110d5b91f21cdff631f5a3c0a27","sha512":"2f7e9596668ad72c46c3d59ade7a6e074f33641f27a70ade7675caeefd1a26a6fc6fbfb046bb02f211ff3b55c1d2a45b5c56d530298a62d7c3a1814bc5debd2a","ssdeep":"","tlshash":"bd0102d92cad4034037312356bbb9148b036240b3c0ebc35b94d48512f5cf6e14b75dc","size":682,"data":"","first_seen":"2026-10-07T15:00:56.102091Z","last_seen":"2026-10-07T15:00:56.102091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"697a234f61ca11d116c2e3c64478bb87","sha1":"1af18ed55d6832246468441517719b99e611ac18","sha256":"d32a8ee8c6a49c8147fc70c2a23681e306d1e576fb9e4ff02c8653f5eeafa08a","sha512":"f1ecbfb27ace1de611b67dd158d343ed3a773cc45f74ab67fe3f4de5ee2eec07859c275990d693e69638d98209e359c109dff2739f1c4675f6713de18b9a5103","ssdeep":"","tlshash":"ff5113ad321a0cddec652203e4897b09d2916e17f6acaa541f8e19421f81c1ce2ae357","size":2900,"data":"","first_seen":"2026-10-07T15:00:56.103609Z","last_seen":"2026-10-07T15:00:56.103609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-10-07T17:20:30.765469Z","times_seen":95776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/5a97dc8dfc8e89c4e5097d21f4a4cc99","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.919Z","timestamp":1791385192919,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/5a97dc8dfc8e89c4e5097d21f4a4cc99 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/68c92dc0794f9fda4a7d73051dc8c35c","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.923Z","timestamp":1791385192923,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/68c92dc0794f9fda4a7d73051dc8c35c HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/ce5f5b98f0561c4886b8428c0a184954","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.689Z","timestamp":1791385193689,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/ce5f5b98f0561c4886b8428c0a184954 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/bd10493cfcfbab7256c5b461820ee515","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.925Z","timestamp":1791385192925,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/bd10493cfcfbab7256c5b461820ee515 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/6083c93cd9578af20bf40686e6716af5","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.686Z","timestamp":1791385193686,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /images/shops/6083c93cd9578af20bf40686e6716af5 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:56 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 15402\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":15402,"size_decoded":15831,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72c0a9f4d35950ee4a713a45a1067c33","sha1":"cd38efab23a90eeed94d17e6fb6c0d6a5167c985","sha256":"d7510aa5c1cd35e7a9ae2fd3df232cf15ea040af147abbff6eacd9d45f376b9d","sha512":"bad870017375a31a429984ffa60129979384692c373a45e3853c2ab12b09635f1832943b43adf8a32489ff9edcf4b86b01c0fd8f8226c6161717886f8939ce20","ssdeep":"384:T7A8cEXlnjvZfT0EPl8NvwM0MEhfKlBip:Hb9dAsgvwM0pfoO","tlshash":"9d62c1b517f445280157ce56f25498a27fba05a9d2cd48bfc8c4076510befd2f30ba86","first_seen":"2025-04-22T07:24:42.784813Z","last_seen":"2026-10-07T15:00:56.072005Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2711,"timings":{"blocked":1970,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/js/main.js?4.24.0","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.837Z","timestamp":1791385192837,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/js/main.js?4.24.0 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nLocation: /static/js/public/5.27.1/main.js\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":181,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/07c2214bed4367c1cda9869705343944","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.692Z","timestamp":1791385193692,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/07c2214bed4367c1cda9869705343944 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts/IBMPlexSans-Regular.ttf","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:55.101Z","timestamp":1791385195101,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts/IBMPlexSans-Regular.ttf HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/fonts.css\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:55 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 175748\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":175748,"size_decoded":176178,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"1286abb632c5a409a0a997d11c994e34","sha1":"8e18e19c963fd6b0895620010d1a4adbc2d2caf7","sha256":"852def7e24f7b71bab6e8a5c9b02b203e45b0ef59697feaf116e7e8091ad7a2a","sha512":"7ec63f19acb0e3e9c2bab443b68280dbd290bec66461e3baae2fdaaae0260bc6082480fe4f1fcaf8c0c16c5287c605df023d29786e4f3e0aaa43a46f6632d3bb","ssdeep":"3072:IBEydOkAfyifuN7J1St4fJu72jgy2wc0cKAdmXA:IB/ZAjfuNGaJVjl9c0cKAdt","tlshash":"0604e84bbffb1b03e30b5ab58ce1d2741671f90baf76a5097c918564cacf20206639d5","first_seen":"2023-05-19T14:49:42Z","last_seen":"2026-10-07T15:00:56.074777Z","times_seen":611,"resource_available":false,"data":null}},"time_used":1199,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":766,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/Tripscan_mobile.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.908Z","timestamp":1791385192908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/media/Tripscan_mobile.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 153118\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":153118,"size_decoded":153533,"mime_type":"image/png","magic":"PNG image data, 576 x 784, 8-bit/color RGBA, non-interlaced","md5":"672de1888569f7a86fc949fa62ab75f7","sha1":"192befe45e751b560f88609b31067dbe44c700ef","sha256":"4e2530d2d0668b1e117ba781aab5b05b4f776dfea78a8d1a3377d55bc7cbd663","sha512":"70396c4fef5342c36e2a9f7c73f62bedb49235c5f5111d214d39ad15f79d99a32de2935b1e776204c4855c19e5e38ceac365287657842894771d1981af745414","ssdeep":"3072:tqmxXVtNCycDnHlPbUntVxE+bxHdg3tqFw6L3dvRbv9NZyBWVrs2cVe:MQVXClRwGkjEqrL1RLFyBUrsTVe","tlshash":"b1e31228ad67c0e464e8c98ca8652e79dfe7b13bb824f534487ac9095c1cf9d1ce6634","first_seen":"2026-01-07T08:18:34.288082Z","last_seen":"2026-10-07T15:00:56.075718Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1848,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":803,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/footer-logo.7cd9dc6cf6b5a7f76f83a4bc6b31138c.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.913Z","timestamp":1791385192913,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /static/media/footer-logo.7cd9dc6cf6b5a7f76f83a4bc6b31138c.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts/IBMPlexSans-Regular.ttf","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.681Z","timestamp":1791385193681,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts/IBMPlexSans-Regular.ttf HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:54 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 175748\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":175748,"size_decoded":176178,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"1286abb632c5a409a0a997d11c994e34","sha1":"8e18e19c963fd6b0895620010d1a4adbc2d2caf7","sha256":"852def7e24f7b71bab6e8a5c9b02b203e45b0ef59697feaf116e7e8091ad7a2a","sha512":"7ec63f19acb0e3e9c2bab443b68280dbd290bec66461e3baae2fdaaae0260bc6082480fe4f1fcaf8c0c16c5287c605df023d29786e4f3e0aaa43a46f6632d3bb","ssdeep":"3072:IBEydOkAfyifuN7J1St4fJu72jgy2wc0cKAdmXA:IB/ZAjfuNGaJVjl9c0cKAdt","tlshash":"0604e84bbffb1b03e30b5ab58ce1d2741671f90baf76a5097c918564cacf20206639d5","first_seen":"2023-05-19T14:49:42Z","last_seen":"2026-10-07T15:00:56.074777Z","times_seen":611,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":789,"receive":530,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/10b9c6f3d5f42f4ee849e888349074ef","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.691Z","timestamp":1791385193691,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/10b9c6f3d5f42f4ee849e888349074ef HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/9fefd3d2daab19e43279ad3924f82c6b","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.693Z","timestamp":1791385193693,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/9fefd3d2daab19e43279ad3924f82c6b HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts.css","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.835Z","timestamp":1791385192835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts.css HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 808\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":808,"size_decoded":1219,"mime_type":"text/css","magic":"ASCII text","md5":"d114fbacd665822679e33c1bf951af84","sha1":"49a525fc9474e9fe1746bc6e32478e498dfa9c62","sha256":"01a7dac9185acb3d7856647edd588909b7cc9a9becf51fa2a02136b897fe3c50","sha512":"c06924180e79310bffcb01da50288728ca743de81f32876660bed1cc8a992cb3980b00ae6e052ab8a36e7c04cfad127b841ef37be95d7f0c13a5b737b803a4b8","ssdeep":"","tlshash":"ea01d650445e2030f6540cde73cf6f18642e285b10aade387b922a70dfe281d93b0f9e","first_seen":"2024-08-19T17:30:02.037979Z","last_seen":"2026-10-07T15:00:56.077463Z","times_seen":23,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":173,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/logo.ca504f0382caf1409fecac9286bb744c.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.849Z","timestamp":1791385192849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/media/logo.ca504f0382caf1409fecac9286bb744c.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4438\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":4438,"size_decoded":4855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34b01cac11ea5c5b742b8b0d30f4cb56","sha1":"68a01d944f7c73d56831390ac1417e1602f1d25e","sha256":"6fd20d6c28ae88a19563a9eb4117f011a24bc9307c4e3e7b7acf57060565d7ab","sha512":"86493a5e7b13dd375fd09e8313758219d73045d70eb1a2c9da5bfa34d7971a542074a7461d8e6a398df9df3fafd5436e3f613a507d829145fd45714abb560c96","ssdeep":"96:0teKYZc18IZp8S0g35fTB4NY3zcSEgFlXtGeNqTMObUppI2:0tDYZj1jg35V4slFldGNbUp22","tlshash":"559174e4329892f438014f29dd1a50b2706f20f53f598290d2d49f9ab4d66ab8fdcdc2","first_seen":"2024-08-19T17:30:02.046674Z","last_seen":"2026-10-07T15:00:56.079978Z","times_seen":44,"resource_available":false,"data":null}},"time_used":2754,"timings":{"blocked":2207,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/011b7f387a5b74d6716b47a4d15f799b","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.892Z","timestamp":1791385192892,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/011b7f387a5b74d6716b47a4d15f799b HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/5132d3bc50248c68d032b9b329b4a2fd","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.922Z","timestamp":1791385192922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /images/shops/5132d3bc50248c68d032b9b329b4a2fd HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:54 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13146\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":13146,"size_decoded":13575,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x180, components 3","md5":"ce312061fe4fe56eb780dbae51fcbcb4","sha1":"1cb1c549ce80419923586bcf1254f7547707aa4e","sha256":"103f2821a149a2d90f86e66e546ed8bcbc8c40fe72adc1478077a9d98fc8210a","sha512":"a53356206c685e32737fdaa3b84ca7441515a7cf24e093f670b60a6bdadd66924f10b6ed9ac97ef23ac3dce5972cb66a2186a1cd245a74bb1e1270c653e5cc1c","ssdeep":"384:yFGXyE6+rTo9vbWzgctDjAwqADFp9iBzrw:yQTl3myzfD/Fp9l","tlshash":"2b42cfda0a467380d08f48996b22fbab8413cd4db2cd52bdad90213ccb173b65f47656","first_seen":"2026-10-07T15:00:56.081869Z","last_seen":"2026-10-07T15:00:56.081869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":510,"dns":0,"connect":174,"send":0,"wait":595,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/Tripscan-top.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.853Z","timestamp":1791385192853,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /static/media/Tripscan-top.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/f0ab9c85507d3604ee3a8e0f3c5e43e2","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.854Z","timestamp":1791385192854,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/f0ab9c85507d3604ee3a8e0f3c5e43e2 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/internal/bbecbb2f-0edf-4394-aa79-1f82e06f1833/MEGA_desk.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.860Z","timestamp":1791385192860,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/internal/bbecbb2f-0edf-4394-aa79-1f82e06f1833/MEGA_desk.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/internal/232c323b-db99-4d4d-ab56-6c190a32de68/ZM_logo.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.890Z","timestamp":1791385192890,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/internal/232c323b-db99-4d4d-ab56-6c190a32de68/ZM_logo.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/modal-logo.19dcd0a8194289327630ce50a290ef3f.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.914Z","timestamp":1791385192914,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /static/media/modal-logo.19dcd0a8194289327630ce50a290ef3f.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/23630a85e5593e39f60e0fa0cd503ce8","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.915Z","timestamp":1791385192915,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/23630a85e5593e39f60e0fa0cd503ce8 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/e7de4763815f510df8edd0136e867823","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.690Z","timestamp":1791385193690,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/e7de4763815f510df8edd0136e867823 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts/IBMPlexSans-Medium.ttf","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:55.983Z","timestamp":1791385195983,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts/IBMPlexSans-Medium.ttf HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/fonts.css\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:56 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 177104\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/Tripscan.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.850Z","timestamp":1791385192850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/media/Tripscan.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 148831\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":148831,"size_decoded":149246,"mime_type":"image/png","magic":"PNG image data, 1624 x 516, 8-bit/color RGBA, non-interlaced","md5":"ead567f80b75e14f8e59b137a0c15c47","sha1":"bd18fa560ace6b9dbf9c7318b5d724c9c8f41976","sha256":"7d41960ef0705e4e54bffce4beca24dafd449e9256a26ba599a43f17a5ef55ee","sha512":"f2d75b681acd9d08ff443a9d1c0c42d5b9c7648c25733c0d5c7b4dcac5b52eff170b5c23f003c239ed4b6ed42e74a4defa09879be9b94c2282f470f36a40ba76","ssdeep":"3072:aUlE2/lVfrrcGWOJNDuJNSN4ZIxGzz3rFvzcskgnVcITZJy+agTm:aUlN/lV/IOvSNSzxGX3rF7ZrcIlt2","tlshash":"dae3120c9c879ebcf66c2534a1112fa3312949901b5b3bc65e57bd20f878bd8ebb4067","first_seen":"2026-01-07T08:18:34.158388Z","last_seen":"2026-10-07T15:00:56.08358Z","times_seen":31,"resource_available":false,"data":null}},"time_used":2253,"timings":{"blocked":574,"dns":0,"connect":175,"send":0,"wait":822,"receive":505,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/internal/e74901de-d57f-4063-ad74-828d69802841/OMG_desk.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.857Z","timestamp":1791385192857,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/internal/e74901de-d57f-4063-ad74-828d69802841/OMG_desk.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/Tripscan-bez-vpn_mobile.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.910Z","timestamp":1791385192910,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/media/Tripscan-bez-vpn_mobile.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 61414\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":61414,"size_decoded":61828,"mime_type":"image/png","magic":"PNG image data, 432 x 588, 8-bit/color RGBA, non-interlaced","md5":"04e048ef8bfa5ab55cd2890b0fdda048","sha1":"4314177b24d9d07fe52e38236659c6100f51c0d0","sha256":"59522ac4eb2183fba59e334426d0703ba2b4600a1353471cfb91a95ea6843c51","sha512":"14be5b216fe2458edbe9c821f86e7eeb508898f6bff1f1743434d9a34c9ea18d514be65b2b29b9b4f1464d1b7363e43abb960568d3525d67cfda6e642e51c14a","ssdeep":"1536:TJXROE+MtI4DOxGCn9GjmlO1NV1J7DO1JriB:TJXROE+qfyQCnkilEJHGdiB","tlshash":"3d53f1c8e464da84a4e8702beeffcd54bd6f4089a80547d153505e63e67c1dbca3b0ab","first_seen":"2025-04-22T07:24:42.783834Z","last_seen":"2026-10-07T15:00:56.085401Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":778,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/f107e304ac16bb007dc035b98251fbc0","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.685Z","timestamp":1791385193685,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /images/shops/f107e304ac16bb007dc035b98251fbc0 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:56 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 55188\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":55188,"size_decoded":55617,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 500x500, components 3","md5":"f373c0472830f045afc1b3360b002576","sha1":"b28e5f20a37989b4f42afa6f0da173abe82498d9","sha256":"7b35d98ca7a1517dda21b9eaa5197c3b31838a4d3a8545aa0478aa97f8eaa8c2","sha512":"d3675a3c287f680442ae7694cbf4085449e97c4698bc5725f5b124d0fdf645db37ebd63e8aebe2a8b2b21e44f032f0c3610a86cc8b445f53a53c15b80f99e2ec","ssdeep":"1536:RabSTkdAetqOAmnOy5fQWq3Jy2R6FwdPYjWkaWPV:BNOACZq3o2EFcKHV","tlshash":"e443023cb377d03118604eb287e6914c3499eafa1b612c775b1124ccef22a77588c72a","first_seen":"2026-03-27T23:41:47.216653Z","last_seen":"2026-10-07T15:00:56.087276Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2846,"timings":{"blocked":1919,"dns":0,"connect":0,"send":0,"wait":740,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/f5edc80b724531d10d2a8ab6c82e78a9","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.687Z","timestamp":1791385193687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /images/shops/f5edc80b724531d10d2a8ab6c82e78a9 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:56 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 11905\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":11905,"size_decoded":12334,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 276x276, components 3","md5":"73d67590351adfe63dace4b4180a3832","sha1":"25bced72cea9e1524a30c5e60fe5b3ba338b2d2d","sha256":"7a68f40ea2d9f6da82d3ad64dd5d8cf9eb26db88bf113463238e861225cbd711","sha512":"6cd8d70ab7f697a92848f0793e246ab4e32a7bcb5c4fb393be6e6e960041747bdb0b5eea6ce28043c4f63bf7d9151daf23cbf19162f331bfe418e782684d0c36","ssdeep":"192:DuUpJNsnwghRIcT96TBePcti+E0Y2Aa6P6HqRbNzfBugtaScy+vSL4ir9LCIllTR:Dd9snTbIiet7E0bApcObNzfHgScynf5L","tlshash":"1032cf6c975da3046e0e0775e91e3716167cc96a8edd360feca38e44d0be0028b9da27","first_seen":"2025-07-09T04:43:22.408389Z","last_seen":"2026-10-07T15:00:56.089063Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2848,"timings":{"blocked":2270,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/js/public/5.27.1/main.js","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.779Z","timestamp":1791385193779,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/js/public/5.27.1/main.js HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trip80-co.icu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2795064\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":2795064,"size_decoded":2795493,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65157)","md5":"d60e0e54f90789fa75eebbd5b6ceba7a","sha1":"c4c01a7af283a3e8e220fe2c101b341cc4162e49","sha256":"289f7615dcf5b0617b8689c1162e72139b5231df7151fb6e3080ed15a1bd54c0","sha512":"e0b8f5ce9163f400a7f3310220415ab0ee62a061fdde7e23006508d0b2d41fc61c1073a426501fcdc8816dce734775742c973e3e1de6346c1632b45f79a4fccd","ssdeep":"24576:ktRB8xjKvKDMx18mhuka9Z5MFxFR7FkRuJq+FDFK:ktRB8xex9huka9ZibFR7FkRuJq+FDFK","tlshash":"3f2518c87192f0a647e311b6807f0506f33a1e29380dc450f265e8da7db955ea27bf6d","first_seen":"2026-09-27T19:15:44.511217Z","last_seen":"2026-10-07T15:00:56.091294Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2794,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":935,"receive":1254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/2610ce61e1856ac03db1cbfe276cd280","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.889Z","timestamp":1791385192889,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/2610ce61e1856ac03db1cbfe276cd280 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/9eadc39d91f7a6e500cdc5deb94e4430","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.920Z","timestamp":1791385192920,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/9eadc39d91f7a6e500cdc5deb94e4430 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/ee1b4c11395d51158f4fa3f2cd1bd9ce","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.688Z","timestamp":1791385193688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /images/shops/ee1b4c11395d51158f4fa3f2cd1bd9ce HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:56 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 10564\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":10564,"size_decoded":10993,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 276x276, components 3","md5":"33fbec31a04380dbf43fcd794b9ce12e","sha1":"91d59292ac8715a42318a223f4f8d1ad13799927","sha256":"a99fc32dd486544e4b786448109dfd184a95f8a59e6596331777f3dd127c1223","sha512":"86d2cb19767536fb364b822be13267b1a7d0ee921a4e2ea97a3668dc23faafdacfc94a7648fd5914d668b64bb93489e2db04dec833ed5719454ee7b74398b029","ssdeep":"192:Dbn5JPdY6VtFHM8tqTYCCAuAKGmPjJQJzdDCjJzT/Ns/Md6q0dBwORGpLQ:Db5JPdYi5ltfC0cmPjC/DCjV3d6hp4k","tlshash":"c822ae4b6b9cd381751c9ae4aa071f6866977f55f1c33aea00024e9fec600e20bc879d","first_seen":"2026-04-04T16:37:16.367109Z","last_seen":"2026-10-07T15:00:56.092066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3170,"timings":{"blocked":2604,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/2e7ef76c42f1f1825136427408f0a639","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.885Z","timestamp":1791385192885,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/2e7ef76c42f1f1825136427408f0a639 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/52db34a91185918005938145fabba499","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.918Z","timestamp":1791385192918,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/52db34a91185918005938145fabba499 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/25b30d5793044255e9f3e1b19cab2214","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.924Z","timestamp":1791385192924,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/25b30d5793044255e9f3e1b19cab2214 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/ec222becd3675d308e7529449d34632f","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.693Z","timestamp":1791385193693,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/ec222becd3675d308e7529449d34632f HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts/IBMPlexSans-Bold.ttf","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.718Z","timestamp":1791385193718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts/IBMPlexSans-Bold.ttf HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:54 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 175712\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":175712,"size_decoded":176142,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"1ae7d0a8e83337da66631aeca59fbb02","sha1":"6c829b9e0904df3399e7ac03ee1bb1f72c2d5e52","sha256":"856c41d7d47bba74b107e526ef8f49968fb2a3a129cdc3c5ef5899ba3c2dc181","sha512":"0c41041b500af255d55b34dec58eb68a366125093e1d62ef7fb83f1d612f3d8a99e241b52386df7b4f32dbe8339224a7cee4a4d42583de3a51bbe39173f7349a","ssdeep":"3072:Onw8AOIOqx2IJVTu/vdfSwQumaTJZLUFbK:OnMlXrq/vdfSyhTJxybK","tlshash":"2804c60afefb1b17e30b1ab4ced1d6b45b72f857af76a1096c819464c9cf2420a539c1","first_seen":"2023-09-24T08:17:02Z","last_seen":"2026-10-07T15:00:56.093948Z","times_seen":298,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":715,"dns":0,"connect":0,"send":0,"wait":759,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts/IBMPlexSans-Medium.ttf","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.719Z","timestamp":1791385193719,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts/IBMPlexSans-Medium.ttf HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:55 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 177104\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":177104,"size_decoded":177534,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"361336a2ed1908c5cd8dec2e10aa71a2","sha1":"754f3b3406638d2b8da0e71dd4449557add0eccf","sha256":"11ddde88c29ef7e51f5c03da7fde285085469879139d006f631a62dba9bbd069","sha512":"0f36c033be1788c994dc2ea3e6f1bbf578b22fe149ed01c7990f4774b41929cd10a0af8a3e18749a2bd4d7a25cf1df9fc4e496b44b7290e939467ad63589d7fe","ssdeep":"3072:PD75d6O6YDPpq0bdpV/hGwSuDJinlx30eqZ6t/gmB:Pxd6Hco0bdpVzSmJqlx3tqo9gmB","tlshash":"6704e75abffb1b07f30a09b58ce1d67413b1f90bff62e5066d409654d6cb2428a63ac4","first_seen":"2023-12-11T17:17:03Z","last_seen":"2026-10-07T15:00:56.094629Z","times_seen":241,"resource_available":false,"data":null}},"time_used":2246,"timings":{"blocked":1053,"dns":0,"connect":0,"send":0,"wait":762,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/Tripscan-bez-vpn.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.851Z","timestamp":1791385192851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /static/media/Tripscan-bez-vpn.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 68137\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":68137,"size_decoded":68551,"mime_type":"image/png","magic":"PNG image data, 1218 x 387, 8-bit/color RGBA, non-interlaced","md5":"6607890d9f4109308a89f1f97da60c2a","sha1":"ecaa3efb9704530b9b25968eb1828ba929fb2ae3","sha256":"21131a67ad37446993aa68c39da7a344f5ca5068aaccbf8f032d20b3ab6671c8","sha512":"c307e2b20d9528963955df592a60491b356842e9751a1e2970837677ae8c50e67314d738b30b6e85b384d59abb95a9b8e62d65d6ccbe85731a0c2c7b68cc31c9","ssdeep":"1536:63ef0r7gOqErQ6Xj3haL2Kk1jdvxmlOEcwNxs9xEdOTC9Db0HD8sU:6Ofu7gTE3jRM7kBdvxD5Yxs9CdODHD8H","tlshash":"1263025c94abccfad5e6583270dfa3078b24e08a979d57530b31a1b10dbb7b81051da7","first_seen":"2025-04-22T07:24:42.76901Z","last_seen":"2026-10-07T15:00:56.095581Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":574,"dns":0,"connect":184,"send":0,"wait":854,"receive":313,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/c356ec39696e8d31aafd4e0b265d90ca","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.916Z","timestamp":1791385192916,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/c356ec39696e8d31aafd4e0b265d90ca HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/d235fea0044fa6cdc0b938e088b9a900","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.881Z","timestamp":1791385192881,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/d235fea0044fa6cdc0b938e088b9a900 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/device_mock.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.895Z","timestamp":1791385192895,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /static/media/device_mock.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/ad4c0042a76167b4f970711391d0fedb","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.921Z","timestamp":1791385192921,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/ad4c0042a76167b4f970711391d0fedb HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/865745a247aa0f4709bc5717c81656cb","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.695Z","timestamp":1791385193695,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/865745a247aa0f4709bc5717c81656cb HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T14:59:51.415Z","timestamp":1791385191415,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:52 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nContent-Encoding: gzip\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":358066,"size_decoded":52090,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38568)","md5":"911116ccff6f8037f705c435bb75062d","sha1":"6383c5ca7f9b5b5b88821d1242ae59596b2f417c","sha256":"c34c0c9a51f04da9abe6583904567de042d6aaf0ac1d8882f5b33d44db5e4d38","sha512":"18c994ef15080381edef2da762332e25171007e397900a308bb3e204e095b72383985fd045cf62fc001075ffa578f9b5deca2d4695a1790fa493dfd73d5fab7e","ssdeep":"6144:OGphw3rH9Et7+xOT5kwzvGCO/c8uBzqNk/yOlkIYUCY61GaVY6dXyAACsngApaGO:OGphw3rH9Et7+xOT5kwzvGCdknUZ6Iah","tlshash":"2874e6214110107f411766d1e274af4f32abb2bfcf07499477e42fa4abeed908d6636a","first_seen":"2026-10-07T15:00:56.097351Z","last_seen":"2026-10-07T15:00:56.097351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1467,"timings":{"blocked":-1,"dns":5,"connect":173,"send":0,"wait":847,"receive":257,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/internal/7266a509-32cf-448a-a1b8-2c6e5e855574/Kraken_desk.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.882Z","timestamp":1791385192882,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/internal/7266a509-32cf-448a-a1b8-2c6e5e855574/Kraken_desk.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/static/media/Tripscan-top_mobile.png","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.911Z","timestamp":1791385192911,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /static/media/Tripscan-top_mobile.png HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/shops/c83eb204d7744cb060b802789588330f","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.695Z","timestamp":1791385193695,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shops/c83eb204d7744cb060b802789588330f HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/fonts/IBMPlexSans-SemiBold.ttf","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"45.76.184.161","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:53.720Z","timestamp":1791385193720,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip80-co.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 08:56:12 GMT","end":"Mon, 04 Jan 2027 08:56:11 GMT"},"fingerprint":{"sha1":"8A:57:E8:5D:11:78:88:B4:57:87:AD:E8:F5:2C:98:25:A0:E1:17:2F","sha256":"09:06:61:3F:16:B6:1D:88:C3:A0:E0:33:77:9E:D1:EF:39:64:25:7F:E6:7F:7B:F5:56:DD:3C:03:82:9E:2B:40"}}},"request":{"raw":"GET /fonts/IBMPlexSans-SemiBold.ttf HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Wed, 07 Oct 2026 14:59:55 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 177272\r\nConnection: keep-alive\r\nVary: Sec-CH-UA-Mobile, User-Agent\r\nCache-Control: private, no-store\r\nSet-Cookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax\r\nAlt-Svc: clear\r\nX-Edge-Cookie-Ok: 0\r\nX-Edge-Protection: 0\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265","quoted":false,"path":"/","domain":"trip80-co.icu","max_age":1200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265; max-age=1200; domain=trip80-co.icu; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":177272,"size_decoded":177702,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"3ea7eea66304ac5e02a95265505300fd","sha1":"45bed8ec82912658ca349d6332084a12266fcc7a","sha256":"c8ba79a3dddf6c41f4c0e982bb1be4cb5014bda1d2b6fb1e030221b4e1aef185","sha512":"3d17490b7d4b53aa20a348a601495ffcd49569129ab39ef6de2a2f668b2343b13670577047f76a34524a08db55e02109532a3a3c10ce102305659704c2888571","ssdeep":"3072:o3mpqOnSZZDmTuvasgpvjr3JMkU1gIhCkEt+taS:o4qSSZZD8uvasgRjr3JMvgIhCkEqaS","tlshash":"c204e65afefb5f17e30a09b5cde1d6b41771b907ef36a10a7c80a514da8b2814a63dc0","first_seen":"2023-09-19T09:16:30Z","last_seen":"2026-10-07T15:00:56.099567Z","times_seen":363,"resource_available":false,"data":null}},"time_used":2477,"timings":{"blocked":1247,"dns":0,"connect":0,"send":0,"wait":755,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/681ca72203b72041fe04d04771abe3ca","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.856Z","timestamp":1791385192856,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/681ca72203b72041fe04d04771abe3ca HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/f09f876d6ee6154a528acd1a1610044b","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.887Z","timestamp":1791385192887,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/f09f876d6ee6154a528acd1a1610044b HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/internal/7873c956-6fe6-4812-abab-c8ddb9cbd319/Blacksprut_desk.svg","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.855Z","timestamp":1791385192855,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/internal/7873c956-6fe6-4812-abab-c8ddb9cbd319/Blacksprut_desk.svg HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/5eafaa82ba9b1777530bf35a527e8b43","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.859Z","timestamp":1791385192859,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/5eafaa82ba9b1777530bf35a527e8b43 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/09d444fa449d3c8190fbeedec2fe0775","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.877Z","timestamp":1791385192877,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/09d444fa449d3c8190fbeedec2fe0775 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trip80-co.icu/images/products/dff3258fa16f1dfdf6bc4ee5275bb0e5","fqdn":"trip80-co.icu","domain":"trip80-co.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trip80-co.icu/","date":"2026-10-07T14:59:52.893Z","timestamp":1791385192893,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/products/dff3258fa16f1dfdf6bc4ee5275bb0e5 HTTP/1.1\r\nHost: trip80-co.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trip80-co.icu/\r\nCookie: internal_api_session_id=71dc5637-ab48-4349-83e3-446bdee97265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"internal_api_session_id","value":"71dc5637-ab48-4349-83e3-446bdee97265"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"trip80-co.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}