{"report_id":"84df4480-7327-40d9-9424-dc81fd839fe1","version":0,"status":"done","tags":[],"date":"2026-07-20T17:23:31Z","url":{"schema":"https","addr":"trips76.info/","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trips76.info/","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"title":"Tripscan — сервис планирования путешествий и маршрутов","dom":{"size":15934,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3087)","md5":"7d62aa42eb271c4545b9e9524d645807","sha1":"c8c9235bdc069fe4ddb35252b6033dfead1727d0","sha256":"59f6c3c4c251ea545b7881c3fe1dad63e5f3e4717eb78043193ebef20629d329","sha512":"a70b6db73d614f0a223f6f711f7a7389d9f96b06ea1bee195731e93b7156e54e6e0a6fe3bea0ba20ba760c16ab8cfc1d996f6896e8259dbd8a381ddd56f07658","ssdeep":"192:wB9Knvps2tssUhPrXrmxJlrpqfHe+K+CANwmYYlXVJaFRCMrrMm3VXVJazpCCa5X:XhMsURYbqnbnwm9VAR7rM+tVups53WA","tlshash":"89620120408e60ae6216b4abfc05af0c7df745bebf6b1f2506b81dbf76f6824c528515","dom_hash":"domhash6b238234f6f05f6560a623a8ad26428a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trips76.info/","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T17:23:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trips76.info","ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-20T16:06:07.374052Z","last_seen":"2026-07-20T16:06:07.374052Z","alert_count":17,"request_count":17,"received_data":58840,"sent_data":8550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trips76.info/assets/js/app.js","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcdbe009577b5e77ae99823204e4bb5f","sha1":"2ef931173c61b960b3004de601e5cdc8febc4967","sha256":"08e232c90610f3d918425252fb34abbf483e9ead95d6e44377577a0d4e161e5a","sha512":"733c2263e006bc2310dd4176e0b3e6201f35c16ba182f7f2de8c2296cff0057985715ad2f0b9f9bbb7af2b1e1cfcc9a9235c84b228b366be88c573d551a8b8b5","ssdeep":"96:hVMsbv90dc1XnXkRb6bqkDRk14VWlXYrL8b7JYkpWsD7Gs4bsr:hVMM5tXCGqcFVP27JYYRr5r","tlshash":"69a153a0613fbdbe4957500be988af0538b9c57eab1a1b1d48381c7f32f25115358d7e","size":5087,"data":"","first_seen":"2026-07-20T16:06:10.970524Z","last_seen":"2026-07-20T17:23:31.763819Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trips76.info/assets/css/style.css","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.547Z","timestamp":1784568184547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a5cfc16-1d4a\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVs79zgT02PNj2vubrSteP8SQTNTRpjue0lkNdK2fPALT9AlFOv79Qu490f8LWeZYTrmUhL9kSg6W%2FWuffbWQyEOALm9JynQsPyUu%2FPjqdm46Uvv7FCDywI8kB04%2FQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d168608deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7498,"size_decoded":3015,"mime_type":"text/css","magic":"ASCII text, with very long lines (7498), with no line terminators","md5":"d10e447596e3b8d3d550f17d7acb3d89","sha1":"a4f859ab002ecbc2d24860bae8ce5407fab8d161","sha256":"44b02814699340b9887d429c9b25f9649e9a02ac8b047aecc25c03c23208fce2","sha512":"1c2adbf15a0f3f440d13d0ebdfa16a17ca5f30abdc51f3a99669148800148c35354cf572f417ecef7f0528c23bb2b4b5f9aa57ee98949bfb0e986ec7a2006df2","ssdeep":"96:4FZangmrTT5zDOlNMddP5IFdeZbm03uNt/py8g6rpre6sK5EEh3ORKDE:KZCprTTNCy5ImZVpuNrUK5pFiKI","tlshash":"f2f162b6b5ac7634b42bd894e9c4678fb0106533c0770bd9bcd1d568c8cbaf34aa560b","first_seen":"2026-07-20T16:06:10.963668Z","last_seen":"2026-07-20T17:23:31.737304Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/planning.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.562Z","timestamp":1784568184562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/planning.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-548\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lz7CA7KLFAE1RlLeYhZa%2FPaHDs7a94vhjpkSeSuCf61fTog4B3VWFLmNQOzwVSSHFet7p%2Fwcnyc80vJG5cepdyyfKIzbQ8NA7yTHSTQVUnBrc2I9vZU5XkOmHNtur6U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d178668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1352,"size_decoded":1392,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f6d8c34b550cad0290fbad74b203e60","sha1":"d24691d1f8f790ad56df1169478a09f8ea25d57d","sha256":"0f63c1d0d2707a9f65a863e1cfbb0e17602d7a40b9d7245704e9829c77a93cf2","sha512":"db8c29ee4f0100547998932577f935e24ea908fcbd44e6dc5cdd9f1e0780ed97bdcb3c0aa5f86ce964da29d4109036755646a2691d0d0e2b62c62fbacead15b1","ssdeep":"","tlshash":"4b214d40a18d8a2ff700c44cf70bf46522bf68cd9f49db7479810d3aa0d39bba618388","first_seen":"2026-07-20T16:06:10.96465Z","last_seen":"2026-07-20T17:23:31.738626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/budget.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.563Z","timestamp":1784568184563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/budget.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc16-53a\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOiXQA5oA4b2PJbnia%2ByS4NeV8K4KXXyZ6YpeJmjTa4XiWFySBBuTsSibkbhstfEnNY6aPgQEJPfC23kaQ6eScPRAI5FlIk0p9hbc0u0UaD7iey5nTqlHxOsU6xViKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d188678deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1338,"size_decoded":1405,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99df5f122a3e8632e3421e57b495fc2a","sha1":"f9f67b8525700c347fa3190d3728a763f4906f7f","sha256":"a5daae6d51a2712d83af23c55bd0f13d6b46bf46894e22b1e1dbd9e1f51b40c9","sha512":"cbf91df75e71f050e836fd0fef7d33ae6bfce3803e3075d4e7815b120e1074e2407108fa1f896091ae12acef8e8b9ac7f44cfdfd12a19a34ec05bf0bcc63ac6a","ssdeep":"","tlshash":"1a214241a58c952ff700c44cf70bf0a561af36cddb45c73478820d3ba0d29afa5183a8","first_seen":"2026-07-20T16:06:10.958304Z","last_seen":"2026-07-20T17:23:31.740426Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/documents.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.568Z","timestamp":1784568184568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/documents.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc16-51e\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9Ye%2FPPrAN8DTxPYgPEloN6vFQp9MRN0hejW6CAgQiqVdX7tfWBEqmv%2BRt2Otd9pQD1Oi91Ii0%2FzIfKmvbe2GEJyFfRJMIrWNyR7fv3lXg52nnzR59PdkUCLFsAUQXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1886b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310,"size_decoded":1402,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7aa13671f7bdeb12c592090adc20570","sha1":"828382725e4183482790d3184839203c8c48ed6a","sha256":"bbca80801816a53ad10a30decde5eb64cc54a6459512eb3aed84dc78dab105e4","sha512":"2263cc2e0cc296f84b37307911812ddd7a681953a5591d7a1d5609efcb896cf77abd7fad0805d52187e36073ce6536ca79080510665d7dda77c852b0a36e1391","ssdeep":"","tlshash":"06211051a24d952ff700844cfb0bf4a521af39dd9f85db3474410d3aa0d28ab6519398","first_seen":"2026-07-20T16:06:10.967427Z","last_seen":"2026-07-20T17:23:31.742108Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/business.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.574Z","timestamp":1784568184574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/business.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc16-534\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bn%2BySkqgSTqxHXc9wVU%2B752wTSezCIzgtDMW7G0NF0sFDC1j318ppQgcgjVacMaMVGXg%2FocCFBWBR322r%2BQAQHzkdsYWdNsT51c6IryrxYMJMcAPE1heH2QOxplAOM8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1986f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":1401,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b90f556a5e8f3e29bcc2e9b5eaa32e4","sha1":"b9ad9eb5a7c61c3f915a9b3bc1af6518307cdf59","sha256":"0bfe7dd543a3d836e845b2296e076f10841764509309bb31d03e77c0ad155967","sha512":"d6f83037e83a1defe08dac5a5c677ef7918bc4b64218783a366ce39232717e66bfb707345aebd62df448b8d9f397e0010d8c81642693d71e674f0be45b2cc601","ssdeep":"","tlshash":"43214240918d951ff700c45cfb0bf06621af65cd9f45eb3479410d3aa0d34bba608388","first_seen":"2026-07-20T16:06:10.962761Z","last_seen":"2026-07-20T17:23:31.743228Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/favicon.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.630Z","timestamp":1784568184630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/favicon.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a5cfc16-aa\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHNqAqDmdK2OE1i%2FNS10xcgfptxdmdVIhMRxgUzIwfxwIlQzktjiAORbtLyp5ksL8wDCqi580Tv0aGb6AJbD6%2BHwTMSTVHKQcOzxeMV4Vrmvne6yJzh6Vf1HiOCFTB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1e87d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170,"size_decoded":901,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a96d64927d4d5107c93aca2a2fa4e328","sha1":"a494dbff824c09593c4de6bb7fa1b853f2e51b8f","sha256":"087da7a06adf94907ef4349565dd4240f3538872c4e39e38cec2b0d2253ffa09","sha512":"6460eba86311f0f7ad2b4088cccdf73a9944f6b51623440b6f726c4aab98a0bceac3ee8430f6baf78e1780e9346b27f8c991d8a1a943b5bf675928525e4b41fc","ssdeep":"","tlshash":"43c080557548990445184611ab68b45d627f20cda7880179f8c4621566446fbb81565d","first_seen":"2026-07-20T16:06:10.96184Z","last_seen":"2026-07-20T17:23:31.744377Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T17:23:00.908Z","timestamp":1784568180908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rSky8SItfxSjZIx0NenFkg%2F1HUAxVT6bOqsRIY6wbDgcZw8rnjl00bQNlM2aiQzt%2FHNFIPT%2Fm%2BrpFghsj%2BGVT6fmbJID39dbaGt3qXun57%2FCDIk5Jn2XcmYSHqhgnaI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a1e3a6ce694a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16297,"size_decoded":5140,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3087)","md5":"e32004c0547b9453afed9c5a3321197c","sha1":"93cf59c06f172a00a0a183fadb1f736d0a6439ec","sha256":"3cd8c0c2c980a508fb0cbdb3c9a9bf98430982b254293efb45cc2732d0077d09","sha512":"de2a289c30f8c71b8f520f8a36f3c7f921fb802b3bf1980e3f7712db8a41dce6e0a5144a2ec4e8ea7a7c22889d1bb4f45449ce5ac9c1f07115152663db814b5d","ssdeep":"192:MB9gnvps2tssUhPrXrmxJlrpqfHe+K+CANwmYYlXVJaFRCMrrMm3VXVJazpCCa5g:hhMsURYbqnbnwm9VAR7rM+tVups53Wl","tlshash":"f1620120408e60ae5216b4abfc05af0c7df745bebf6b1f2506b81dbf76f6824c528515","first_seen":"2026-07-20T16:06:10.969332Z","last_seen":"2026-07-20T17:23:31.746289Z","times_seen":4,"resource_available":true,"data":null}},"time_used":3282,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":126,"receive":0,"ssl":3147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/transport.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.565Z","timestamp":1784568184565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/transport.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-51e\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jb8RSCQEsA18AhI7xwA4OyBV%2FFagWK7lUp6%2FKHaMDTsK7LcnlSGUF4xmWRedv7BCpiUSdE8eu1Z83tI2ER0rykLRO7nU0R6yYwDkGsD0ppqRPvANWIwe0aZjnxXgFug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d188688deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310,"size_decoded":1396,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e7da1cb8408e77ed48c680781dc038f","sha1":"0797e2026be99df734ad059f9c15a385b910e990","sha256":"0349ed6ed0a30d8bec82f2c1ca2d63a41c68afa29739163dc8ff168c23fc514a","sha512":"dffbe36908ec88d022b4d8fd860081b41cce4f235cd3f7281f1c38ce8b3c3a15b6d222ccb78716b4c5b4b14b26b2179b0da008f76e39b3f4f3d337d3c590eff0","ssdeep":"","tlshash":"df213240a64c992ff704c44cf70bf06561af35dddb86c73479410d3aa0d29bb6509388","first_seen":"2026-07-20T16:06:10.965566Z","last_seen":"2026-07-20T17:23:31.748428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/safety.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.569Z","timestamp":1784568184569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/safety.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-52a\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4WCsri1CE5O1SlZd%2Fh%2B4No9y0SbMI0hisFSG%2FtA8RUI3ywXsuPNyRjEQAJkBoYorqkrTtdwoKAnZspYr2s%2B1f7P6%2BGf7MZnt1tRGketkS04BTwj7FdfQTQmSqn7Y5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1886c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":1408,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a99cd94634f938930a9d781c9d7ac973","sha1":"477965fdea09211e10d076b632467e530ff3e37e","sha256":"0c50482b1a179af77ff22687e532b64aa88ded7982222a6197805f4718f17b1c","sha512":"4d832e3ddf4e91576c71dcdb8742e055000b9e001716defe7603857bc6f14e0065450cb1c83fbe3a678cbb5b0e48c99f9ea0d480f6b0cacfab75faf178fb5c5c","ssdeep":"","tlshash":"83213241a64c892ffb00c44df70bf0a621af25dddb85cb3878410d3be0d29afa609388","first_seen":"2026-07-20T16:06:10.968277Z","last_seen":"2026-07-20T17:23:31.760252Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/family.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.572Z","timestamp":1784568184572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/family.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc16-538\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkuD918FMBx%2Fp%2FPmdEYLYnIxqcOwEAD5MJVkA2gqViWzbIpEpJ2%2B%2BRh2qUDhC5%2Bma9XyPjZHKFr%2BFESB3je1QdbIlliorJdp1F%2FRBk80V2HrerDBuEjpe0Qv3PqohsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1986e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336,"size_decoded":1407,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1568711908aeb719bcdc40f093b14cea","sha1":"818b91e809eacff4523aa38156410a59acf7df13","sha256":"e2182d53e34c6c7611a05e49bcd3a63f15e0070b15f6a5fe88d21e99e7fdc50d","sha512":"1e1a6d1bfdc0f9e9cb1fc53e657b7aa25fefd35a9225cec790f4fcd380f06e93cf953c30294962f9f81cd6bff05804d6cd1d092e23634d8aa1ad10028e049e01","ssdeep":"","tlshash":"2f211240a19e852ff704c54df70bf45931af65cd8b49db3479810d3aa0d28ffaa19398","first_seen":"2026-07-20T16:06:10.959189Z","last_seen":"2026-07-20T17:23:31.761242Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/digital.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.576Z","timestamp":1784568184576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/digital.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc16-538\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pNsg8S4uxhXjK31p4N9etlSCONP98z153knWF0lUrMerEX90bkP7LlYxgY7e8AAeMRgQ%2BpS5UQZ77QVLz0TBthZENlCMOOIl0937eYN9oeW%2BYalD8h92VIU7wACg40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d198718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336,"size_decoded":1407,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d59091f370494ecc5e62d51db05a3e77","sha1":"09468efdc78cb05acf948f9b18461fb3115dcc93","sha256":"5bd293880e2bdd63b07939f49e539ed8e6267d6fbc9d002a7710b2e1ee81b9d5","sha512":"7c08e53a3c38852314596bef405015c21a420445ee61a0dca0d68857edccc1ee679aab6adbfca5bbd0882bd4fee36182795596a09b05d7e01ad13dea585610bc","ssdeep":"","tlshash":"43212d50a14c952ffb00c44cf70bf06121af24ddcb86db347a410d3ab0c29bfa518388","first_seen":"2026-07-20T16:06:10.972411Z","last_seen":"2026-07-20T17:23:31.762193Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/stay.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.567Z","timestamp":1784568184567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/stay.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-522\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zN7TW2I6uIWsCZzgEEa%2FwqKKyutmf5cnGtpszHGpX2nEiA83yg3TChWsuIXMp16Jzc3uWvZXfzLCNK6bqS8bGZ5dU0ovDx62jBwjXugkRsAgBdYFEa60E25tTR1OBpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1886a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":1394,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f80aafd9326757761806e3d3012d5dd3","sha1":"973c5eee1cd39c204bf0e74c20ca0e32030f08a7","sha256":"20e47c2aeb284f1e979c8c7695d98c09ebe2ae6844a6b5efb06e6c60383b178f","sha512":"6daa2aacf8e35f746a140db810abacd3988dc4ec015170402a9ab9c09771dea74b86a4711463d93b23c5e957c6738f5798b0f09250f1c25f21ca5bc26007e3db","ssdeep":"","tlshash":"7821e051a55c9a2ff700c44cf70bf06525af35cddb45cb7475410d3aa0d39eba519398","first_seen":"2026-07-20T16:06:10.966509Z","last_seen":"2026-07-20T17:23:31.763019Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/js/app.js","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.553Z","timestamp":1784568184553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 16:32:24 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a5cfc18-13df\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6VJBXhW7ao5nYLGfJ73bFaEPv7UJ0Z1PuQg5CeiVl26yeE6Tx8vDHO5MkNyQXm2Hw6G0OjX1DttZn6sNqQ7Uv8eTjYQikF6gv8hEPv1MhP5MqaiQTQiUzxmHadAbFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d178628deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5087,"size_decoded":2746,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (670)","md5":"fcdbe009577b5e77ae99823204e4bb5f","sha1":"2ef931173c61b960b3004de601e5cdc8febc4967","sha256":"08e232c90610f3d918425252fb34abbf483e9ead95d6e44377577a0d4e161e5a","sha512":"733c2263e006bc2310dd4176e0b3e6201f35c16ba182f7f2de8c2296cff0057985715ad2f0b9f9bbb7af2b1e1cfcc9a9235c84b228b366be88c573d551a8b8b5","ssdeep":"96:hVMsbv90dc1XnXkRb6bqkDRk14VWlXYrL8b7JYkpWsD7Gs4bsr:hVMM5tXCGqcFVP27JYYRr5r","tlshash":"69a153a0613fbdbe4957500be988af0538b9c57eab1a1b1d48381c7f32f25115358d7e","first_seen":"2026-07-20T16:06:10.970524Z","last_seen":"2026-07-20T17:23:31.763819Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/hero.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.558Z","timestamp":1784568184558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/hero.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-564\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e56ebb2t6rcBjRI4%2Bz7mocVinRNFme0hp%2FmBTe%2Fa8m6u%2B14U%2FixiS3%2Ba6iGC7T%2FE00u08Znfh5mhyIezuU8FUBHm6xXp%2FMtp%2F%2Fc1cjznx4QLYCesZ%2FAJOlKzWCErH4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d178648deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1435,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87db315481a028fd17b94e8b96901aa7","sha1":"a27d1160935a7e12e2cc3176bc134baf9084bed6","sha256":"8949813e456c9d28fc1754ddd08e331b362ddf14d32cc8262bed944c894c10a9","sha512":"df606f5eff90016dfb63b42b99b7911fe6a5869d81a653649106775fab381e7a32b3b1f9c6ae53837de39ef96b735e07462e4d449d1907c29c655af99e13b032","ssdeep":"","tlshash":"b4214245964d991ff710848cf70bf0a261af78dd9f45db3875811d3ab0d28af9a1c388","first_seen":"2026-07-20T16:06:10.973318Z","last_seen":"2026-07-20T17:23:31.764628Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/packing.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.571Z","timestamp":1784568184571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/packing.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-526\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mufl0K0GWgrsd24POcb%2BhmGbeAh45andXYZclcYUhGumbjCsqSXEKlyYw3p7zF2DQ7bwjEviG5uRw7TGSBXNq9deNBBIlGZbcKrtdZK%2Ff4nrQrMpZIKDOT7yECH1rnU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d1886d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":1402,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7937d4b8f5b97c5bb917997c4c640feb","sha1":"f9490f6ffb489a3af8870205ebe5914703f0b26e","sha256":"ffc72c15d60401ebada2e79e97adf86c8763f62065ece0031083e70d42da2536","sha512":"7f5da551bafeda57dbdc35bcba925715827fa6405e023ae890e10d25c982d7b34433d96bef874a712bd0d611cd19eccc64d77c9a19f0dd17f982b3f682552e60","ssdeep":"","tlshash":"a3211054a59c892ff700848df30bf0a621af29cddb89db3575810d3aa0d28bfa509388","first_seen":"2026-07-20T16:06:10.971443Z","last_seen":"2026-07-20T17:23:31.767045Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/routes.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.575Z","timestamp":1784568184575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/routes.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:23 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc17-532\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9MAy4VMf9eau2WGNQmh0Dc8Yp1IVaK7X9U%2BliSgFugPXj5BataY5MlbGtV1kbbuOqf2KYfqpFM38%2BZzdKCv62%2BE9RPvhF6lUcf1QfDVkMelIdlzwDii2F25UaO%2FcQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d198708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330,"size_decoded":1408,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cff9b07e3a4e177a3351d16e431a86ef","sha1":"a3ea44b99525d45748cf6002acdad46d83dd92bd","sha256":"ba55189b8d05177664c6254823770da2719a722fbbb58e0d83f2ed3093a7acfa","sha512":"1215f7f49bccffa344204b6c483e658b0a2bb05d2e6e42d968da3bb62a47741a9fe27b1c3a9c4c63eca3f9ed9be4de612800cc9afd8edc8532590e5d69ae1858","ssdeep":"","tlshash":"30211240a68d992ff704c48cf70bf0a961bf29dd8b45db7875410d3ba0d29af96093c8","first_seen":"2026-07-20T16:06:10.960089Z","last_seen":"2026-07-20T17:23:31.773031Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trips76.info/assets/img/food.svg","fqdn":"trips76.info","domain":"trips76.info","tld":"info"},"ip":{"addr":"104.21.29.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trips76.info/","date":"2026-07-20T17:23:04.578Z","timestamp":1784568184578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trips76.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:48 GMT","end":"Wed, 14 Oct 2026 12:04:12 GMT"},"fingerprint":{"sha1":"08:09:D2:89:7C:BB:1A:13:CE:C5:E3:89:AF:9B:5B:72:61:62:F5:D5","sha256":"B6:3C:56:D5:47:71:13:5C:32:89:F2:A7:DA:97:D1:87:11:C8:56:8D:15:D0:45:A6:7F:D0:F9:B2:66:5C:27:95"}}},"request":{"raw":"GET /assets/img/food.svg HTTP/1.1\r\nHost: trips76.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trips76.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 17:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 19 Jul 2026 16:32:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5cfc16-52e\"\r\nexpires: Tue, 21 Jul 2026 14:04:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrCMvqKTSEISnTsXgErVgYOiuCakztYziNZcyQQrWI37B4%2FG7%2F8BJnyTAQRFsdqMeUR8LRrFRVTP1hMM%2FmNs67IgZN43iCPffzjZN9m7YedWzJAUJp3PXzjIC7d8MWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e3a6d198728deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1326,"size_decoded":1399,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73190305de2b11bf1d1034ba66f27fc8","sha1":"292b62ab99b340052a839f935468e450f8cdd5cf","sha256":"f428aa685b505b947316cfe121fd507fa8c714f5ad538c723c62bbb649e8c849","sha512":"f0c8ebb9badeffa8dbd7d74eb86ca129ce32c884824622f876dfcd2e2b524220fe06b581aa0c6d35767a0e462b7ae0d357d3e7d109c6c85f2ff50377a8dee5fa","ssdeep":"","tlshash":"eb21fd40a15d992ff700c44df30bf0a521af69dddb8adb3475810e3aa0c28eba519388","first_seen":"2026-07-20T16:06:10.960954Z","last_seen":"2026-07-20T17:23:31.777262Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"trips76.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
