{"report_id":"84f183be-eaa6-4f34-99c2-7ad319638ff8","version":6,"status":"done","tags":[],"date":"2025-09-20T21:16:51Z","url":{"schema":"http","addr":"trustakkredetiv.cc/","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"trustakkredetiv.cc/","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"title":"TrustAkkredetiv"},"submit":{"url":{"schema":"http","addr":"trustakkredetiv.cc/","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T21:16:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T21:16:28Z","timestamp":1758402988,"ip_dst":{"addr":"172.18.0.16","port":38532,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2025-09-20T21:16:28.174302+0000\",\"flow_id\":273974247042573,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.173\",\"src_port\":443,\"dest_ip\":\"172.18.0.16\",\"dest_port\":38532,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-20T21:16:28.142861+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":776423,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":462,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trustakkredetiv.cc","ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":67,"request_count":67,"received_data":11857883,"sent_data":30773,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":175528,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":231069,"sent_data":1144,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1009,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hva.group","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":149299,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":86676,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":328023,"sent_data":3402,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T21:16:28Z","timestamp":1758402988,"ip_dst":{"addr":"172.18.0.16","port":38532,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2025-09-20T21:16:28.174302+0000\",\"flow_id\":273974247042573,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.173\",\"src_port\":443,\"dest_ip\":\"172.18.0.16\",\"dest_port\":38532,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-20T21:16:28.142861+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/index-Bk1HtUPT.js","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b683cf8d247babcf27b057b0fc1afab","sha1":"077ed3a9067d104c32d93b2ea6156167c4555f86","sha256":"fd8330557c93cbdc23c8fdfc88635a84df603e0913c9ce8b6bfaa865e167223d","sha512":"177c253623e0ba6054af285f54dbf571aef597b05d11636329da5789fe4d9414ba61ff17c5c4ec703946419e7f6fa81c24eb2fe7c0947848f0f2909f2f2ac0e2","ssdeep":"","tlshash":"35115b59fa046698234767530b3a13ebd179eedb6cb00417a049bce23c81f61d7cba38","size":1002,"data":"","first_seen":"2025-09-20T21:17:24.526205Z","last_seen":"2025-09-20T21:17:24.526205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"images.unsplash.com/photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 55741\r\nx-imgix-id: fd2ed942ed72e145010c6b7065f1fa3bd6c544ec\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 07:39:19 GMT\r\nserver: imgix\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\nage: 999430\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220094-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55741,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d97cc13330f9c62d1f57eec329043b5","sha1":"5f86aee09e9d2c6fb5f83e3834c5601553b2ee92","sha256":"5b7fc60e937618959d1d3d72e5b47d9fc389137572010b9b611976ea41d99be2","sha512":"53c745531775e94343884e22ab5f79a4685ca965d00ee0104d27e7d5edf6e66d89a2c2a5fef4b0c418af96a108b20fb43c34015fa0e619533c4ed2382d21182f","ssdeep":"1536:Z78bMOjlL6KQv06XaKT4Y4u891ndHf2U9cFGVA:ZIbMOjlup06XaK0nu891nd/2TIVA","tlshash":"244302afed14c9d4ebb8d23c41e1134550e35cedd8f8baca421ab01aa569fd70e8d057","first_seen":"2025-09-20T21:17:24.491541Z","last_seen":"2025-11-15T10:51:28.636379Z","times_seen":6,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/gptengineer.js","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:28.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 10:59:21 GMT","end":"Tue, 18 Nov 2025 11:59:16 GMT"},"fingerprint":{"sha1":"52:9C:D1:D1:83:9E:60:12:5A:BD:47:56:E8:50:9B:8B:44:1F:1A:8C","sha256":"93:00:8E:6D:19:F3:C9:3D:F0:99:D7:0B:32:FF:12:7D:B3:75:74:21:FF:63:64:35:45:E4:F2:ED:02:60:81:F8"}}},"request":{"raw":"GET /gptengineer.js HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nOrigin: https://trustakkredetiv.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\ncf-ray: 982458161b88c272-OSL\r\naccess-control-allow-origin: *\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nlast-modified: Thu, 03 Jul 2025 11:22:11 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: REVALIDATED\r\nexpires: Sun, 21 Sep 2025 01:16:28 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T13:46:20.042109Z","times_seen":17903490,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":100,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/gazprombank-eeC-r4QR.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/gazprombank-eeC-r4QR.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0bd392f7dad182fab82cea8c2ceb353e","sha1":"bffc4c4241319202724a823b4330726201f06ba4","sha256":"e6456a766335085b44462ac3f69c5d2378fb8f3baa1ceac2c60ee5f87bb2991d","sha512":"5de598caf91128ea94c3829514e5c709458b39468f1f474ad84e04ac5a534b2f4dd18c2feba807390f151fc828612cc4c48c1e2dfeff1b17b178d69ac016edb3","ssdeep":"24:suIqGRUz8pWvsapk268ipxgdrBR/QTda+pLX3h:aqzC2sW5YwrD+ZxXR","tlshash":"3191bf42d700879cc89c1634d7418a82b62aefce0c9536e95f49b3be777e10628dd27b","first_seen":"2023-08-03T20:13:16Z","last_seen":"2026-05-04T14:12:11.195568Z","times_seen":53,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/vtb-C5skufrl.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/vtb-C5skufrl.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 34494\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-86be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"a176ba741910572f6aafaaff789c0c9a","sha1":"dbcb66f504f69db0606609a0c4089ae1333a2edb","sha256":"b3087c567f74eeea428ad53c04d7a5e60672e26bcf1c03dceff4b1921d92df83","sha512":"8f060ac223132cb8ff61b4b812eb2f72bc3c9cdab18b2bfedd49f1db19bd688bd3dcd0f6b8753a06feb0a8f489665863372ff813733c735c40754033bfc87f99","ssdeep":"48:qLVVtttV3yiLCCFbFZDNvI666P66666ILP4GtTolCq4pPz6:4VVtttViVG7m666P66666ILP3UCqp","tlshash":"c2f210c5af80431bca03937fc7d48dba76702d63ab47086abc9cba6e11f6341d785865","first_seen":"2024-12-28T13:55:00.43631Z","last_seen":"2026-05-03T21:22:12.997434Z","times_seen":8,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/adyen-CBMZila0.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/adyen-CBMZila0.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3c2e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"71acac1adc30c82f42f890851baa6e6a","sha1":"ea897df5d41ada2c6756600bab5e28d17c3f7bbc","sha256":"7abb5ec9165bc991ebcef66117dc2bf7969a37f4523fe0f02216f94f324240b9","sha512":"52966a670a56d3fadaa7c173065e590063accd61bbe4e7372f05bc6e76056462e77dc7a2fee2926bd64dace990ae7d01e775b4896b75144e9bfadc9806a57889","ssdeep":"24:nG+PA87EQU5lAbbbbbbbbbclYNa1jEJt2HHHHHHHHHHHHHHMKADM:/PA8FU5lzlCYjEDl1","tlshash":"da6292c1a61fbd17e092a0f80ba8f377b41cdce864a5b2c911f928e5d8c4075765b1f4","first_seen":"2025-09-20T21:17:24.496173Z","last_seen":"2025-09-20T21:17:24.496173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/paypal-COJdot1u.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/paypal-COJdot1u.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1536\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"e1528b5176081f0ed963ec8397bc8fd3","sha1":"ff60afd001e924511e9b6f12c57b6bf26821fc1e","sha256":"1690c4e20869c3763b7fc111e2f94035b0a7ee830311dd680ac91421daad3667","sha512":"acf71864e2844907752901eeeaf5c5648d9f6acf3b73a2fb91e580bee67a04ffe83bc2c984a9464732123bc43a3594007691653271ba94f95f7e1179f4146212","ssdeep":"48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9","tlshash":"18b1dc641694e0d8d690567ed3bcd9fbc415de02e9a50bcf078dfdba77340a0a0c6887","first_seen":"2023-04-06T18:53:38Z","last_seen":"2026-08-14T07:54:46.798324Z","times_seen":1588,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/mitsubishi-ufj-CWXrKCEh.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/mitsubishi-ufj-CWXrKCEh.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3aee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"600d65f1ded230274e259c61cd5156d6","sha1":"8dfd85c048f129f0eb0e335adb02b696c126a312","sha256":"8eb72f1e5b9592fbe9f2cf01a17feb4ce6dfad6ea6a0aaaff5f893656742fc18","sha512":"e96fd2a48123564b5fdf14f7366b8942708ff097308136e98a9ad95d490e1d3f6b1310ccfe23da579960bac55173a35960c747df562c9eb7a0e9e4ebee3a2328","ssdeep":"192:urx/H+PYoXVgS99aJVXCr7NiNW993u/999993bS1XMFOL:urx/H+Plib8XMAL","tlshash":"b3624040bf05a236e86933fe5c2463a5131adf692c6916422433b2eece7615bdd020ff","first_seen":"2023-06-16T10:37:44Z","last_seen":"2026-08-12T00:17:28.881831Z","times_seen":35,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/videos","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/videos HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"5c6-qBU3gdfDM5RiW6qd7b7YPxLUYr8\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1478,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e9f3ea94c89e3063357b3b6b947e5a64","sha1":"a8153781d7c33394625baa9dedbed83f12d462bf","sha256":"7a3c001ec912b6734024b787f23a5fec336a0bb1f815e13e5886678276a2c210","sha512":"2991377bf107917ef817bb14e577ca2c957543f72c0221ae76c20ce38a9829eff28fb4e38296eda0e82c298fec5c68ff0b365fd15db42ff5ba8595cd5f36201b","ssdeep":"","tlshash":"ad31ce655acd90ee0201b40bec08ef0e75af48fe3e6b575215512dae79f2020c62a246","first_seen":"2025-09-20T21:17:24.498111Z","last_seen":"2025-09-20T21:17:24.498111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://apilist.tronscanapi.com/api/token_trc20/transfers?limit=5\u0026start=0\u0026sort=-timestamp\u0026count=true\u0026address=THPvaUhoh2Qn2y9THCZML3H815hhFhn5YC\u0026token=TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:31.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 22:52:27 GMT","end":"Sun, 26 Oct 2025 23:52:24 GMT"},"fingerprint":{"sha1":"5B:F9:4F:16:E7:BF:00:0E:FB:77:17:76:27:43:01:54:8E:49:C3:6F","sha256":"94:18:73:87:6A:77:BF:14:82:E8:16:38:1C:3F:2E:0F:06:C0:7D:F8:E0:F0:15:84:D8:84:54:C2:10:53:DC:11"}}},"request":{"raw":"GET /?https://apilist.tronscanapi.com/api/token_trc20/transfers?limit=5\u0026start=0\u0026sort=-timestamp\u0026count=true\u0026address=THPvaUhoh2Qn2y9THCZML3H815hhFhn5YC\u0026token=TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nOrigin: https://trustakkredetiv.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:31 GMT\r\ncontent-type: application/json;charset=utf-8\r\nserver: cloudflare\r\ncf-ray: 982458287b225699-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\ncontent-encoding: gzip\r\nexpires: 0\r\nvary: *, Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1758402991828_5dufvgq\r\nx-cache-status: DYNAMIC\r\nx-client-country: NO\r\nx-client-ip: 91.90.42.154\r\nx-original-url: https://apilist.tronscanapi.com/api/token_trc20/transfers?limit=5\u0026start=0\u0026sort=-timestamp\u0026count=true\u0026address=THPvaUhoh2Qn2y9THCZML3H815hhFhn5YC\u0026token=TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t\r\nx-proxy-cache: EXPIRED\r\nx-proxy-contact: support@corsproxy.io\r\nx-proxy-mode: cloudflare-snippets\r\nx-proxy-region: unknown\r\nx-proxy-response: true\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 380ms\r\nx-proxy-version: 2.1.1\r\nx-proxy-website: https://corsproxy.io\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 2025-09-20T22:16:31.828Z\r\nx-report-abuse: abuse@corsproxy.io\r\nx-request-id: 0e7becc7-150b-49b6-99b0-7006552656de\r\nx-timestamp: 1758402991828\r\nx-trace-id: ac9d48231b06441a0007\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UNJ5IjW%2BAYRfE5SwIzAj%2BIagvpKBeBgqj209H2vXZ%2FS0vyCVPG%2F9p7vLgQ98Ff83d4hfl%2FtI%2FNyZhYzrUfjolXzMmhn14j7Jev%2BF8lbhqACmqVzPRMSbvUP1G77eTA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1979\u0026min_rtt=489\u0026rtt_var=1515\u0026sent=36\u0026recv=29\u0026lost=0\u0026retrans=0\u0026sent_bytes=40095\u0026recv_bytes=1356\u0026delivery_rate=16011057\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=3d7381fe96a40c0b\u0026ts=1164\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7433,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"382521b766f4bb80616383ba3fd15735","sha1":"87af72e72a939e73538e2143aa8d7276403319e1","sha256":"7d9b2653fad908f32389233eb4eb8b81d5280c14ab39987937994ef84a05b247","sha512":"4d70e440d235bcae1fcc22610994128a16c4584f80894484c7e92692b1f4d53ffdca5a83ef3c4eed3fd2e825dcd7e990c600938c4fc515e210d947b292055f06","ssdeep":"192:pi5OJsOTYG5OkspKTYGAM+sRXTYGf0Qs5uxTYGLqCs/MTYGXH4:pLYG55YGvDYGsFupYGeVyYGXH4","tlshash":"27e130183e68ba3ec9d88d81b9df7d01645bb3d1e5cc284ed45ccc8f69f95a86843217","first_seen":"2025-09-20T21:17:24.498997Z","last_seen":"2025-09-20T21:17:24.498997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/morgan-stanley-DFBfxKK4.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/morgan-stanley-DFBfxKK4.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 19307\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-4b6b\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGB, non-interlaced","md5":"dfb1fc6b44462f6ffef6e57149fd87ac","sha1":"d06208210ff59eabb805c6028f0c93ec66282d81","sha256":"ec5eaadbe2e1c1ff8018f42262bb6967635a8704b2158fe08a8200ca69c6f07d","sha512":"0071b2ce2c1d27d3d108332b684e14ff7f4493f1bd134899666a6dd80400dbe8d6524ef4b2ccc0158d30e84f18a756e0785b76269920e811c755503464054ebd","ssdeep":"384:2FnnZoaW9n0gXkWD0nXmruCet13jE44qPAgJxOZ52zGrFr2mB5/CQqkNYbvTC:6nZ+xXkWD0XmSCet13jx4qPAgJYZXFrV","tlshash":"3382c050f7c0d8617d0a775aff8824b92d3812ae1fe0e8c9e4b546df401c6e9e581f96","first_seen":"2023-06-20T03:04:09Z","last_seen":"2026-08-06T12:44:18.963814Z","times_seen":67,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/td-bank-Cy5PktY_.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/td-bank-Cy5PktY_.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 11454\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-2cbe\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11454,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 96x96, 8 bits/pixel","md5":"b8d3fd41bfde24435a62ac0c6623f4c9","sha1":"7b65b696665977dc130c7620635ab5627ffcc5e6","sha256":"aa52f0a9da7b38f94a0e52248b873753582390d9f35cca2eb7df78a83ea4358c","sha512":"5025e8e54b00e1bd6cac3eb202e623a123ce38a5371ed315a301de04dd8f6a3e89c9ad9a0dfe830aa646eb945ada43ef43bd688ea979cc4f0856b6f3e6c11225","ssdeep":"48:MPPb1PqEfckxJNhrZ58omTKrP/REsbNrb2S75XPexaWAa7WS1qoa:MXsEfc8FZ58XTKNEoNLX2/Aa7WS1","tlshash":"58321558984cc9c6f7097d7014326f5f25d08e8a2532413d7be7a8eed68a2fb0687b91","first_seen":"2025-03-03T01:57:24.711582Z","last_seen":"2026-07-24T00:40:28.71595Z","times_seen":32,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/capital-one-D4VW0IbY.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/capital-one-D4VW0IbY.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3aee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d27e1739c7477b10ec6917546ae61f1d","sha1":"bb36ab8bce726ce72a2d74a8529526bca0fa515d","sha256":"5f2123af80970c0478de7f373c9d861d886e070592ebcd55fa372d8dfc9752ec","sha512":"f8905a386f0d492e37d086fefd9e0eca1ef915551242554b70803f3fe89d4d7173565820f391f14f392d71861c8c43f3f8ecb4c5569491db9a2006f80bd0f64d","ssdeep":"96:WnvwwlPwSVOJilFV9HNya8arOd9e9DAthhrXTF14/sKFVNe4WiInwjr:Mf9DNF2e9DALhrjFeUmNlWz4","tlshash":"2e6262a362824eb4d8671530e9569b2dc272efea8df4fd042d387a2b4b352c5500b7c1","first_seen":"2023-04-18T09:27:51Z","last_seen":"2026-08-12T08:42:14.997481Z","times_seen":725,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/alfabank-BJGq2rHz.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/alfabank-BJGq2rHz.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 26096\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-65f0\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"52f6585afd32efbc8e35d0e3aaff8cea","sha1":"d5b26afc40374c406e28b5505343ce9f8756c0af","sha256":"10a375bfc5a2992253a854e2e4ed905a79c860ad1bd7055eb2c3727854cdea97","sha512":"8fc4ceec0930907c254ce86b87c6fb2c1ddd3ec8c8209f257ccb97ddca856dc633f4797a4c1d135762ee53256d6d9228f98a9d0cdebf8c3af29d888bffd58805","ssdeep":"384:6cm21SMkTyrdO3Arl1WMnWawahXstGiHJpV+J6FBjRVlkdDeJyOU5IkSBHZ5:pNPiyrM3A5se6+sL+JER/QW5BHZ5","tlshash":"dac2e036ad012ac3d4b00ab58d0717da797ded7d9279e992d3a2f5eacdc1b46001c9c4","first_seen":"2025-09-20T21:17:24.5031Z","last_seen":"2026-03-27T13:48:09.399855Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1556742049-0cfed4f6a45d?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1556742049-0cfed4f6a45d?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 51206\r\nx-imgix-id: cc7ca16cbca50ce4e7f845529f8a6903833205ff\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 12:24:47 GMT\r\nserver: imgix\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\nage: 982304\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230058-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51206,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"da2c9df2f60430afc335e565aba13c95","sha1":"07c662bb26ae22b0037dad5d16f433dc2d122c92","sha256":"4bbcbaf7de387158e7bcfb28da71c7db6bc14634b538ee7b03b8b6bdf5082b91","sha512":"235ca362f8f39d7f5314c2771dc8c47ea323be4d8e008d17d83362144b958a250eb7fd398c132e1a2708527b38021580d5aededf924677a42aa497455711a70c","ssdeep":"1536:cuEEZe61i2rMqckdUQyX4k055BRsAfT86HV6e:cuEsF1XgzxQyXzEDeAf6e","tlshash":"9e33f116fe5de624e1e98e314be217f0a21315738325fe0dff9871a832c2452eb78489","first_seen":"2025-09-20T21:17:24.504095Z","last_seen":"2025-10-05T06:28:28.504332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:40.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/wells-fargo-Bn8MIR9C.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/wells-fargo-Bn8MIR9C.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9198\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-23ee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9198,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"cd112f1acb59ef6e59e09c0effd8ce2a","sha1":"bc104cd92adc32a8f695300d2b0cc69c2776f6af","sha256":"6780d0b2bc67397895ef7b8845261eee7b9b22610b026835362128942da5fb7c","sha512":"4aca546509ace5ba9dd09d6ecd7e112ca012e672e1f7adb1d514ee7f52fb896855acd08101e2c96b555b4dd8410576afc486518b7407185c7af215daed568b38","ssdeep":"96:WlldYhV6u7LspZ50p/SwoE56nzTDmyzpCdukvC:WPdk6u7L85USwoLvZyuk","tlshash":"0f127f9554141a68c8287f3c322cbf4e25619e6f6660f704e39a7ccbb9b16df279c483","first_seen":"2023-04-06T08:02:23Z","last_seen":"2026-08-14T12:04:33.718342Z","times_seen":234,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/icici-bank-iiixM6va.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/icici-bank-iiixM6va.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-25be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"e9e70d85e7ad4f6a4d47c6476307c643","sha1":"71bb8903eec82e6fa80fe26868dcd8cfc9d2df77","sha256":"0180fc0dd9fbe2641f50cd9e3eab4cc825ea3107c0826db5e976e61197d87658","sha512":"edba658242f0acbe28d9accc9c7730cbb0e81577cbedcaf4bac39b80317f41781e3b6b298d119a8e88048b24e63a3db4b576afb5e834a4c7f2bb98f6273524ae","ssdeep":"48:9nC8TX8s8dCdAG9tR2iDuZ5eQAMQF754WRPdIJbdgpjkJSYy32MB+ZWA13BQB3Ep:9C87tSQR0sQAPgbu/8pxE3OyDUAZfWf","tlshash":"4a123b3435b2a006c3383abb7da9c2a9125c6eb0bc41f792743c771ed83e52790359a2","first_seen":"2024-02-15T20:47:02Z","last_seen":"2026-08-03T08:42:48.127797Z","times_seen":30,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/raiffeisen-bank-BF-taWaF.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/raiffeisen-bank-BF-taWaF.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"026419b15a7584a02c198cd614d04893","sha1":"4fd4756b25e0840c48ee0ea9608eabab710e3c6f","sha256":"cb0551990ffa2ccfd8fa93158f97f5e6bfcfc0f5e1b0c2b5a01116fe6d0e2a6c","sha512":"0f65f1c7ee167abced45551c22edb6dfdc1ed53e6f742c1202c8f9a740840d5f1c1d8ada1e7080b5269ff442f4e4391362003a72fbb51a51a13e2c2969a1a6a5","ssdeep":"24:suBtnwsmst5yKS2r1vQ1Ul1IuBIzvmyVlb2n:Txwsmst5yKS2pvDv8vm4lb2n","tlshash":"9791c38a7fcd142adbcc66b6696b8fe90573de0c1914238c73a47d51f982bef0236815","first_seen":"2025-02-25T02:15:53.503589Z","last_seen":"2025-09-20T21:17:24.50797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/mkb-D5soZ3CI.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/mkb-D5soZ3CI.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 67646\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1083e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"3adfb0278b4fd8a119762fb82b696031","sha1":"75b60dea789ae3dfbfc77098ff680da6727e23c5","sha256":"612336f1bf2ef3920ac179b502132f2ae63447a09f96f95ed21fbb611edb6b14","sha512":"324c07fff5a714d241d2e1d865245c5493f0911607014abbdf2d6003785c78d23665865769c132669a5eb989443f0e475d34ae9941c36c5c581825a8451e4aa1","ssdeep":"768:aMnUXrHYqgD6Z3lkrsilbxfN3myA7+MKO/sBhZ:5UXbYit232lyMV/sBhZ","tlshash":"8963d75363a45af5d16283b32a2760d21e37bd4d7c55c30f21b8b2bd3139ce2a6835e9","first_seen":"2025-09-20T21:17:24.509106Z","last_seen":"2026-05-14T04:10:27.755589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/us-bank-B9xvE30g.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/us-bank-B9xvE30g.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 34494\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-86be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"76743ad3dd8a91c7dadd37d3c9256098","sha1":"beb969ec3ddfc3381baec6504103d81f95468090","sha256":"9efc05a969c9148250c3b3e652de5c947f12171a20b5a7546eb61fe23cd28522","sha512":"7c3686e910f73cf714a83baf1f940c96ac21a0cc6acd0ce583e8e64ccfa21d608d642cd0063a64ca8901b6bc5a868934c8a217f23a23691ba15caa1f012ca517","ssdeep":"96:DHv/f8MIDdwjNhDbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbw6v1PoecI6/al1wv:Dnf8MIDS79HOar7Gp","tlshash":"72f2fbe3c152b0bfddd6e73ed58baa5d7918bd40dccc09058a2429bb9836b37a13b111","first_seen":"2023-06-18T20:11:53Z","last_seen":"2026-07-21T17:49:18.007676Z","times_seen":26,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/klarna-B7ROnnlm.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/klarna-B7ROnnlm.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 7406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1cee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel","md5":"3ef656bec7ed1d4ce4f1f3e421fbe3bb","sha1":"7acca69ee5f73101b020c833a94b72543a3a0fb8","sha256":"d1f778590b687292acc3d5ecf5936630054a76f776bc2d9438fda8b5d9efea49","sha512":"bf431df4bc8d9b4d0f56607e46a6b0edb5bb62d63fab99c15023778970d5f40013daa82c64cd9da45631452748d783fa56ed67a18bf8550f6c3ec0d76b1ebce6","ssdeep":"96:rUJGgtCJHJdkXzBiXvDqmYwfyaY+6/krPjzCpNmzPumFEP0Jb7oTX7Lw21+Sd3/n:rdRJHJW4qdMJvIntdz/","tlshash":"22e14660db076971ee40db367de40d6a1e03207ab8518aad244d4cf33eb49ceb28c53b","first_seen":"2024-11-20T03:16:33.045142Z","last_seen":"2026-07-28T06:42:10.746799Z","times_seen":139,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/sumitomo-mitsui-BEkEs-J1.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/sumitomo-mitsui-BEkEs-J1.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-423e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"80afc529f04437d50221a744e95266dd","sha1":"2f185c531e9638ffa4779944432aa1bc3d69482b","sha256":"1f839500a7d5b2dd36950fc6d990f7c3a0f8fbf34b50b717f8526f073070c920","sha512":"310a6b51ab14e5b80936f5ba69f0de217f449cd28a9801a497e3f0cafd954993851c74453e7e3d679dd0b7b78600e35f6a2ea7667333ea834db7ab633ded3921","ssdeep":"96:Jk9JzhIn2tkvdP6N9CpBjMKIJgJJ34Ok8ICvRUQ:JklRivd89CpBjMKIJgr34OkluRUQ","tlshash":"a272e0b745b4582bf3a0ca70c78ce2b0cc8b079c19db58310ad89e8b7b5396da032437","first_seen":"2023-04-17T01:29:52Z","last_seen":"2026-07-31T10:18:53.192863Z","times_seen":606,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1556742049-0cfed4f6a45d?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1556742049-0cfed4f6a45d?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: cc7ca16cbca50ce4e7f845529f8a6903833205ff\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 12:24:47 GMT\r\nserver: imgix\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\nage: 982304\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230058-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 51206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51206,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"da2c9df2f60430afc335e565aba13c95","sha1":"07c662bb26ae22b0037dad5d16f433dc2d122c92","sha256":"4bbcbaf7de387158e7bcfb28da71c7db6bc14634b538ee7b03b8b6bdf5082b91","sha512":"235ca362f8f39d7f5314c2771dc8c47ea323be4d8e008d17d83362144b958a250eb7fd398c132e1a2708527b38021580d5aededf924677a42aa497455711a70c","ssdeep":"1536:cuEEZe61i2rMqckdUQyX4k055BRsAfT86HV6e:cuEsF1XgzxQyXzEDeAf6e","tlshash":"9e33f116fe5de624e1e98e314be217f0a21315738325fe0dff9871a832c2452eb78489","first_seen":"2025-09-20T21:17:24.504095Z","last_seen":"2025-10-05T06:28:28.504332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":63,"dns":1,"connect":27,"send":0,"wait":28,"receive":12,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/Binance-Cc3U4PUc.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/Binance-Cc3U4PUc.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 6301\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-189d\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit colormap, non-interlaced","md5":"d5337bf48bd17f8ce00015576a547c4a","sha1":"ba223dc1b3797ce76aab130396a45ed0a66eb1fe","sha256":"3d25578afb051e7779860d722a0d050664c8b995e878b040c384818ba3fb4ec9","sha512":"69482119b1a15fea5610a0c3f5509618ffa094fb74098105c8a8b32cb40fdd126391d0b29bc342c5afcca488122ea52dffb8ed21fbbd311b34ed1a34d32b1c7a","ssdeep":"192:yHADDDDXrrrrNJeolbl0ZP4Y939rtT2gBi9jS:qQJDbl019tIc2jS","tlshash":"a4d17426bd563e927552fb27c81bc8c9f63544703a63c008d6ad582c5deab4c14bafc3","first_seen":"2025-07-05T18:03:19.006354Z","last_seen":"2026-02-13T03:30:27.138939Z","times_seen":10,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/rosselkhozbank-DEkWRmjd.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/rosselkhozbank-DEkWRmjd.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d77a21ab34474d185e6cc1b41f3295c1","sha1":"a9f32330b2a9c367a9e1897f0c8af3eef39778de","sha256":"2102d55130211f4cc72371e8a12e13a082be7c8362bfd26b0d43d03e3fec18c6","sha512":"12ce11904a0cbf8ebba12aa6a57d03425436cf47110b77d8d68180e20096be229699124598ad5b474e0ebc2e8e381ce30986f1d3c3d1ca5e8322b2896bbe4dcc","ssdeep":"12:suSzHM5b6pwwwwwwwwwwwwwwwwwwwwwwwXJR:suL5OpwwwwwwwwwwwwwwwwwwwwwwwZ","tlshash":"6391520d568e630bed3d393b94e874564dc19eeb826018c8394173dd9136e3692a3afb","first_seen":"2025-09-20T21:17:24.512933Z","last_seen":"2025-09-20T21:17:24.512933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/square-Bm4UL4eO.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/square-Bm4UL4eO.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6518\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1976\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6518,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d810985ef4dc1c0bd5811e36d13c8ca3","sha1":"2b45bb77c68c937af6a2d9854dc82301526473aa","sha256":"770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6","sha512":"2cc9c9e28d03a7c2ca524beeeb68ad09990c5f7fdd45360b96419a3ad3d37df7a3435a2a0399aa9f2b2c14764d1bb39643d5c0b136a09173e6c0db1d58afd62d","ssdeep":"96:rmphAXXyyoSSSDGgqSqqSqqSqqSqc6vSSSEy/v:rUhWXyytGgCCCCc61y","tlshash":"17d1261cb3226708e0b6d3f23045ee76d1cd8ea49cd3421cc2c64fe3b94ca5691a9f0a","first_seen":"2023-04-18T20:09:03Z","last_seen":"2026-08-15T07:45:09.477909Z","times_seen":4800,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/dbs-bank-DX9_ybFc.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/dbs-bank-DX9_ybFc.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 32038\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-7d26\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32038,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a4fb4156418cd12bf9872bed68b375fc","sha1":"28fe5a38194e0c19d6e885cbcdac21e791b03175","sha256":"3bcee651ede82d04774636cad1e14bbe448155ea17ac5f9a019bb7301b8811b2","sha512":"1325ec0b42ce34528cfaee2d90658547c5532c0eb382abbb966e226c3bc6bac3fbd17c3ff318e7ac25fcc098e0c5a1e3be879ef504b5820e3c7904e3cf5d6aaa","ssdeep":"192:M5rUUI8cYe2cXwhxExNCsPHGsC2SyeowhX+Ot4/ODAeotFesM2gxIvBLlUIz+j5k:8oS2eJUb+JbDK","tlshash":"65e25a4bac4c8ce7f52e3afd04b2956d21672cec2f1285ab217a3d96d83905fdc0a54d","first_seen":"2023-08-05T03:44:27Z","last_seen":"2025-12-12T21:53:04.770263Z","times_seen":32,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/wells-fargo-Bn8MIR9C.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/wells-fargo-Bn8MIR9C.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9198\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-23ee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9198,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"cd112f1acb59ef6e59e09c0effd8ce2a","sha1":"bc104cd92adc32a8f695300d2b0cc69c2776f6af","sha256":"6780d0b2bc67397895ef7b8845261eee7b9b22610b026835362128942da5fb7c","sha512":"4aca546509ace5ba9dd09d6ecd7e112ca012e672e1f7adb1d514ee7f52fb896855acd08101e2c96b555b4dd8410576afc486518b7407185c7af215daed568b38","ssdeep":"96:WlldYhV6u7LspZ50p/SwoE56nzTDmyzpCdukvC:WPdk6u7L85USwoLvZyuk","tlshash":"0f127f9554141a68c8287f3c322cbf4e25619e6f6660f704e39a7ccbb9b16df279c483","first_seen":"2023-04-06T08:02:23Z","last_seen":"2026-08-14T12:04:33.718342Z","times_seen":234,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://apilist.tronscanapi.com/api/account?address=THPvaUhoh2Qn2y9THCZML3H815hhFhn5YC","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 22:52:27 GMT","end":"Sun, 26 Oct 2025 23:52:24 GMT"},"fingerprint":{"sha1":"5B:F9:4F:16:E7:BF:00:0E:FB:77:17:76:27:43:01:54:8E:49:C3:6F","sha256":"94:18:73:87:6A:77:BF:14:82:E8:16:38:1C:3F:2E:0F:06:C0:7D:F8:E0:F0:15:84:D8:84:54:C2:10:53:DC:11"}}},"request":{"raw":"GET /?https://apilist.tronscanapi.com/api/account?address=THPvaUhoh2Qn2y9THCZML3H815hhFhn5YC HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nOrigin: https://trustakkredetiv.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:31 GMT\r\ncontent-type: application/json;charset=utf-8\r\nserver: cloudflare\r\ncf-ray: 98245823cf035699-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\ncontent-encoding: gzip\r\nexpires: 0\r\nvary: *, Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1758402991369_05uw8qq\r\nx-cache-status: DYNAMIC\r\nx-client-country: NO\r\nx-client-ip: 91.90.42.154\r\nx-original-url: https://apilist.tronscanapi.com/api/account?address=THPvaUhoh2Qn2y9THCZML3H815hhFhn5YC\r\nx-proxy-contact: support@corsproxy.io\r\nx-proxy-mode: cloudflare-snippets\r\nx-proxy-region: unknown\r\nx-proxy-response: true\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 647ms\r\nx-proxy-version: 2.1.1\r\nx-proxy-website: https://corsproxy.io\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 2025-09-20T22:16:31.369Z\r\nx-report-abuse: abuse@corsproxy.io\r\nx-request-id: db350c75-fc91-47b5-b7bb-2b291dc827cd\r\nx-timestamp: 1758402991369\r\nx-trace-id: 496fb562a69140fe0003\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l146OJDFvgtkuT2CHawHrFPfCzp0SjvGTYTBONBPj77e6%2FQpz0xsZ3Ekq8DMstk94Gmt0pKJ2TjSK%2FgbktV1I2nkwnbbhM3g2EV%2F7cGjHrsWVot3ObLT%2BWP0laUkuQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5898\u0026min_rtt=489\u0026rtt_var=10809\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3185\u0026recv_bytes=1149\u0026delivery_rate=6360175\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3d7381fe96a40c0b\u0026ts=708\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219289,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b1cedf0ae9475a1140960d9e8c0c35af","sha1":"76bca1ea738947d6c8dd1b099e47781a91c1a6bd","sha256":"550a15f22f95fb94852e75edda040c785e36c68dc2b29edd1f9d58b772926b04","sha512":"4192105ca37ed86aef733bc393452ad657feac65d27f995cd158464ac4b4df4106117852e05435c15f2b5e2bb855b3d6b2ad34df394afac85ee1f9bade9e2031","ssdeep":"1536:a5FdljKmGpV6srh7+MMU7UQ/t4loECU6dGQ/I9PgEnIst0zTPdA3VkJ9xgA1OjyX:bHLYmD+9+WgaKLLmDL9a","tlshash":"4424ed56ae3e9c5cdbe18ec01dcbb419a15ff283cadd2419a2169cdf5c6869931c330b","first_seen":"2025-09-20T21:17:24.515199Z","last_seen":"2025-09-20T21:17:24.515199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":6,"dns":21,"connect":1,"send":0,"wait":698,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@walletconnect/web3modal@2.6.2/dist/css/index.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@walletconnect/web3modal@2.6.2/dist/css/index.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 61\r\ncf-ray: 9824581fef275688-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3a-Y43ssnzq6burZsOw7lh6TfeBOXA\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220153-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N97Fg6zjINLczHeH6LtKpJZ%2FpUdFxWlcjQdm2WwqRZvpIpdxvKrMQlVD99gHVBHz2YDp%2FsNEOciZ2mxjRRl9%2Bwe%2Fj8wXtpkSoC9EqjzwgBcLE25ZcTzrbYxXK2lOZHtibTA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T13:46:20.042109Z","times_seen":17903490,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":66,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/paypal-COJdot1u.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/paypal-COJdot1u.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1536\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"e1528b5176081f0ed963ec8397bc8fd3","sha1":"ff60afd001e924511e9b6f12c57b6bf26821fc1e","sha256":"1690c4e20869c3763b7fc111e2f94035b0a7ee830311dd680ac91421daad3667","sha512":"acf71864e2844907752901eeeaf5c5648d9f6acf3b73a2fb91e580bee67a04ffe83bc2c984a9464732123bc43a3594007691653271ba94f95f7e1179f4146212","ssdeep":"48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9","tlshash":"18b1dc641694e0d8d690567ed3bcd9fbc415de02e9a50bcf078dfdba77340a0a0c6887","first_seen":"2023-04-06T18:53:38Z","last_seen":"2026-08-14T07:54:46.798324Z","times_seen":1588,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/bank-of-america-DI6Wzo7l.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/bank-of-america-DI6Wzo7l.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 15036\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3abc\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15036,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b3a10cef527fe85988cdf637b463fe6b","sha1":"0eec538a4d262acb152dbc29ed5c660929494022","sha256":"69031c7ce2b40a9bd4e86f3f7e9af80c35dcfa2fa31ff458d7ff64286f729ef3","sha512":"48c4fc5f75a8578bfd8dc86b04eab40b99f149687eb359586b01de68cbd127a65d9d101faeef58c2be19afae5fb0a1019586d57ebbdfd97531d48ad89340d149","ssdeep":"48:27/6zSN+k29W8sEvNYxN+Y9g2BCfvssc5ai77sdashPoM3FW:27SOskEWRUYxNXmssc5Z7scshAsW","tlshash":"ff62a368bcb07560a19ad9311cc4280d8c771e83e9d0dccafbde4c5a6f10faa4d6f192","first_seen":"2024-06-07T07:43:34Z","last_seen":"2025-10-10T09:41:44.239537Z","times_seen":25,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:38.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:48.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/index-Bk1HtUPT.js","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:28.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/index-Bk1HtUPT.js HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68cc1508-9dcfc8\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10342344,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64078), with no line terminators","md5":"c86961fbea1c83be9b20e7a3c5f19865","sha1":"7176e12d52c4b52a732197a92fe920959695a73a","sha256":"23750868fb5ac5cfc23a0a7340f86998aec60609aac26f4963e91c9e9a9bc0d4","sha512":"562ccef25125ff7e9560bc103426f7383f7b44b42d654796295a3abe5c3fadc57c5fa38a484269b6155c0969d28ac5ab1a31efdeca03438d7122376b1f35eab4","ssdeep":"24576:X6cPkqEDGn7NFBhRNt0EQbAIq4zcL/yU8RLS/aBzHXQaUgR/KjW9:G1G7NjhtFAq/6EyBrXQ/gR/Z","tlshash":"05355beedbd005ada0575933fa34be9edc648c96f943e998f2dcf848d2c380a50a1574","first_seen":"2025-09-20T21:17:24.517375Z","last_seen":"2025-09-20T21:17:24.517375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/Binance-Cc3U4PUc.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/Binance-Cc3U4PUc.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 6301\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-189d\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit colormap, non-interlaced","md5":"d5337bf48bd17f8ce00015576a547c4a","sha1":"ba223dc1b3797ce76aab130396a45ed0a66eb1fe","sha256":"3d25578afb051e7779860d722a0d050664c8b995e878b040c384818ba3fb4ec9","sha512":"69482119b1a15fea5610a0c3f5509618ffa094fb74098105c8a8b32cb40fdd126391d0b29bc342c5afcca488122ea52dffb8ed21fbbd311b34ed1a34d32b1c7a","ssdeep":"192:yHADDDDXrrrrNJeolbl0ZP4Y939rtT2gBi9jS:qQJDbl019tIc2jS","tlshash":"a4d17426bd563e927552fb27c81bc8c9f63544703a63c008d6ad582c5deab4c14bafc3","first_seen":"2025-07-05T18:03:19.006354Z","last_seen":"2026-02-13T03:30:27.138939Z","times_seen":10,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/bank-of-america-DI6Wzo7l.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/bank-of-america-DI6Wzo7l.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 15036\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3abc\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15036,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b3a10cef527fe85988cdf637b463fe6b","sha1":"0eec538a4d262acb152dbc29ed5c660929494022","sha256":"69031c7ce2b40a9bd4e86f3f7e9af80c35dcfa2fa31ff458d7ff64286f729ef3","sha512":"48c4fc5f75a8578bfd8dc86b04eab40b99f149687eb359586b01de68cbd127a65d9d101faeef58c2be19afae5fb0a1019586d57ebbdfd97531d48ad89340d149","ssdeep":"48:27/6zSN+k29W8sEvNYxN+Y9g2BCfvssc5ai77sdashPoM3FW:27SOskEWRUYxNXmssc5Z7scshAsW","tlshash":"ff62a368bcb07560a19ad9311cc4280d8c771e83e9d0dccafbde4c5a6f10faa4d6f192","first_seen":"2024-06-07T07:43:34Z","last_seen":"2025-10-10T09:41:44.239537Z","times_seen":25,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/mkb-D5soZ3CI.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/mkb-D5soZ3CI.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 67646\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1083e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"3adfb0278b4fd8a119762fb82b696031","sha1":"75b60dea789ae3dfbfc77098ff680da6727e23c5","sha256":"612336f1bf2ef3920ac179b502132f2ae63447a09f96f95ed21fbb611edb6b14","sha512":"324c07fff5a714d241d2e1d865245c5493f0911607014abbdf2d6003785c78d23665865769c132669a5eb989443f0e475d34ae9941c36c5c581825a8451e4aa1","ssdeep":"768:aMnUXrHYqgD6Z3lkrsilbxfN3myA7+MKO/sBhZ:5UXbYit232lyMV/sBhZ","tlshash":"8963d75363a45af5d16283b32a2760d21e37bd4d7c55c30f21b8b2bd3139ce2a6835e9","first_seen":"2025-09-20T21:17:24.509106Z","last_seen":"2026-05-14T04:10:27.755589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/rosselkhozbank-DEkWRmjd.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/rosselkhozbank-DEkWRmjd.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d77a21ab34474d185e6cc1b41f3295c1","sha1":"a9f32330b2a9c367a9e1897f0c8af3eef39778de","sha256":"2102d55130211f4cc72371e8a12e13a082be7c8362bfd26b0d43d03e3fec18c6","sha512":"12ce11904a0cbf8ebba12aa6a57d03425436cf47110b77d8d68180e20096be229699124598ad5b474e0ebc2e8e381ce30986f1d3c3d1ca5e8322b2896bbe4dcc","ssdeep":"12:suSzHM5b6pwwwwwwwwwwwwwwwwwwwwwwwXJR:suL5OpwwwwwwwwwwwwwwwwwwwwwwwZ","tlshash":"6391520d568e630bed3d393b94e874564dc19eeb826018c8394173dd9136e3692a3afb","first_seen":"2025-09-20T21:17:24.512933Z","last_seen":"2025-09-20T21:17:24.512933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: fd2ed942ed72e145010c6b7065f1fa3bd6c544ec\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 07:39:19 GMT\r\nserver: imgix\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\nage: 999430\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220094-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 55741\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55741,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d97cc13330f9c62d1f57eec329043b5","sha1":"5f86aee09e9d2c6fb5f83e3834c5601553b2ee92","sha256":"5b7fc60e937618959d1d3d72e5b47d9fc389137572010b9b611976ea41d99be2","sha512":"53c745531775e94343884e22ab5f79a4685ca965d00ee0104d27e7d5edf6e66d89a2c2a5fef4b0c418af96a108b20fb43c34015fa0e619533c4ed2382d21182f","ssdeep":"1536:Z78bMOjlL6KQv06XaKT4Y4u891ndHf2U9cFGVA:ZIbMOjlup06XaK0nu891nd/2TIVA","tlshash":"244302afed14c9d4ebb8d23c41e1134550e35cedd8f8baca421ab01aa569fd70e8d057","first_seen":"2025-09-20T21:17:24.491541Z","last_seen":"2025-11-15T10:51:28.636379Z","times_seen":6,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":39,"dns":1,"connect":14,"send":0,"wait":64,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/coinbase-DuZL5NU6.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/coinbase-DuZL5NU6.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 162490\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-27aba\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"e97a1069a394a68905d4637949466670","sha1":"154dc238438e7eba941b0fa0a8cca12e60798384","sha256":"e250309bc1780b80178dcd8286468c91098751a51a6f6bf069e2e41725db4bbb","sha512":"81f9fb8768c223f5254195bd59cfed5e2ce7ae3900b3aa4c3f1516ff05cfa203985cb41b9c010a27c161c264d10d9e0122cddea63c3790d078a1c2434e166deb","ssdeep":"3072:zz0jGV73KijvwGj9LDaec9iyWTjQT8nfJ6CDcLFUCwX5p:zzuGVvF388PTsonfXDUS9Xn","tlshash":"38f30209ea8b6cc4f4b63a349d4746e3776414fc8a281bb4c23db07eee5e56c247711a","first_seen":"2024-08-20T10:58:29.067661Z","last_seen":"2026-03-23T01:35:26.21741Z","times_seen":19,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/alfabank-BJGq2rHz.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/alfabank-BJGq2rHz.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 26096\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-65f0\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"52f6585afd32efbc8e35d0e3aaff8cea","sha1":"d5b26afc40374c406e28b5505343ce9f8756c0af","sha256":"10a375bfc5a2992253a854e2e4ed905a79c860ad1bd7055eb2c3727854cdea97","sha512":"8fc4ceec0930907c254ce86b87c6fb2c1ddd3ec8c8209f257ccb97ddca856dc633f4797a4c1d135762ee53256d6d9228f98a9d0cdebf8c3af29d888bffd58805","ssdeep":"384:6cm21SMkTyrdO3Arl1WMnWawahXstGiHJpV+J6FBjRVlkdDeJyOU5IkSBHZ5:pNPiyrM3A5se6+sL+JER/QW5BHZ5","tlshash":"dac2e036ad012ac3d4b00ab58d0717da797ded7d9279e992d3a2f5eacdc1b46001c9c4","first_seen":"2025-09-20T21:17:24.5031Z","last_seen":"2026-03-27T13:48:09.399855Z","times_seen":6,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/raiffeisen-bank-BF-taWaF.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/raiffeisen-bank-BF-taWaF.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"026419b15a7584a02c198cd614d04893","sha1":"4fd4756b25e0840c48ee0ea9608eabab710e3c6f","sha256":"cb0551990ffa2ccfd8fa93158f97f5e6bfcfc0f5e1b0c2b5a01116fe6d0e2a6c","sha512":"0f65f1c7ee167abced45551c22edb6dfdc1ed53e6f742c1202c8f9a740840d5f1c1d8ada1e7080b5269ff442f4e4391362003a72fbb51a51a13e2c2969a1a6a5","ssdeep":"24:suBtnwsmst5yKS2r1vQ1Ul1IuBIzvmyVlb2n:Txwsmst5yKS2pvDv8vm4lb2n","tlshash":"9791c38a7fcd142adbcc66b6696b8fe90573de0c1914238c73a47d51f982bef0236815","first_seen":"2025-02-25T02:15:53.503589Z","last_seen":"2025-09-20T21:17:24.50797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:36.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:42.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:44.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1551288049-bebda4e38f71?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1551288049-bebda4e38f71?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: d83b8251147e14a3565e00cdfbb83c91185f67ab\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:55:14 GMT\r\nserver: imgix\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\nage: 408076\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220115-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 55213\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55213,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7ee362796bbaffb02bfbeb94a73a2c6f","sha1":"b185c2d6748592c6e073e2782ff78bfd93ce3fa9","sha256":"1c6fbdede5dc5ab1656dfffc1581827a33afd16699f3c3eff86134b9f86bdb5a","sha512":"4078cad18b39d2290b7addbde1f75af27c45ef460851e1febd6752bc8b277fb5c221a19ec84fb0ac52e9bf777e5647c70fba0caa568cc31f4f75cf62f032c6e9","ssdeep":"1536:vjFdaRHPjG3xKy3jbGpX6JlUP6De1eZ5Mkb:vxdWPjqTb+X8UP6C1efMkb","tlshash":"9243027896145205d0c6d5f858ed8fc270331f34bb81b27472afae3849993bca1d961f","first_seen":"2025-09-20T21:17:24.51872Z","last_seen":"2025-12-03T12:08:21.761465Z","times_seen":6,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":57,"dns":1,"connect":16,"send":0,"wait":15,"receive":16,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/nordea-DrzGpTEI.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/nordea-DrzGpTEI.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1536\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"7b0e9c3c0c240e33000b35fc69659c8e","sha1":"5d737ba498cba22fe1f3a6d8cbd7c3b87c1863dc","sha256":"96aa03e2f9057c9ab306902c1967181055e1ed4a897a7f1060441037e4d08e70","sha512":"bd57cc1d9a876cd253a3bd2d5f14145b3acb7ba1d5c75b35aed6e823244d12ac35d0100706a654225a167448cee51c16d141db8afe45285789f8d938516eb7d3","ssdeep":"24:uZO/kGnXqKIvxxxxxxL/lX3b0j3klTfgorGD8XVr:uZO/kGM5xxxxxblX3b07kB4oKD8XV","tlshash":"f7b1f950b122d606d1207af2aef4edb640668e091f641a32b1763b1e26fe54fef3354c","first_seen":"2023-05-02T16:28:31Z","last_seen":"2026-06-24T03:17:08.142632Z","times_seen":20,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:34.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/capital-one-D4VW0IbY.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/capital-one-D4VW0IbY.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3aee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d27e1739c7477b10ec6917546ae61f1d","sha1":"bb36ab8bce726ce72a2d74a8529526bca0fa515d","sha256":"5f2123af80970c0478de7f373c9d861d886e070592ebcd55fa372d8dfc9752ec","sha512":"f8905a386f0d492e37d086fefd9e0eca1ef915551242554b70803f3fe89d4d7173565820f391f14f392d71861c8c43f3f8ecb4c5569491db9a2006f80bd0f64d","ssdeep":"96:WnvwwlPwSVOJilFV9HNya8arOd9e9DAthhrXTF14/sKFVNe4WiInwjr:Mf9DNF2e9DALhrjFeUmNlWz4","tlshash":"2e6262a362824eb4d8671530e9569b2dc272efea8df4fd042d387a2b4b352c5500b7c1","first_seen":"2023-04-18T09:27:51Z","last_seen":"2026-08-12T08:42:14.997481Z","times_seen":725,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/mizuho-AxWitMpL.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/mizuho-AxWitMpL.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3c2e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3960a7dbb11d507e1b8549efa6466bcc","sha1":"7c0a3a663327a09bad334cd152533138d1013df6","sha256":"69544e5affebd487556b73359558a12ea89a81b168c9f6fa10eae0a0468b8476","sha512":"7f302fbc54eab7efad206e5428a2c229f7b5591786d29300f75aec6096dadd503b5c876bbd8940e917846767e262f2dfce710a39bff31deebd1f72d66d1cd860","ssdeep":"192:bS5Z3bbQr0fwZ33RO5PBFNWu7Ojk4CeF:bS5dM0oZ33ROtv8ui/Z","tlshash":"926289f2b787ddfcd94883b967bb4f8018215bb228e8174905d5cb902f4937979884f8","first_seen":"2025-09-20T21:17:24.520102Z","last_seen":"2025-09-20T21:17:24.520102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hva.group/wp-content/uploads/2024/12/cryptocurrency-la-gi-tim-hieu-khai-niem-va-cach-hoat-dong-2.jpg","fqdn":"hva.group","domain":"hva.group","tld":"group"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:31.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hva.group","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 16:06:08 GMT","end":"Tue, 25 Nov 2025 17:04:32 GMT"},"fingerprint":{"sha1":"81:97:2E:A8:95:2C:4B:15:93:A8:B9:52:76:8A:0B:F4:9D:AB:67:E4","sha256":"70:E5:BA:E5:85:81:65:3A:4B:CA:35:4D:A5:1A:1A:F2:7B:FC:48:10:93:DF:FD:34:D1:0D:A2:A1:3D:DE:44:A8"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/cryptocurrency-la-gi-tim-hieu-khai-niem-va-cach-hoat-dong-2.jpg HTTP/1.1\r\nHost: hva.group\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 148553\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 09:19:00 GMT\r\netag: \"24449-676cbaa9-8305;;;\"\r\nlast-modified: Thu, 26 Dec 2024 02:08:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sbQljqrHAF2kmXS9KGGIQciSgMuKt7wlvWJ3EFvVnCGnUrJExVHHdDksdv9AG5KccJ38Hz8G2tbQHQeJYlOYUSsVRlM2VIGItg%3D%3D\"}]}\r\ncf-ray: 98245826cc12c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x480, components 3","md5":"a1ccdc0ea538a92c3d16fb98d9fa1d75","sha1":"74d19a106086b7d16856c5951a20ceeeda2c3161","sha256":"9ee9bd11209d2994e7c8eee65a9053d8db21097ce3094f150254a3b62975a846","sha512":"f3e42ff456d32e3b4aee57e9ab6021b104df6aec17bbd3f64bb758a10f8527ac9de2cd9750c1946367eac57302fc0c5d27e58c7fbf9249cb6a4eaae551e788d0","ssdeep":"3072:HRWe4KcKTO5YI125vAoVSzuZQK+xfJlPol1LjSSaQK4QUEaWOsukXz:HRv4KFO5YI1IzVCuKnPo/Dap4QPJVXz","tlshash":"b5e3237a633db2bc5f20dd664281e50ebc4c5ae3dc8e45d12939cfe9428d67a0367349","first_seen":"2025-09-20T21:17:24.521043Z","last_seen":"2025-09-20T21:17:24.521043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":39,"dns":22,"connect":1,"send":0,"wait":200,"receive":59,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/stripe-BBjLicgW.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/stripe-BBjLicgW.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3c2e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"788402a97fdf8b2c198e9dd94d3530b2","sha1":"f9f12431fa8ade1c6addcfb242e2a2d5209151c8","sha256":"56e9db1f01ad56002df3b97b46923db0c98fc10a3aa949d8500cb6b12e92246c","sha512":"29526fbb535156989deaa1f3e0ff7522e5fe6877dbba654ad6e1c1da244d031bf8bd51fb51753650ecabd6524493e155cb928046ae09bc2341b727f0c3b0c090","ssdeep":"48:Sda5XWQMFVgiOhEcm2hF9kpP/r8R1vHMPneODWlvVM+kyFba:Sda5OVg1hEcPhFae1vHEFDWlvV5Fb","tlshash":"1a6211e693ff0e29f56b073383f9c41c9136ecb59ea014e83705b58aa537d8da266704","first_seen":"2023-05-12T21:45:10Z","last_seen":"2026-07-14T10:32:41.471269Z","times_seen":128,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/mitsubishi-ufj-CWXrKCEh.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/mitsubishi-ufj-CWXrKCEh.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3aee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"600d65f1ded230274e259c61cd5156d6","sha1":"8dfd85c048f129f0eb0e335adb02b696c126a312","sha256":"8eb72f1e5b9592fbe9f2cf01a17feb4ce6dfad6ea6a0aaaff5f893656742fc18","sha512":"e96fd2a48123564b5fdf14f7366b8942708ff097308136e98a9ad95d490e1d3f6b1310ccfe23da579960bac55173a35960c747df562c9eb7a0e9e4ebee3a2328","ssdeep":"192:urx/H+PYoXVgS99aJVXCr7NiNW993u/999993bS1XMFOL:urx/H+Plib8XMAL","tlshash":"b3624040bf05a236e86933fe5c2463a5131adf692c6916422433b2eece7615bdd020ff","first_seen":"2023-06-16T10:37:44Z","last_seen":"2026-08-12T00:17:28.881831Z","times_seen":35,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/mizuho-AxWitMpL.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/mizuho-AxWitMpL.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3c2e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3960a7dbb11d507e1b8549efa6466bcc","sha1":"7c0a3a663327a09bad334cd152533138d1013df6","sha256":"69544e5affebd487556b73359558a12ea89a81b168c9f6fa10eae0a0468b8476","sha512":"7f302fbc54eab7efad206e5428a2c229f7b5591786d29300f75aec6096dadd503b5c876bbd8940e917846767e262f2dfce710a39bff31deebd1f72d66d1cd860","ssdeep":"192:bS5Z3bbQr0fwZ33RO5PBFNWu7Ojk4CeF:bS5dM0oZ33ROtv8ui/Z","tlshash":"926289f2b787ddfcd94883b967bb4f8018215bb228e8174905d5cb902f4937979884f8","first_seen":"2025-09-20T21:17:24.520102Z","last_seen":"2025-09-20T21:17:24.520102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:32.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/favicon.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:29.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:29 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 186813\r\nlast-modified: Thu, 18 Sep 2025 13:58:52 GMT\r\netag: \"68cc101c-2d9bd\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":186813,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"f31065f3cd27ee747f132dfb9f3004ca","sha1":"b1f3cc4a67b0b7c4cc1c8aaa594f4b141e574794","sha256":"aad2a3e5c939abd19c4960dbf40300fcfbf4b1a97b23aa08877f9ca689e20b38","sha512":"e6505d407245ec6a74b73604035572c9ffe3cbb314318e30e0c2aac3a355983d4c250066e25fafbf438fd6989ba70285e30572e7eda117a47e09dae7c40f81bb","ssdeep":"3072:jUcVblV61/KfYGyjVoEovkLYqFYUU9PoPZXLNnYfKDKwM0w+W3:jHVblV61/iYGyjVrovkLYmYN9PoPZXLe","tlshash":"dc04f44aba56d92be01137bcc9b3d1f0e49a6d40fa13b48366f47d87f8318a9cc095d6","first_seen":"2023-12-20T05:41:30Z","last_seen":"2026-08-13T19:12:56.146557Z","times_seen":315,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/adyen-CBMZila0.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/adyen-CBMZila0.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3c2e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"71acac1adc30c82f42f890851baa6e6a","sha1":"ea897df5d41ada2c6756600bab5e28d17c3f7bbc","sha256":"7abb5ec9165bc991ebcef66117dc2bf7969a37f4523fe0f02216f94f324240b9","sha512":"52966a670a56d3fadaa7c173065e590063accd61bbe4e7372f05bc6e76056462e77dc7a2fee2926bd64dace990ae7d01e775b4896b75144e9bfadc9806a57889","ssdeep":"24:nG+PA87EQU5lAbbbbbbbbbclYNa1jEJt2HHHHHHHHHHHHHHMKADM:/PA8FU5lzlCYjEDl1","tlshash":"da6292c1a61fbd17e092a0f80ba8f377b41cdce864a5b2c911f928e5d8c4075765b1f4","first_seen":"2025-09-20T21:17:24.496173Z","last_seen":"2025-09-20T21:17:24.496173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/square-Bm4UL4eO.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/square-Bm4UL4eO.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6518\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1976\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6518,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d810985ef4dc1c0bd5811e36d13c8ca3","sha1":"2b45bb77c68c937af6a2d9854dc82301526473aa","sha256":"770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6","sha512":"2cc9c9e28d03a7c2ca524beeeb68ad09990c5f7fdd45360b96419a3ad3d37df7a3435a2a0399aa9f2b2c14764d1bb39643d5c0b136a09173e6c0db1d58afd62d","ssdeep":"96:rmphAXXyyoSSSDGgqSqqSqqSqqSqc6vSSSEy/v:rUhWXyytGgCCCCc61y","tlshash":"17d1261cb3226708e0b6d3f23045ee76d1cd8ea49cd3421cc2c64fe3b94ca5691a9f0a","first_seen":"2023-04-18T20:09:03Z","last_seen":"2026-08-15T07:45:09.477909Z","times_seen":4800,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/sumitomo-mitsui-BEkEs-J1.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/sumitomo-mitsui-BEkEs-J1.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-423e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"80afc529f04437d50221a744e95266dd","sha1":"2f185c531e9638ffa4779944432aa1bc3d69482b","sha256":"1f839500a7d5b2dd36950fc6d990f7c3a0f8fbf34b50b717f8526f073070c920","sha512":"310a6b51ab14e5b80936f5ba69f0de217f449cd28a9801a497e3f0cafd954993851c74453e7e3d679dd0b7b78600e35f6a2ea7667333ea834db7ab633ded3921","ssdeep":"96:Jk9JzhIn2tkvdP6N9CpBjMKIJgJJ34Ok8ICvRUQ:JklRivd89CpBjMKIJgr34OkluRUQ","tlshash":"a272e0b745b4582bf3a0ca70c78ce2b0cc8b079c19db58310ad89e8b7b5396da032437","first_seen":"2023-04-17T01:29:52Z","last_seen":"2026-07-31T10:18:53.192863Z","times_seen":606,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/icici-bank-iiixM6va.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/icici-bank-iiixM6va.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-25be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"e9e70d85e7ad4f6a4d47c6476307c643","sha1":"71bb8903eec82e6fa80fe26868dcd8cfc9d2df77","sha256":"0180fc0dd9fbe2641f50cd9e3eab4cc825ea3107c0826db5e976e61197d87658","sha512":"edba658242f0acbe28d9accc9c7730cbb0e81577cbedcaf4bac39b80317f41781e3b6b298d119a8e88048b24e63a3db4b576afb5e834a4c7f2bb98f6273524ae","ssdeep":"48:9nC8TX8s8dCdAG9tR2iDuZ5eQAMQF754WRPdIJbdgpjkJSYy32MB+ZWA13BQB3Ep:9C87tSQR0sQAPgbu/8pxE3OyDUAZfWf","tlshash":"4a123b3435b2a006c3383abb7da9c2a9125c6eb0bc41f792743c771ed83e52790359a2","first_seen":"2024-02-15T20:47:02Z","last_seen":"2026-08-03T08:42:48.127797Z","times_seen":30,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/api/auth/support/messages/a70zn6bz3x91758402990120","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:46.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /api/auth/support/messages/a70zn6bz3x91758402990120 HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-15T13:44:40.263617Z","times_seen":317235,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/index-Cl4ZMZ3l.css","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:28.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/index-Cl4ZMZ3l.css HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68cc1508-248ff\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1bee3657ed83c10cc9ef7a4ce1dfba8d","sha1":"9ef93e588995b6ba7d8551f6f2d3d245ead721cf","sha256":"5403161c895a61de3ce4f8953a50fa01f59f924553a82b083af27db769ac6a63","sha512":"53c7a12116e7e5863acf057087c300f3b9787c4cf5e0397862cddbcfddebfe44f9d55b9dffd9033ad4a0e991667f42a5d45e963288d0aa00fa302233adc41e24","ssdeep":"3072:jhKUDhd+U1Ck6UvOeG0/Cr378VQZkt5FaARG4xP:jhKUDhd+U1Ck5Cr378VQZkt5FakP","tlshash":"1ee3117969a4607b7c27f1e4d38c786ce92ef1e4de3e06a9ac85421477f23f64c5a900","first_seen":"2025-09-20T21:17:24.52284Z","last_seen":"2025-09-20T21:17:24.52284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/us-bank-B9xvE30g.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/us-bank-B9xvE30g.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 34494\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-86be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"76743ad3dd8a91c7dadd37d3c9256098","sha1":"beb969ec3ddfc3381baec6504103d81f95468090","sha256":"9efc05a969c9148250c3b3e652de5c947f12171a20b5a7546eb61fe23cd28522","sha512":"7c3686e910f73cf714a83baf1f940c96ac21a0cc6acd0ce583e8e64ccfa21d608d642cd0063a64ca8901b6bc5a868934c8a217f23a23691ba15caa1f012ca517","ssdeep":"96:DHv/f8MIDdwjNhDbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbw6v1PoecI6/al1wv:Dnf8MIDS79HOar7Gp","tlshash":"72f2fbe3c152b0bfddd6e73ed58baa5d7918bd40dccc09058a2429bb9836b37a13b111","first_seen":"2023-06-18T20:11:53Z","last_seen":"2026-07-21T17:49:18.007676Z","times_seen":26,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/gazprombank-eeC-r4QR.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/gazprombank-eeC-r4QR.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0bd392f7dad182fab82cea8c2ceb353e","sha1":"bffc4c4241319202724a823b4330726201f06ba4","sha256":"e6456a766335085b44462ac3f69c5d2378fb8f3baa1ceac2c60ee5f87bb2991d","sha512":"5de598caf91128ea94c3829514e5c709458b39468f1f474ad84e04ac5a534b2f4dd18c2feba807390f151fc828612cc4c48c1e2dfeff1b17b178d69ac016edb3","ssdeep":"24:suIqGRUz8pWvsapk268ipxgdrBR/QTda+pLX3h:aqzC2sW5YwrD+ZxXR","tlshash":"3191bf42d700879cc89c1634d7418a82b62aefce0c9536e95f49b3be777e10628dd27b","first_seen":"2023-08-03T20:13:16Z","last_seen":"2026-05-04T14:12:11.195568Z","times_seen":53,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/klarna-B7ROnnlm.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/klarna-B7ROnnlm.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 7406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1cee\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel","md5":"3ef656bec7ed1d4ce4f1f3e421fbe3bb","sha1":"7acca69ee5f73101b020c833a94b72543a3a0fb8","sha256":"d1f778590b687292acc3d5ecf5936630054a76f776bc2d9438fda8b5d9efea49","sha512":"bf431df4bc8d9b4d0f56607e46a6b0edb5bb62d63fab99c15023778970d5f40013daa82c64cd9da45631452748d783fa56ed67a18bf8550f6c3ec0d76b1ebce6","ssdeep":"96:rUJGgtCJHJdkXzBiXvDqmYwfyaY+6/krPjzCpNmzPumFEP0Jb7oTX7Lw21+Sd3/n:rdRJHJW4qdMJvIntdz/","tlshash":"22e14660db076971ee40db367de40d6a1e03207ab8518aad244d4cf33eb49ceb28c53b","first_seen":"2024-11-20T03:16:33.045142Z","last_seen":"2026-07-28T06:42:10.746799Z","times_seen":139,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/stripe-BBjLicgW.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/stripe-BBjLicgW.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-3c2e\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"788402a97fdf8b2c198e9dd94d3530b2","sha1":"f9f12431fa8ade1c6addcfb242e2a2d5209151c8","sha256":"56e9db1f01ad56002df3b97b46923db0c98fc10a3aa949d8500cb6b12e92246c","sha512":"29526fbb535156989deaa1f3e0ff7522e5fe6877dbba654ad6e1c1da244d031bf8bd51fb51753650ecabd6524493e155cb928046ae09bc2341b727f0c3b0c090","ssdeep":"48:Sda5XWQMFVgiOhEcm2hF9kpP/r8R1vHMPneODWlvVM+kyFba:Sda5OVg1hEcPhFae1vHEFDWlvV5Fb","tlshash":"1a6211e693ff0e29f56b073383f9c41c9136ecb59ea014e83705b58aa537d8da266704","first_seen":"2023-05-12T21:45:10Z","last_seen":"2026-07-14T10:32:41.471269Z","times_seen":128,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/td-bank-Cy5PktY_.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/td-bank-Cy5PktY_.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 11454\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-2cbe\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11454,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 96x96, 8 bits/pixel","md5":"b8d3fd41bfde24435a62ac0c6623f4c9","sha1":"7b65b696665977dc130c7620635ab5627ffcc5e6","sha256":"aa52f0a9da7b38f94a0e52248b873753582390d9f35cca2eb7df78a83ea4358c","sha512":"5025e8e54b00e1bd6cac3eb202e623a123ce38a5371ed315a301de04dd8f6a3e89c9ad9a0dfe830aa646eb945ada43ef43bd688ea979cc4f0856b6f3e6c11225","ssdeep":"48:MPPb1PqEfckxJNhrZ58omTKrP/REsbNrb2S75XPexaWAa7WS1qoa:MXsEfc8FZ58XTKNEoNLX2/Aa7WS1","tlshash":"58321558984cc9c6f7097d7014326f5f25d08e8a2532413d7be7a8eed68a2fb0687b91","first_seen":"2025-03-03T01:57:24.711582Z","last_seen":"2026-07-24T00:40:28.71595Z","times_seen":32,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/dbs-bank-DX9_ybFc.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/dbs-bank-DX9_ybFc.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 32038\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-7d26\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32038,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a4fb4156418cd12bf9872bed68b375fc","sha1":"28fe5a38194e0c19d6e885cbcdac21e791b03175","sha256":"3bcee651ede82d04774636cad1e14bbe448155ea17ac5f9a019bb7301b8811b2","sha512":"1325ec0b42ce34528cfaee2d90658547c5532c0eb382abbb966e226c3bc6bac3fbd17c3ff318e7ac25fcc098e0c5a1e3be879ef504b5820e3c7904e3cf5d6aaa","ssdeep":"192:M5rUUI8cYe2cXwhxExNCsPHGsC2SyeowhX+Ot4/ODAeotFesM2gxIvBLlUIz+j5k:8oS2eJUb+JbDK","tlshash":"65e25a4bac4c8ce7f52e3afd04b2956d21672cec2f1285ab217a3d96d83905fdc0a54d","first_seen":"2023-08-05T03:44:27Z","last_seen":"2025-12-12T21:53:04.770263Z","times_seen":32,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T21:16:28.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:28 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68cc1508-320\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":800,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"485ab6d4b646041afad226665bac6351","sha1":"3f0525b012055af9643004c0ec4ff1e9a15d2796","sha256":"09aa94f700bfd477a4fc93e088bf567457ca9ecec20cd283bf9e1ae14809468c","sha512":"01631c69cb165d7f4f38cb7d44a0139f84588091893d29beda60e1e5cf826f2683641ee10aa261e63225070fc8a0740c7e3227634af7c57b58625a91c50a61c4","ssdeep":"","tlshash":"fa01ce468ce19c050210f9056cd0ad086cf2e7aba386a91539aa647d6bc1385cadf838","first_seen":"2025-09-20T21:17:24.523801Z","last_seen":"2025-09-20T21:17:24.523801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":123,"dns":15,"connect":32,"send":0,"wait":32,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/coinbase-DuZL5NU6.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/coinbase-DuZL5NU6.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 162490\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-27aba\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"e97a1069a394a68905d4637949466670","sha1":"154dc238438e7eba941b0fa0a8cca12e60798384","sha256":"e250309bc1780b80178dcd8286468c91098751a51a6f6bf069e2e41725db4bbb","sha512":"81f9fb8768c223f5254195bd59cfed5e2ce7ae3900b3aa4c3f1516ff05cfa203985cb41b9c010a27c161c264d10d9e0122cddea63c3790d078a1c2434e166deb","ssdeep":"3072:zz0jGV73KijvwGj9LDaec9iyWTjQT8nfJ6CDcLFUCwX5p:zzuGVvF388PTsonfXDUS9Xn","tlshash":"38f30209ea8b6cc4f4b63a349d4746e3776414fc8a281bb4c23db07eee5e56c247711a","first_seen":"2024-08-20T10:58:29.067661Z","last_seen":"2026-03-23T01:35:26.21741Z","times_seen":19,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/morgan-stanley-DFBfxKK4.png","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/morgan-stanley-DFBfxKK4.png HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 19307\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-4b6b\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGB, non-interlaced","md5":"dfb1fc6b44462f6ffef6e57149fd87ac","sha1":"d06208210ff59eabb805c6028f0c93ec66282d81","sha256":"ec5eaadbe2e1c1ff8018f42262bb6967635a8704b2158fe08a8200ca69c6f07d","sha512":"0071b2ce2c1d27d3d108332b684e14ff7f4493f1bd134899666a6dd80400dbe8d6524ef4b2ccc0158d30e84f18a756e0785b76269920e811c755503464054ebd","ssdeep":"384:2FnnZoaW9n0gXkWD0nXmruCet13jE44qPAgJxOZ52zGrFr2mB5/CQqkNYbvTC:6nZ+xXkWD0XmSCet13jx4qPAgJYZXFrV","tlshash":"3382c050f7c0d8617d0a775aff8824b92d3812ae1fe0e8c9e4b546df401c6e9e581f96","first_seen":"2023-06-20T03:04:09Z","last_seen":"2026-08-06T12:44:18.963814Z","times_seen":67,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/shinhan-bank-Bh0HG2ME.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/shinhan-bank-Bh0HG2ME.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d2071fbcc567bd26e9660fd5f492bfa2","sha1":"18d2d79d7c18f8551f2326ee517992b101a955b6","sha256":"6414da12109065aaa7cb10df39513c340e513d8a8702f226643470d24cb6e7ac","sha512":"e555bf826cb65b3bdfb2757ad9c5756037b59a68454a981933079d1787da13af000166b2c9472bf17a2f9adefb9d5f48e733d190ae0a9b20d63c19bae8a051e3","ssdeep":"48:sTf4+fffffffffWffZfffffc9fQfLffo1fffZAf2VZfffffIcf79ZxffffDNffzw:sjL9xi9L5jMeWudt0CYmB","tlshash":"5a9197ca3c31e18de0a48ef566b2dbf2176a2ca4867ea9560140f5710fb32d2276184a","first_seen":"2024-01-25T21:21:26Z","last_seen":"2026-05-15T14:36:37.836576Z","times_seen":5,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/vtb-C5skufrl.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/vtb-C5skufrl.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 34494\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-86be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"a176ba741910572f6aafaaff789c0c9a","sha1":"dbcb66f504f69db0606609a0c4089ae1333a2edb","sha256":"b3087c567f74eeea428ad53c04d7a5e60672e26bcf1c03dceff4b1921d92df83","sha512":"8f060ac223132cb8ff61b4b812eb2f72bc3c9cdab18b2bfedd49f1db19bd688bd3dcd0f6b8753a06feb0a8f489665863372ff813733c735c40754033bfc87f99","ssdeep":"48:qLVVtttV3yiLCCFbFZDNvI666P66666ILP4GtTolCq4pPz6:4VVtttViVG7m666P66666ILP3UCqp","tlshash":"c2f210c5af80431bca03937fc7d48dba76702d63ab47086abc9cba6e11f6341d785865","first_seen":"2024-12-28T13:55:00.43631Z","last_seen":"2026-05-03T21:22:12.997434Z","times_seen":8,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1551288049-bebda4e38f71?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1551288049-bebda4e38f71?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 55213\r\nx-imgix-id: d83b8251147e14a3565e00cdfbb83c91185f67ab\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:55:14 GMT\r\nserver: imgix\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\nage: 408077\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220115-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55213,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7ee362796bbaffb02bfbeb94a73a2c6f","sha1":"b185c2d6748592c6e073e2782ff78bfd93ce3fa9","sha256":"1c6fbdede5dc5ab1656dfffc1581827a33afd16699f3c3eff86134b9f86bdb5a","sha512":"4078cad18b39d2290b7addbde1f75af27c45ef460851e1febd6752bc8b277fb5c221a19ec84fb0ac52e9bf777e5647c70fba0caa568cc31f4f75cf62f032c6e9","ssdeep":"1536:vjFdaRHPjG3xKy3jbGpX6JlUP6De1eZ5Mkb:vxdWPjqTb+X8UP6C1efMkb","tlshash":"9243027896145205d0c6d5f858ed8fc270331f34bb81b27472afae3849993bca1d961f","first_seen":"2025-09-20T21:17:24.51872Z","last_seen":"2025-12-03T12:08:21.761465Z","times_seen":6,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/nordea-DrzGpTEI.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/nordea-DrzGpTEI.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-1536\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"7b0e9c3c0c240e33000b35fc69659c8e","sha1":"5d737ba498cba22fe1f3a6d8cbd7c3b87c1863dc","sha256":"96aa03e2f9057c9ab306902c1967181055e1ed4a897a7f1060441037e4d08e70","sha512":"bd57cc1d9a876cd253a3bd2d5f14145b3acb7ba1d5c75b35aed6e823244d12ac35d0100706a654225a167448cee51c16d141db8afe45285789f8d938516eb7d3","ssdeep":"24:uZO/kGnXqKIvxxxxxxL/lX3b0j3klTfgorGD8XVr:uZO/kGM5xxxxxblX3b07kB4oKD8XV","tlshash":"f7b1f950b122d606d1207af2aef4edb640668e091f641a32b1763b1e26fe54fef3354c","first_seen":"2023-05-02T16:28:31Z","last_seen":"2026-06-24T03:17:08.142632Z","times_seen":20,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustakkredetiv.cc/assets/shinhan-bank-Bh0HG2ME.ico","fqdn":"trustakkredetiv.cc","domain":"trustakkredetiv.cc","tld":"cc"},"ip":{"addr":"62.60.226.173","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustakkredetiv.cc/","date":"2025-09-20T21:16:30.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustakkredetiv.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 06:38:59 GMT","end":"Mon, 20 Oct 2025 06:38:58 GMT"},"fingerprint":{"sha1":"25:18:F1:28:FC:4A:F2:ED:9D:4C:86:E5:03:28:DE:9F:AD:CA:00:D5","sha256":"91:71:D5:6C:1A:34:A4:A7:09:7B:50:17:08:C0:24:AD:FC:05:9F:E4:B3:96:BA:43:10:D2:17:5A:2C:E1:81:9A"}}},"request":{"raw":"GET /assets/shinhan-bank-Bh0HG2ME.ico HTTP/1.1\r\nHost: trustakkredetiv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustakkredetiv.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 21:16:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 18 Sep 2025 14:19:52 GMT\r\netag: \"68cc1508-10be\"\r\nserver: TrustAkkredetiv\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d2071fbcc567bd26e9660fd5f492bfa2","sha1":"18d2d79d7c18f8551f2326ee517992b101a955b6","sha256":"6414da12109065aaa7cb10df39513c340e513d8a8702f226643470d24cb6e7ac","sha512":"e555bf826cb65b3bdfb2757ad9c5756037b59a68454a981933079d1787da13af000166b2c9472bf17a2f9adefb9d5f48e733d190ae0a9b20d63c19bae8a051e3","ssdeep":"48:sTf4+fffffffffWffZfffffc9fQfLffo1fffZAf2VZfffffIcf79ZxffffDNffzw:sjL9xi9L5jMeWudt0CYmB","tlshash":"5a9197ca3c31e18de0a48ef566b2dbf2176a2ca4867ea9560140f5710fb32d2276184a","first_seen":"2024-01-25T21:21:26Z","last_seen":"2026-05-15T14:36:37.836576Z","times_seen":5,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"trustakkredetiv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}