{"report_id":"8be132c8-f5e7-4312-8f7d-3d881b981a1c","version":6,"status":"done","tags":[],"date":"2026-02-01T19:57:32Z","url":{"schema":"http","addr":"user6817.trustvirtual.org","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"title":"Aura Pay l Crypto Card without KYC","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-07T10:01:54.04918Z","times_seen":1035908,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"user6817.trustvirtual.org","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T19:57:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1695,"comment":"","tags":null,"fingerprints":null},{"fqdn":"user6817.trustvirtual.org","ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-02-01T05:25:39.737093Z","last_seen":"2026-02-01T05:25:39.737093Z","alert_count":75,"request_count":25,"received_data":7640427,"sent_data":11765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":1,"received_data":204440,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-07T10:07:20.922737Z","times_seen":216679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b654b497ac13e33be3f45c1b781aa60","sha1":"d5858de1d258369712db9c4304b59beb5d419f39","sha256":"b21da4926f3c793427cd0e8a3e0d7b9f51a9d96e83a4c1d5febbaac2edf555b8","sha512":"2159d27cb3a0f9948604fa14af65ecc620f537a48fb967209828b13195bb733452c7177ad2680a78af9f1fb2c0b1b59678e8caeba6d901d3ef45e7710d73333c","ssdeep":"","tlshash":"5841af1f6094f904bdf2cd4715bb2fb38489ec33163ce639aa4eda2e552447e835ca11","size":2255,"data":"","first_seen":"2026-02-01T05:25:46.959573Z","last_seen":"2026-02-01T19:57:37.777985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/276-5d650fee70c6f457.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8165993a625fa7967085f230dac77a1","sha1":"0779c8665eb045ef87ad9985d9676f93040236aa","sha256":"605aebd610196611ef463afa2caa9dcc60e558f1547a82c1e1eb93d83504982c","sha512":"475ec98bd8f18e9e0b718aabe675d673e1e1f1288ff4ff9c02cf09b4e47849c1e0fecd01965cafd1809a03dbc3d29ecef4f03ae5e619db73865ecfdd194fb211","ssdeep":"1536:uDeZ8mH1pYWmyPvrb8Z+NE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxDa9x0MKy:uDyDP30+LfGWfDKb8JO","tlshash":"4da33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","size":107307,"data":"","first_seen":"2026-02-01T05:25:46.946332Z","last_seen":"2026-02-01T19:57:37.764046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325456,"data":"","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f81f2ff144bd31257955cfd3783de55","sha1":"d2a2df39ea6012012035d959d54a7986ed7814e3","sha256":"2fc071d6c8bbd67c6d9318bf2222b2c5c45c7d5429e0575b7fb2a437da0ab244","sha512":"717e9db0c27271bec44e9238de072c4ace168a18bebc9cf475c4e61f2ac708d5fde0e25f899af69b616e171c27a0bb55162b00e08655b7e89976ede1feafbe14","ssdeep":"","tlshash":"c4f0598cf60cece65825892f411f0d60c0ccca6d83a041aa63dade9bd206fb951ccc81","size":522,"data":"","first_seen":"2026-01-26T05:19:36.186498Z","last_seen":"2026-02-19T00:53:21.413176Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/63-5f43d783ec345b2e.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f5a581ea29c4a937ed233d44b95b4ad","sha1":"fbfa2e4e65dc096a09846f6dbbbd29a74e5d4f0a","sha256":"10dd839b1f597f17376a40f92b86e4f52caaf72650c8e32a5c85b821924dcb1c","sha512":"7f377940682cff0684b2b6522e4cbd31256816e1b99ce6ddee08fa046ae95d7503526635383bce999dd435de8e62d150dfc72c465e295ce3a65e97b546666a0a","ssdeep":"384:t+P1dzYj7f5IALa4pYzicGqF1P72Ik7rlBQZ/7GJW:Oz+7B77iiAbcX367Gc","tlshash":"0592c6096b563732439a13c6345ea9e5a1ba4680135544fc8fedc02e07f6becc977acb","size":20915,"data":"","first_seen":"2026-01-26T05:19:36.175583Z","last_seen":"2026-02-19T00:53:21.386416Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/app/page-0453d9676890020f.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4334bdd5e0dee199871640d73d83b1a","sha1":"62bc8f60ea5f1ca86b6a97824e55d59cde829e4d","sha256":"19e95913ab7ee327735939560d4bf6071e6d6fb627fcef7f506b64f76e6705c3","sha512":"e7af8730432d0eb7c8f695fa310bba6580c99df1da98b58b93a4196438e080a0cdbe9fb8118d98d051dd5a1ab7388ed5af785109dd84821d824555e1b707842b","ssdeep":"384:Q2ltK1MtVgHGH9syJs0JV1jJ2DSFQlHfJpJlJMD60XD/y/ftzhxtt1Uiqs:0vHGH97sUP92mFQhx3bMJXAhv","tlshash":"46524c65d495aaacf42b0dc9595e504cb22faf84d71a84f078bd7c240b054e47a37bcb","size":13948,"data":"","first_seen":"2026-02-01T05:25:46.929639Z","last_seen":"2026-02-01T19:57:37.750902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"204092eb17a74557610cb7531a7af318","sha1":"6fe765a7d7343ac4b650101beaea4e281d93b563","sha256":"7109e7d3e2dd1ddcaed32b70b3e27b9fee250d1ad9d67216e9e05aaadd56fb9c","sha512":"d0f654d9dd8cb5c3955c819d2cc8295566fa02ec50a7a2cc9b2d9270d5e3e1b851877d156c04de52725dee926c41702ad3a5f4866a3e42a63c6535783efe570d","ssdeep":"96:LN6ZhdkB/57mWte7cg1xqzc/xmW4YtapzEZz9C:qhdk5sWhgnqzcpm/YtaB","tlshash":"eab1cc6e6409cd5aec6d3d69023e9d3a60cd467b42d1eab8ba8cce050b4647a37d6dc0","size":5174,"data":"","first_seen":"2026-02-01T19:57:37.780769Z","last_seen":"2026-02-01T19:57:37.780769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/main-app-676dd074207d5b7d.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43e4cd6f528434ae8d27e305f3c0a5a1","sha1":"40b9d69b14039cc38dd59a079ea34a9ea8d7fc18","sha256":"0b1e049d77dbbf794cf448f1a37a8d2be4da145d81197090e03f4df99d6598bf","sha512":"728c017bf46cc62de6833e0fa1f91dc33789d0f907ecf23fa9f1967b3273916b95bc87a273c68448083e0a52a5367b68906403185a7f2eafeda070c4089f83aa","ssdeep":"","tlshash":"c9f0fb5a4f1cf96f5c26ad65fe97ace3145f4179202b4e606901de723c23b6dd270408","size":569,"data":"","first_seen":"2026-02-01T05:25:46.943192Z","last_seen":"2026-02-01T19:57:37.726455Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","size":695053,"data":"","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/342-796d8f4ab871a48b.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15fcca91143f2591b55c1075cadffa44","sha1":"f154ff11f42f644d680118675b3d2a6da07e85c2","sha256":"a679021ad5d7b7df3537c48ddeac32fc681c36ed51dcf1eaaf4c45c2b96d6d51","sha512":"c6e87a7fdff06f5a4e43958f8a550f92f97245a91927ac510d6ca37de4030b921da3332835ee31217e27bd2b225d67fc19e4bc3e5dd9908d8910877131f0363f","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+ShpRnlmqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5hpRNyty3VZCRJjVsB","tlshash":"a1253a897752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","size":967451,"data":"","first_seen":"2026-02-01T05:25:46.945496Z","last_seen":"2026-02-20T08:01:05.504977Z","times_seen":793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8afcb6eddb3445bd548549b72ff844","sha1":"b8d618412912d76e21b58a10804a3c732f2bde4d","sha256":"3d6f3712674ae3b1aed160e028b177d34de2edca1a4b2bf2762581573ef84e4e","sha512":"f0e9109310d17a58e2847f9605f29ff6f5aa18a36c159b3e00418cadcc3dbb04040174169ba3a190df441c8d6418111e8a329e646c02ddff2011a93e2d0f5e57","ssdeep":"","tlshash":"ceb01278e011fea114b620726139f0c6325f504d196410601223a28c02443182703fc0","size":91,"data":"","first_seen":"2025-08-19T15:40:34.902526Z","last_seen":"2026-07-29T11:23:51.506106Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"067dab6ee593961c65e21ea30fa21d07","sha1":"80f6d01b4694eba2af6efe0e08d033cfd2ad2646","sha256":"fa68f9b6e048af728edb6e4dce32cf7fa952f9c11c66d67f4f8f25a67e77ffc1","sha512":"6aae4a1ed05e001bb9005c22a3be287ea23582fc768bdf9d72888f9d3c23885ee7b8a25bd9ce1c003126aa162d7f08f4b5ef2d67807db0c3ba6978494f92f844","ssdeep":"","tlshash":"38c0c090dc02cc1cc3b74f321c3b0c3921ccc5a503054146dcc9cd2819c1b3005b0dc9","size":186,"data":"","first_seen":"2025-07-22T07:14:20.941197Z","last_seen":"2026-08-06T12:32:48.397977Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c32474c5ece67ef20dc58b555b4e771f","sha1":"4600706c8a76df1e1e6a591fa87fd8e5bf321a32","sha256":"2ebc6accf46c25e5a922ae17b9d2d7dae004474d76b9042e9e4003213d1e6979","sha512":"757b981a50907a4af6f5672cc7bbb2f87e303dde94810e9e53f8a67fe763bccfb4fa51788dc95478d7f057593ceac620554a7963d8d2dee8c278cecb3aab3b01","ssdeep":"","tlshash":"30019951bf1ec843cbaaad44287f2cb100ce8b998481896601c4cc480ab2ab12de2a41","size":663,"data":"","first_seen":"2026-01-26T05:19:36.193728Z","last_seen":"2026-02-19T00:53:21.421075Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/app/layout-b70dea450353c222.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c791129100c9de4de1b812d7fe414e81","sha1":"a94a628dc8eb6ff526c9e405a58867332a352416","sha256":"f66b2d8055878411550b87d8616b3a37f98193b5d463ba08bf5f3a717a431859","sha512":"50b75cd55b5a83fedc0c9b1fdb62a7b0f98deda6adf07e703b71fd583ce187c53ba1782acdf231de5ac897b4a5157bd8803289844ed26c1d9b9ca42d6f79b173","ssdeep":"96:/Bi/zf52iqcjaskVVdkV/+fk8SJrMSVZk/MPOZwC7DVHYFJ76:5Sr5ucjnkVVdkV/MkFrsYCIJ76","tlshash":"d7e12352d185baacb628098ce55f4c7c312f1b85c50a8c30f9b4fc3b25c5ac8f666b9d","size":6926,"data":"","first_seen":"2026-02-01T05:25:46.956969Z","last_seen":"2026-02-01T19:57:37.743878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/318-503d5ba36d12c6a0.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53669a2896ed311313f465fb59a474e1","sha1":"5a392cf387d181b8cf217d0764b30b81f7b3c252","sha256":"0a49ea9a0028b2e0b3b59a1c987aef51cc40032e6607909f31934d83d9946ed9","sha512":"8004ca157caddb4267a8622a8d627f2170035e0ceb1deacc760aa3b6142e31c8cb8c3c880839e6ae1d1865044784372cadbc61aa8e4fdaef99de550e47ca3eda","ssdeep":"96:7RuEoasY89GC75ZBesmgjY7z1Yd0n5GOIr1b8ubcrDBTuDBTV5z9GCB5feEo7uEM:1uw39wR87z1+jiubcrDsDC0j","tlshash":"00f1e8b676c6fd71024a8490443b410bf6252d77252f70c0a7aaccd9b69c9cd52d1f9f","size":7513,"data":"","first_seen":"2026-01-26T05:19:36.147631Z","last_seen":"2026-02-19T00:53:21.397721Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173024,"data":"","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/255-596a00806980443d.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb12f22d3ee41a590bd625af00a23d41","sha1":"2b7cf514eb3687ecbd99371012b0585477c2d1be","sha256":"0a743db7133b2a6d8bd8c230bb8b3160fbe76d47284fcbef956b5c80bef3ca1c","sha512":"6f1e0cbfd7143dff9f9cac780931fc89d97567e4343347273869f71f14d47237b5c9298bd35955375c22cd8bf926ccc5dc3a96550aa56b25528ca2690986f374","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXa7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNIrky/Sz:e79LmA+6y4r904Aj44RN0z/Sz","tlshash":"34f3dab636d0f8d107a780e5843b400af3291c3b146f74a0a3e6dcd975645dea1b3faa","size":173010,"data":"","first_seen":"2026-02-01T05:25:46.928781Z","last_seen":"2026-02-19T00:53:21.371537Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/29-949739d660b8375b.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7647ae332021a09da3976015182ace9","sha1":"76622f20041d60733038b383d4d703f52bd20685","sha256":"155b8e013d48822ebfba6a66fcc3a768805093d908498cbb89b18b25009f96da","sha512":"d12ea3248263463fb144c89b13a8777af86317760e99e1fadb23b36462b568c516b76bc98c1f04f31779ab50fa151c33018f94401a5a4b78d608bf1536bf0917","ssdeep":"6144:YclbuCQV2S1dgNp7zF34OIWdjt02/dApvI+MYdDPSzzDQnb2RDbt1IcbOOo5jz/5:YclZQV2w+h7/d5YdDqTQCRDbt1IcbuN3","tlshash":"b4e40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","size":659247,"data":"","first_seen":"2026-02-01T05:25:46.932635Z","last_seen":"2026-02-19T00:53:21.400371Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92e3c29b811c82a9398a1c5cbb11b45b","sha1":"06b9d2c78aa0b354339526441f3ed4d52e7e2eda","sha256":"4a31581ccb05a298032e11db82fb6e0fb3c7af500a71fbcd2b01058d9881de4b","sha512":"0d52863c373a91782be664dc100f3d30bd096272d70ea7415fcdcb130de289a0828a07ba3186a760147c7c37d21c76ca3f5597a1021d5d6db434ad81e90a343a","ssdeep":"","tlshash":"49900470d0410c575133001317fc7501555cd04c04413d401f75544f5451155f715d45","size":46,"data":"","first_seen":"2025-07-22T07:14:20.944135Z","last_seen":"2026-08-06T12:32:48.39996Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user6817.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102795\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T10:01:44.921413Z","times_seen":254274,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":222,"dns":5,"connect":20,"send":0,"wait":8,"receive":5,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/main-app-676dd074207d5b7d.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/main-app-676dd074207d5b7d.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-239\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRyXjPxF3e0L6pJSB1iZbNUHQuQxou64KWaqGUPROCJ49hdpYiI%2B9DBb67U9VVjOp0lxJKZt0GASETqSegJ2DmK0UmhUzI7xlkQ9pEKGR1s7QlzCsRKW\"}]}\r\ncf-ray: 9c7403ffaa3f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"43e4cd6f528434ae8d27e305f3c0a5a1","sha1":"40b9d69b14039cc38dd59a079ea34a9ea8d7fc18","sha256":"0b1e049d77dbbf794cf448f1a37a8d2be4da145d81197090e03f4df99d6598bf","sha512":"728c017bf46cc62de6833e0fa1f91dc33789d0f907ecf23fa9f1967b3273916b95bc87a273c68448083e0a52a5367b68906403185a7f2eafeda070c4089f83aa","ssdeep":"","tlshash":"c9f0fb5a4f1cf96f5c26ad65fe97ace3145f4179202b4e606901de723c23b6dd270408","first_seen":"2026-02-01T05:25:46.943192Z","last_seen":"2026-02-01T19:57:37.726455Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user6817.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102795\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T10:01:44.921413Z","times_seen":254274,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":167,"dns":4,"connect":7,"send":0,"wait":11,"receive":10,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/icons/intro-image.png","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/intro-image.png HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 920856\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 11:13:58 GMT\r\netag: W/\"e0d18-19c0e9c20c7\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCD0ZuvZJgwCLU4EysrEJuko75JtwEgC78r1ENaMizyHHh91msoWDBF8Kk00nGmHdNrWRfoSbHzNPknggwn%2F3DkiCwcvnsghT74I2No8cT7M3EUjEuUT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7403ff9a330b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":920856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1126 x 1253, 8-bit/color RGBA, non-interlaced","md5":"d1aa54a0e485da17c85fdf56792573bd","sha1":"b564cb5d09fb605bf171e3c61623692d890e25f6","sha256":"0640436f11381b8dca748d403be3d5b1a1cbf947cde0d5c36cda5df0eba81db6","sha512":"fc2772878f59b34494982ecdc4d20c4aeeca7a446069b47eea595ae2502d8c429fcddf77d552893be384df2c13b83ea2a8fd962c92f108b5fae321cdf0ae3c1d","ssdeep":"24576:IV7ngTuhC0HZ9OI1SSCLOp8hLB31xhNpIpjgu0v:IV7niuh35II1SRLc8hLh1D0pJ0v","tlshash":"39153314d1a2f8b6d76ff0b0861ecfc6ea35d8a9cafc94f102b5ac059553e5f007a588","first_seen":"2026-01-26T05:19:36.151246Z","last_seen":"2026-02-19T00:53:21.405733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/550ed063-ff1761c4cedc8066.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-a9b0d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0TjUcssLrhljDQsqs5j7Qowj%2FMIeV%2BRYVDsksv4vyVuMPen4XL7jZexmmJcvuYfwn%2Fm2pJ0ezkbyqiw5%2B7RHX%2BGES%2BQrp9KMb638t29LEQAkvp%2B6Sj2\"}]}\r\ncf-ray: 9c7403ffba400b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T19:57:02.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14GAuCyK77B34OMJxTTo6rZuwjkVPsIM3cNHRkzMnvzPRhA17Cn7UuwT70cgsiJzBMJgoSkMqMHtyDk%2F2SZV%2BEoznanDEdzm1e%2FG9f7XaPKnJYNshGNsLK8%3D\"}]}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7403fd8a332efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":27139,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27120), with no line terminators","md5":"090cf5c250ef3f5555c3d2e081a9efac","sha1":"ed56e96f2e16d6250e3b931c7c4045bd986da7f5","sha256":"b91f6897f05b52517e0c567cf948315cf1e8b4a0e49629ecf4c43d313c3cb7d8","sha512":"92a443cebcd8d4a4b81d2978c3b35b23a70f03b17700090f54341f00ff19bb63bb4603c96ffb7eda50fd7a702ead4145cac1cb0c65c970bef83fdd70e8aaad48","ssdeep":"768:ERneszOhlgAII+YMGJaBJ+ho2kM1KTaUfRZbt/:llgAII+YMGJaBJ+ho2kMcTzfRj","tlshash":"35c2c93b6c08f917d6271ecaa13abf3620dbd116c5198038b7ccda1c47d6dba9e36845","first_seen":"2026-02-01T19:57:37.734804Z","last_seen":"2026-02-01T19:57:37.734804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":71,"dns":50,"connect":1,"send":0,"wait":126,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/css/d949d958807d8b2e.css","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/d949d958807d8b2e.css HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-e4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaGxM0Vjd3PwanBhID6HDc34zS4Pj%2FqMWV5bl9E%2BYorCfyZImZuzob0jP6Nfa9L7YQtj6D3j5tRB8IY%2FhBPz4vk4zp96Ah4Qg5CPA7yr%2F6%2F8C%2BxM8zit\"}]}\r\ncf-ray: 9c7403ff9a350b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3315ac35d9404a347032d54b853fa5ef","sha1":"fcc4475e453e8dbe1824765fb2a3ee30553cf7cc","sha256":"cc7029559051bd064778cd28ab9dbc5bfcbe44c52184246784ba16c57add3817","sha512":"77c18f8c66ea3680d19915df46f3dd90b77f7a996042ebe54d528a8f8bd7920ce501dd5396a6bb94be878661d0952c98f441d0c824ed33a23e4059e2e7d9b8c6","ssdeep":"","tlshash":"7ad05e200a23f02589f5b76a60a189892676c189bbb2060d4b68dd55838e8592829540","first_seen":"2026-01-26T05:19:36.169377Z","last_seen":"2026-02-19T00:53:21.364915Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/29-949739d660b8375b.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/29-949739d660b8375b.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-a0f2f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4pACi0LiXI1ix4olh3IerR9V6evHqAbNWLNLoI05CQciwBNxBjKqxqHX2oGSgMHBnrqOxz23uPSTs%2FWEmPL2gaKVOHDaTarN3BKQ9aQkBxjp%2BZO6Wg7\"}]}\r\ncf-ray: 9c7403ffba420b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b7647ae332021a09da3976015182ace9","sha1":"76622f20041d60733038b383d4d703f52bd20685","sha256":"155b8e013d48822ebfba6a66fcc3a768805093d908498cbb89b18b25009f96da","sha512":"d12ea3248263463fb144c89b13a8777af86317760e99e1fadb23b36462b568c516b76bc98c1f04f31779ab50fa151c33018f94401a5a4b78d608bf1536bf0917","ssdeep":"6144:YclbuCQV2S1dgNp7zF34OIWdjt02/dApvI+MYdDPSzzDQnb2RDbt1IcbOOo5jz/5:YclZQV2w+h7/d5YdDqTQCRDbt1IcbuN3","tlshash":"b4e40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","first_seen":"2026-02-01T05:25:46.932635Z","last_seen":"2026-02-19T00:53:21.400371Z","times_seen":15,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/css/73317b7ed4d531c1.css","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/73317b7ed4d531c1.css HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-40c2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muuPAONZr6F1CgEg5vQYgKO7XuUJcz6ljliNFXDhv6soEAY7HMTBufvPQoaEU6nrdPHHFh0N1mPDawV5F1JOWthTFCKGdj3k32vhZ8WmQjZ8bs%2BUAFHT\"}]}\r\ncf-ray: 9c7403ff9a360b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16578), with no line terminators","md5":"7b7afe04cea1a215cc13c4d3475a4654","sha1":"459e88eda1a119aa7a84e2749ca5ee5614ee5d52","sha256":"a17680edda4599c0b6c749986a2a46d45f4ccaf4c00ffb3d64833c74ee53cb66","sha512":"056200194869a1d9731253bc8c5a489a58a61fb603b42ebbe6592377f860b6774c20c21657edac4afcb886ecea061923421fb64ac2f5204027e4da1b4042a9fb","ssdeep":"192:KJUv+Yz2ZI2JRPfl/Ld9mObnO2YzJxWyDeXRb2SdC242SZjLa/KTTLSmY6P2Yq+r:DgtwxWcNq+5TTl","tlshash":"cc724631955a122cf01bd5c7b8d15ace71758603f2a70a9dabea21efcf825df0670348","first_seen":"2026-01-26T05:19:36.124962Z","last_seen":"2026-02-19T00:53:21.372865Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/app/layout-b70dea450353c222.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-b70dea450353c222.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-1b0e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCxgWrSFTzMuS9i%2BDfx4txY%2Bg9JpBdvNHw4DJrJYyyFMlVRwQ1xDe%2BAa%2F%2B62CaaVwCALvvhwuS%2BQep5SMDgGCSU%2FzprXoBPvR9afmLM9g8Yvxn882aY3\"}]}\r\ncf-ray: 9c7403ffba470b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6864), with no line terminators","md5":"c791129100c9de4de1b812d7fe414e81","sha1":"a94a628dc8eb6ff526c9e405a58867332a352416","sha256":"f66b2d8055878411550b87d8616b3a37f98193b5d463ba08bf5f3a717a431859","sha512":"50b75cd55b5a83fedc0c9b1fdb62a7b0f98deda6adf07e703b71fd583ce187c53ba1782acdf231de5ac897b4a5157bd8803289844ed26c1d9b9ca42d6f79b173","ssdeep":"96:/Bi/zf52iqcjaskVVdkV/+fk8SJrMSVZk/MPOZwC7DVHYFJ76:5Sr5ucjnkVVdkV/MkFrsYCIJ76","tlshash":"d7e12352d185baacb628098ce55f4c7c312f1b85c50a8c30f9b4fc3b25c5ac8f666b9d","first_seen":"2026-02-01T05:25:46.956969Z","last_seen":"2026-02-01T19:57:37.743878Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/icons/flags/us.svg","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/flags/us.svg HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwV8ePVk72x53zgNIyxZ3zb5fn90PIfKD6vxCclVnDiDxPk9yDJ3KRLMw7UJbQkne5%2FYWCbIh0w9Zidj%2FiNHGaHGF7HEMSjqCjMatywYFnJP61KVHMgC\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 11:13:59 GMT\r\netag: W/\"288-19c0e9c23cf\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7403ff9a310b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-07T08:47:21.060888Z","times_seen":4355,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/css/2e451f669089b1de.css","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/2e451f669089b1de.css HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-139f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0XlpzuYi6kupXhsh0KGjyOkx1KoJdUpRRY93ng%2Bh8kG80X%2F2%2Fe2Nb0kfpKdrB9VDYz%2B6NDX7q5xIrUBbNJPpzwomtKnX4q3yKQiP%2FpJBvQcJDncOHUk\"}]}\r\ncf-ray: 9c7403ffaa370b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5023,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5023), with no line terminators","md5":"56fe96c815a1485dd874c4c1765fb860","sha1":"40e818e6e94ad7e276d55522442a09313f4c3004","sha256":"20b53ec126c82ac0b9bd11b8c0aeb62fd48311e645a190b8597df631dd9f726f","sha512":"32f6d2e0b961f54c3042b03e7f9124837c8813975c8556eb5b5df87aa46d83742b5b86b9a83bc590fb1bab16a771be35f7ee104a984c6d5f619680e611546850","ssdeep":"96:KKkYAJrxInWf0CxQ2VLDpURhYpjrKRjEIS/MhqLtfiQM3hqn:1AJSnY0AfLDpUYpfKRDoMheop3An","tlshash":"41a1222265083118b02bd591f9a15e9e32286603d263569dff9a713fcac73758770f8d","first_seen":"2026-01-26T05:19:36.139039Z","last_seen":"2026-02-19T00:53:21.403276Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/app/page-0453d9676890020f.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/app/page-0453d9676890020f.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-367c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HfZ8ih6Vh4X5kjl52MPLe9KLZYQETP5V1e99fdvxNhNx%2F59iaYEFzdoYOp%2B9dkKUsWmlH37NkJrVnjv295iKsGHxhmgST%2BtwaeMtw9tygAg9kCLtdHF\"}]}\r\ncf-ray: 9c7403ffba480b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13948,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13919), with no line terminators","md5":"b4334bdd5e0dee199871640d73d83b1a","sha1":"62bc8f60ea5f1ca86b6a97824e55d59cde829e4d","sha256":"19e95913ab7ee327735939560d4bf6071e6d6fb627fcef7f506b64f76e6705c3","sha512":"e7af8730432d0eb7c8f695fa310bba6580c99df1da98b58b93a4196438e080a0cdbe9fb8118d98d051dd5a1ab7388ed5af785109dd84821d824555e1b707842b","ssdeep":"384:Q2ltK1MtVgHGH9syJs0JV1jJ2DSFQlHfJpJlJMD60XD/y/ftzhxtt1Uiqs:0vHGH97sUP92mFQhx3bMJXAhv","tlshash":"46524c65d495aaacf42b0dc9595e504cb22faf84d71a84f078bd7c240b054e47a37bcb","first_seen":"2026-02-01T05:25:46.929639Z","last_seen":"2026-02-01T19:57:37.750902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user6817.trustvirtual.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 19:57:03 GMT\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f04de8ad1ef740d940ec0f534a8f6474","sha1":"3b31756e84c8887867417c7d6cc64501c9d9193c","sha256":"2f1ac0c31bc3ede8317cf72e9d28051ec727c9a0014aa69cff495abd6256bb4e","sha512":"69afede137c125294044274e463f30c02594f379ec879285e0b3ee41097f503dfb8272487759870f547e4dc4cf8828a2c1efaa806deb2f3124b7f6d67c638783","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:8KYXuM0p2+4","tlshash":"28427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:44:19.218006Z","last_seen":"2026-08-07T08:08:43.669804Z","times_seen":28431,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":110,"dns":4,"connect":7,"send":0,"wait":38,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/icons/logo.png","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:04.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1861\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 11:11:06 GMT\r\netag: W/\"745-19c0e9980e8\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=772shMyodKzD7c8POSdF6eOVftR36nwl87GedMirydnBh797oqwIHZv%2B3ARZ7mjns7g2tPCGFSLXLKdN2jWoys%2Btxk513y5QWo4YulaDhGqP4ucSAh4k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7404040a650b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 94, 8-bit/color RGBA, non-interlaced","md5":"6304f1ce92b995e7d401819939250124","sha1":"603eb996065d55fad456bf688ce7ee6671089997","sha256":"c5be2d03a97cdeb3d386d7df9c642a33199c11c791366053fc8ed7db9e33c72b","sha512":"8da12d6922325bbf79ede064300b8066b6f6f3e3d2c0182d234e246709ca3ffb25ef6821c00260aeaad2ca8139eb4434501c3bcf886527ea4a1a92f6865182da","ssdeep":"","tlshash":"bc311b6543d66ca88a8d32364bc4802079a7596d2e81b45839c0b7ab092b97d93cec52","first_seen":"2026-01-26T05:19:36.15863Z","last_seen":"2026-02-19T00:53:21.368284Z","times_seen":7,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/icons/logo.png","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:04.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1861\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 11:11:06 GMT\r\netag: W/\"745-19c0e9980e8\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAwaD6zuluqUyKfCwox%2Bp2CvpVNqHGpauFNn0BWtUkc3N8Be7U5%2FwPkWVuHSeM%2BaT3HjLNpTpMbqmpfHB%2FmVpMocwPeKCLn7cuUhMbNUSoevyncZaxJ4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7404041a660b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 94, 8-bit/color RGBA, non-interlaced","md5":"6304f1ce92b995e7d401819939250124","sha1":"603eb996065d55fad456bf688ce7ee6671089997","sha256":"c5be2d03a97cdeb3d386d7df9c642a33199c11c791366053fc8ed7db9e33c72b","sha512":"8da12d6922325bbf79ede064300b8066b6f6f3e3d2c0182d234e246709ca3ffb25ef6821c00260aeaad2ca8139eb4434501c3bcf886527ea4a1a92f6865182da","ssdeep":"","tlshash":"bc311b6543d66ca88a8d32364bc4802079a7596d2e81b45839c0b7ab092b97d93cec52","first_seen":"2026-01-26T05:19:36.15863Z","last_seen":"2026-02-19T00:53:21.368284Z","times_seen":7,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/css/db6e2f4ccad1eeff.css","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/db6e2f4ccad1eeff.css HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-1851\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56GogsH9klB%2BphLjXDYPY3BkLSQPu0LVHd1J0kHstqBoq8DbIAhBAgELAFkjnVqUCUSS53z44sEtf7s9570Cszk7uOXWeZOS5kXUNKZVAGhn%2FKqWrk6F\"}]}\r\ncf-ray: 9c7403ffaa380b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5060)","md5":"9105fb26e28a3c367ad141d47dd47a8f","sha1":"10bee6b9ed16d430765e51be0242268792f294fe","sha256":"a4f4df9dc356bd3e3fceb336ecdc626ca79620e93317f7b9841a337c8845bf62","sha512":"c9d96b06b7c545f9eb11773262a583046dc4599638365653c9a28884c73b939b2532a3107283476497a53f99a16436b42016a6189a916d03e52fb8f0d778e0f8","ssdeep":"192:sHCqzOi1+WT6RkwwDe/9ERSItcHJLVoWD:Dk9SIM","tlshash":"71d12021f687cefbedc4c8d6fb64351aa60a2194ae7911c2ff43270379db160059ed29","first_seen":"2026-01-26T05:19:36.140061Z","last_seen":"2026-02-19T00:53:21.397001Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/318-503d5ba36d12c6a0.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/318-503d5ba36d12c6a0.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-1d59\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vrg%2F6M0Oe3EU7GwkqX8fkiOWvNJfBXo9tiQFKC%2B%2FiJq8IF%2FJVLAOkFz4ejhzHDyWFMX%2F%2FqZUT1c2vkQSGED8XqD2NDWRy%2BEj9vPyBmUfXNXtHmCPpz%2B%2B\"}]}\r\ncf-ray: 9c7403ffba440b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7513), with no line terminators","md5":"53669a2896ed311313f465fb59a474e1","sha1":"5a392cf387d181b8cf217d0764b30b81f7b3c252","sha256":"0a49ea9a0028b2e0b3b59a1c987aef51cc40032e6607909f31934d83d9946ed9","sha512":"8004ca157caddb4267a8622a8d627f2170035e0ceb1deacc760aa3b6142e31c8cb8c3c880839e6ae1d1865044784372cadbc61aa8e4fdaef99de550e47ca3eda","ssdeep":"96:7RuEoasY89GC75ZBesmgjY7z1Yd0n5GOIr1b8ubcrDBTuDBTV5z9GCB5feEo7uEM:1uw39wR87z1+jiubcrDsDC0j","tlshash":"00f1e8b676c6fd71024a8490443b410bf6252d77252f70c0a7aaccd9b69c9cd52d1f9f","first_seen":"2026-01-26T05:19:36.147631Z","last_seen":"2026-02-19T00:53:21.397721Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/icons/logo.png","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1861\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 11:11:06 GMT\r\netag: W/\"745-19c0e9980e8\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zM9wJstAkegZcl8b0XsMxfsxmxPspKTODW0yj9UP1zkK0BdzW3w%2FqIJcIWc%2Fi8CpSz8EnIDN%2BoQ%2F0Ck8mDBO78d6qPy%2F6Iljr3FB0MQ%2BeXDGuLDrzSt1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7403ff9a320b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 94, 8-bit/color RGBA, non-interlaced","md5":"6304f1ce92b995e7d401819939250124","sha1":"603eb996065d55fad456bf688ce7ee6671089997","sha256":"c5be2d03a97cdeb3d386d7df9c642a33199c11c791366053fc8ed7db9e33c72b","sha512":"8da12d6922325bbf79ede064300b8066b6f6f3e3d2c0182d234e246709ca3ffb25ef6821c00260aeaad2ca8139eb4434501c3bcf886527ea4a1a92f6865182da","ssdeep":"","tlshash":"bc311b6543d66ca88a8d32364bc4802079a7596d2e81b45839c0b7ab092b97d93cec52","first_seen":"2026-01-26T05:19:36.15863Z","last_seen":"2026-02-19T00:53:21.368284Z","times_seen":7,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/255-596a00806980443d.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/255-596a00806980443d.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-2a3d2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGoLUxy3auxp8ZJuAhZdA96Nk%2BGkUW2azsCtamZ%2FMtcsRLUkkpDDvawIHRotbR0%2FtddgRYHWCkAUiz4BCznPaLN2%2B6QLJdPpIRdlUzCmT2qvFbu%2Fskhi\"}]}\r\ncf-ray: 9c7403ffaa3d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173010,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb12f22d3ee41a590bd625af00a23d41","sha1":"2b7cf514eb3687ecbd99371012b0585477c2d1be","sha256":"0a743db7133b2a6d8bd8c230bb8b3160fbe76d47284fcbef956b5c80bef3ca1c","sha512":"6f1e0cbfd7143dff9f9cac780931fc89d97567e4343347273869f71f14d47237b5c9298bd35955375c22cd8bf926ccc5dc3a96550aa56b25528ca2690986f374","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXa7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNIrky/Sz:e79LmA+6y4r904Aj44RN0z/Sz","tlshash":"34f3dab636d0f8d107a780e5843b400af3291c3b146f74a0a3e6dcd975645dea1b3faa","first_seen":"2026-02-01T05:25:46.928781Z","last_seen":"2026-02-19T00:53:21.371537Z","times_seen":11,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/aaea2bcf-5976f34e031a4e16.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-4f750\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BE%2BaK%2FL7SUtMD1DuImQaHo4LksSaxhFiy%2BC8IOsAPlnJVf7PAb%2FOpt8EnMA6O3D5Mi8IEyjDTxqTDuGyNDtKJyD8dPkrZiFtfpauJsqZ29vE%2F3ZqI9h6\"}]}\r\ncf-ray: 9c7403ffba410b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/276-5d650fee70c6f457.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/276-5d650fee70c6f457.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-1a32b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jj8X826rxya2vUiPytPM%2FYedR4sGXdN56nL%2Bdn%2BdZfvaAFvGU9cyRXZK6duyT5TR6oV9fNjx%2BbnXIhzcv8ZNgBHfo39tQrdk6n%2Fvfr13v%2B3LNNzLMe%2B2\"}]}\r\ncf-ray: 9c7403ffba460b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107307,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63951), with no line terminators","md5":"e8165993a625fa7967085f230dac77a1","sha1":"0779c8665eb045ef87ad9985d9676f93040236aa","sha256":"605aebd610196611ef463afa2caa9dcc60e558f1547a82c1e1eb93d83504982c","sha512":"475ec98bd8f18e9e0b718aabe675d673e1e1f1288ff4ff9c02cf09b4e47849c1e0fecd01965cafd1809a03dbc3d29ecef4f03ae5e619db73865ecfdd194fb211","ssdeep":"1536:uDeZ8mH1pYWmyPvrb8Z+NE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxDa9x0MKy:uDyDP30+LfGWfDKb8JO","tlshash":"4da33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","first_seen":"2026-02-01T05:25:46.946332Z","last_seen":"2026-02-01T19:57:37.764046Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=test HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user6817.trustvirtual.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\nexpires: Sun, 01 Feb 2026 19:57:03 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 01 Feb 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75795\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203791,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4038)","md5":"6281b7b88bde00d79f7603e1f8663f1b","sha1":"9864384fa5200e263f807947def2720ee50a53a0","sha256":"c109bd61ddac1063928b79259dbb9758b6a4b4210f0f1ea7f16f44486ad6ff50","sha512":"5612948c3696cd41ce9cd907ac723d808f700686308d193c7f0cc2232a55a03f540b3da0bfb10849f9dc6edbfd79032e03c9947fdd3322c86e8441f9ad85e5ab","ssdeep":"3072:KCgQrYCuXY0yg3B43vH5zIlwFjWYD8Lgp8axaxXVw6ItqhMjARm60Nn:drUXgZjpD8M8lu6ItqSERmJ9","tlshash":"061439cdb7ca706683a36578507f000bb17a7992f84cc8d0e186d9d42e74aaa1277f7d","first_seen":"2026-02-01T19:57:37.766196Z","last_seen":"2026-02-01T19:57:37.766196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":167,"dns":1,"connect":21,"send":0,"wait":37,"receive":39,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/icons/banner.png","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/banner.png HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 3468539\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 11:13:59 GMT\r\netag: W/\"34ecfb-19c0e9c213b\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lP32BIyL2WZ0x0Mox%2FlzsLe16IN%2Bc4satp1%2BUU1wHXSzer8u6LMgP0ZKt9K9hLUFMNmtNlbVdGFP5S8pHiJ2R0lJcIesm0NmoMbbBhTPq5QrkeeK0oRF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7403ff9a340b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3468539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4944 x 2599, 8-bit/color RGBA, non-interlaced","md5":"4a82064404814d5d8b1b3bbb708c9d60","sha1":"fac76aefc86b7fc7a14fbbee1fbe007c17fe7587","sha256":"3a380eb4daecab344e6cbb847ae53f8db8d8cd019f1e01459150232a9b51d9c5","sha512":"38164ec0d1e3976bb8b63f8aa7db4bcf6e2fd38a0fee5aa50a0c904b2b2901571dcf9c305c3f8a59c07bfa503236eb3ad4135de23918821fb6092fe57e8d654d","ssdeep":"24576:hyVZH5vPTMItVPQLb8fl1Tz2czK8/hLJ7+9:hY5z+LAfbT928ZLp+9","tlshash":"e12523c4443ae5d9ec98d07a3bf75ecaea4d1561a0112f984146ec38bcd2b9f2d81ef1","first_seen":"2026-01-26T05:19:36.160081Z","last_seen":"2026-02-19T00:53:21.363627Z","times_seen":7,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/webpack-5cc1aea3788fe843.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/webpack-5cc1aea3788fe843.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400, immutable\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsSL%2BwXEKRNet7ZrfRfLlh%2B0oIcfzMpn%2BgxJMpo%2BP0bxIU4BrK6VSVwjpKo5NXVLBSNO4kCO3ucCCYdJxMZvXU7cUK0KfCeP5qTp2jdY83nYajCli18w\"}]}\r\ncf-ray: 9c7403ffaa3a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-07T09:45:16.347749Z","times_seen":547086,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/css/00e3e239df01efa7.css","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/00e3e239df01efa7.css HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-4a0a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BCk9C3drn81UXQYZMz9UV%2BNGgDbN2FX4F5QuNmS3ILlfJu3jcoU4iMgYJRx8D%2BAaYU5DPJBIcY9A5upo2ZZRFHgT%2B1am99vSTLvXhJZsOpw93pFCkUT\"}]}\r\ncf-ray: 9c7403ffaa390b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18954,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18954), with no line terminators","md5":"5a76f246103199e071803795e901c7fb","sha1":"121af2152bd04b7f41f43d3d6b6e1f9b37829fe2","sha256":"40545e05c6a88b70e47f25a3553e8206d08a3e4bb1e2a5a28d14dd7b69fbbf45","sha512":"6cc48a481abfa45b25f3302445a6d1114dda61a101f08e12f9d5637d4274433d33555746aa819df7603796327235d4471dac4bd88edfe67a088bf84a161162f4","ssdeep":"192:YwFn+8uz0/vyMizZjfSCNR62phDQaeTPH+4xUFuZX3rrdHFGq8QGmFUB7I3RAGFO:Yw81SyPgCoLVJGe5Fm","tlshash":"5282851239012238b22fdd96bdd29e9eb171f812d39b52f9e5566819cacf0db077170c","first_seen":"2026-01-26T05:19:36.161633Z","last_seen":"2026-02-19T00:53:21.393018Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:13:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c9259-2a3e0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1f0OF6C2lLYRGt8uuCzQBFsE3aHR%2F0l71iqJtX5seFIL2cw1o8l21%2BZIEn9KyRDHzm1oHCTKRnE2TC9cVfcWUWV6qCQkenUGWeQ2nN3IMkGx%2Bl%2B13EX\"}]}\r\ncf-ray: 9c7403ffaa3c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/342-796d8f4ab871a48b.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/342-796d8f4ab871a48b.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-ec31b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGMjcwBZ5u51Ijr%2BSngBezUlBnvnZAjpLnCg4Grycml6oRlcV6dYXNdGf4pRcWHWBsUzAhopy90TNrsc%2BfPImpEJXb%2B%2FrNUu%2BhuxlXXonILxgt1p0Wzf\"}]}\r\ncf-ray: 9c7403ffba430b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967451,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15fcca91143f2591b55c1075cadffa44","sha1":"f154ff11f42f644d680118675b3d2a6da07e85c2","sha256":"a679021ad5d7b7df3537c48ddeac32fc681c36ed51dcf1eaaf4c45c2b96d6d51","sha512":"c6e87a7fdff06f5a4e43958f8a550f92f97245a91927ac510d6ca37de4030b921da3332835ee31217e27bd2b225d67fc19e4bc3e5dd9908d8910877131f0363f","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+ShpRnlmqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5hpRNyty3VZCRJjVsB","tlshash":"a1253a897752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","first_seen":"2026-02-01T05:25:46.945496Z","last_seen":"2026-02-20T08:01:05.504977Z","times_seen":793,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user6817.trustvirtual.org/_next/static/chunks/63-5f43d783ec345b2e.js","fqdn":"user6817.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/63-5f43d783ec345b2e.js HTTP/1.1\r\nHost: user6817.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user6817.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 19:57:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 11:15:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Feb 2027 05:25:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 52316\r\ncf-cache-status: HIT\r\netag: W/\"697c92cc-51b3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyShnV5nte8upMb6eFIAf%2B%2FnpuSCAmbqN%2BiNOuk%2F34c7ZxAc%2Bm%2BmjoWhsJc4x6btnfE%2Fg87zzcEPOYJ5IZvQjMzM6sZ1MCZ18mXUa3MNNv95dKFlxQeD\"}]}\r\ncf-ray: 9c7403ffba450b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20614), with no line terminators","md5":"1f5a581ea29c4a937ed233d44b95b4ad","sha1":"fbfa2e4e65dc096a09846f6dbbbd29a74e5d4f0a","sha256":"10dd839b1f597f17376a40f92b86e4f52caaf72650c8e32a5c85b821924dcb1c","sha512":"7f377940682cff0684b2b6522e4cbd31256816e1b99ce6ddee08fa046ae95d7503526635383bce999dd435de8e62d150dfc72c465e295ce3a65e97b546666a0a","ssdeep":"384:t+P1dzYj7f5IALa4pYzicGqF1P72Ik7rlBQZ/7GJW:Oz+7B77iiAbcX367Gc","tlshash":"0592c6096b563732439a13c6345ea9e5a1ba4680135544fc8fedc02e07f6becc977acb","first_seen":"2026-01-26T05:19:36.175583Z","last_seen":"2026-02-19T00:53:21.386416Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"user6817.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"user6817.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user6817.trustvirtual.org/","date":"2026-02-01T19:57:03.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user6817.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102795\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T10:01:44.921413Z","times_seen":254274,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":237,"dns":3,"connect":23,"send":0,"wait":8,"receive":3,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}