{"report_id":"91f04644-234a-46d0-8660-6594b31dd8b7","version":6,"status":"done","tags":[],"date":"2026-02-14T15:22:26Z","url":{"schema":"https","addr":"trisigmarpc.live/","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trisigmarpc.live/","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"title":"RPC Configuration","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trisigmarpc.live/","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T15:22:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"trisigmarpc.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"trisigmarpc.live","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T00:27:22.017567Z","last_seen":"2026-02-13T00:27:22.017567Z","alert_count":3,"request_count":3,"received_data":6090845,"sent_data":1354,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"api.fontshare.com","ip":{"addr":"35.178.125.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-10-01","domain_rank":604295,"first_seen":"2021-03-02T20:36:57Z","last_seen":"2026-02-12T17:34:19.49311Z","alert_count":0,"request_count":1,"received_data":3619,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10906,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trisigmarpc.live/","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47cef218e0327b0239ce5d262d0c419d","sha1":"918662c7beb586bf6d88d48cd9027ab4be63a861","sha256":"156242a63112116c1db782ba14677419490629bb2a1f005239fb172fa54c9eb8","sha512":"1c565f5a77a2e3e37b4a9a2ee47523b724da672f82f2ad63e8274d7950b86b3739f0b05949e31e277892d3bda8b03c94753883b5b3d35b82a4f9059e1b45689d","ssdeep":"","tlshash":"8a113826122632653c8eb0ee59b6dc4d7a7f100be90960a0b59ed08d7b30b5544f76dc","size":991,"data":"","first_seen":"2023-03-09T10:24:33Z","last_seen":"2026-05-10T17:37:08.296833Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trisigmarpc.live/","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T15:22:03.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trisigmarpc.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 16:45:07 GMT","end":"Tue, 21 Apr 2026 16:45:06 GMT"},"fingerprint":{"sha1":"F3:45:07:F2:17:01:37:B6:94:6A:A7:12:F1:3E:15:E8:2D:65:C1:09","sha256":"42:4A:36:C6:61:FA:EB:A2:4E:2C:D6:E5:6F:FD:0B:4A:F7:BC:26:BF:FE:10:E2:8F:0B:89:0C:2E:74:00:F3:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trisigmarpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 15:22:04 GMT\r\netag: \"d734b8b376451ff0e4e40517145ad8f0\"\r\nlast-modified: Sat, 14 Feb 2026 15:22:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5btkp-1771082523592-09992d36475d\r\ncontent-length: 4332352\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6051714,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (22919)","md5":"418427c9ff895945b42d56dca2bb0199","sha1":"9316a3e3f9ed59c9e5e60cc4e46ff7dbfbfc5fce","sha256":"5ee48de2eab02aeb4c38720ccf52bb0c879226452adb39d9fe166944716f8195","sha512":"0cd55bed669a4d5cdf71a4c82e575eb7f8266aa28f847bc5210b2cc064589c58d9da5bdbb988e29ea173d895768e44b70472ed317f50938615e7133f0c767a06","ssdeep":"24576:rwFeMsrxS3cHY20605Gm6MuWN+kFShdlW6z8MKXZc6:XepcCbR","tlshash":"2f25f1b757237cc92e63692472ce2d901d285443865ded58becc09a9efcd250fe7ca88","first_seen":"2026-02-13T00:27:26.340848Z","last_seen":"2026-02-14T15:22:59.201879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1678,"timings":{"blocked":59,"dns":33,"connect":2,"send":0,"wait":11,"receive":1542,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"trisigmarpc.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trisigmarpc.live/style.css","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trisigmarpc.live/","date":"2026-02-14T15:22:04.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trisigmarpc.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 16:45:07 GMT","end":"Tue, 21 Apr 2026 16:45:06 GMT"},"fingerprint":{"sha1":"F3:45:07:F2:17:01:37:B6:94:6A:A7:12:F1:3E:15:E8:2D:65:C1:09","sha256":"42:4A:36:C6:61:FA:EB:A2:4E:2C:D6:E5:6F:FD:0B:4A:F7:BC:26:BF:FE:10:E2:8F:0B:89:0C:2E:74:00:F3:4A"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: trisigmarpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trisigmarpc.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 14 Feb 2026 15:22:04 GMT\r\netag: \"9e59313947a4ac5aa3e47edc82e612e7\"\r\nlast-modified: Sat, 14 Feb 2026 15:22:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f6gf5-1771082524603-e6bcb3baaebb\r\ncontent-length: 8310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":37648,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (37648), with no line terminators","md5":"04d49f94ed8f2aec8d0006e49d538937","sha1":"4c0b44df3af7bc06c41407172f644528cc55d131","sha256":"dcad49edc10afa276c23e07a5fc410d583d2b477ea69d27e99ddcd1dec383922","sha512":"a6348d26b16174ddd7a474b1652c14f2076ab4b5f90859e7fa0b07dd358778f6469c570bccebac56f35f61d3aeb7f4b7a5fc418ed2c077f45361f2e89575d61b","ssdeep":"768:oNN0T9Vz95JnjRyBQS1i41/RNN00tkb71:9Vz95JnQD/ltkbx","tlshash":"e8f2961e6a20103f6c6388e5e6d5fe9e611a70c4df3a95eba9862111dfc67e71c6320c","first_seen":"2024-02-22T09:37:41Z","last_seen":"2026-02-14T15:22:59.202522Z","times_seen":12,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"trisigmarpc.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=general-sans@200,300,500,600,700\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.125.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trisigmarpc.live/","date":"2026-02-14T15:22:04.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=general-sans@200,300,500,600,700\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trisigmarpc.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:22:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 2951\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJQmLD14D8fGOagSncES\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkZWM2NWZmOWItYmU0Ni00Nzk3LWJkMDItYWI3YTRhZmUxN2Yw.Hp__C-JeX7Qn4PQLfA4vDRq1PpzCg_Zp3JU0fX3Y2hc; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aa1902444c4b685d855dcbb400247f82","sha1":"53916f57e75157bae273027a74dac9660b8f93dc","sha256":"13b48c73d870fb2a69abf666b651f6134ef252c397a51ec0e6c98d82c8c2b0df","sha512":"b9f1e469ae95b5919f1cdef7be23a538570c0513a8f1627044f10e627eba5d94bb64ea5576304276759bbc55e4a34bea62915a27bc8953b5678acd1b827a33a8","ssdeep":"","tlshash":"4251c101a899791a68361c4e33df0f9b9d8d14632081f46f39de4b5dbe67d1113aab4c","first_seen":"2025-07-22T10:40:57.268452Z","last_seen":"2026-02-14T15:22:59.203514Z","times_seen":8,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":298,"dns":15,"connect":25,"send":0,"wait":239,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=fallback","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trisigmarpc.live/","date":"2026-02-14T15:22:04.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=fallback HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trisigmarpc.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 15:22:05 GMT\r\ndate: Sat, 14 Feb 2026 15:22:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a3be3c838cca0fd40e170cf763eabde4","sha1":"5c052112c8a67685160319d43af95fd5203434ae","sha256":"515abfb8cb99b4d7fbb4272218d2c782315026157d6cdf7325112dcdf8d526b0","sha512":"7c4c3a57eb7750108f14034b58c73aa82ec7d61fd6200fbb55e4dbe880e6ef7988347a86ddd6627d527955985ce11768948f9012ad894466f51f3dd9acc19ec1","ssdeep":"192:ANwFUO3VTxuBNT6HO3KwxpwNGXqO3nBxYTNBk1O30Gx7x:sWKRkUK/f","tlshash":"a8229c92002ba400ab931dc733cf7f3abece54896089d1a95ffd0d895cead66436475d","first_seen":"2025-09-11T15:42:38.265291Z","last_seen":"2026-08-07T05:53:46.541598Z","times_seen":842,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":382,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trisigmarpc.live/favicon.png","fqdn":"trisigmarpc.live","domain":"trisigmarpc.live","tld":"live"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trisigmarpc.live/","date":"2026-02-14T15:22:05.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trisigmarpc.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 16:45:07 GMT","end":"Tue, 21 Apr 2026 16:45:06 GMT"},"fingerprint":{"sha1":"F3:45:07:F2:17:01:37:B6:94:6A:A7:12:F1:3E:15:E8:2D:65:C1:09","sha256":"42:4A:36:C6:61:FA:EB:A2:4E:2C:D6:E5:6F:FD:0B:4A:F7:BC:26:BF:FE:10:E2:8F:0B:89:0C:2E:74:00:F3:4A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: trisigmarpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trisigmarpc.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 14 Feb 2026 15:22:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jrcdb-1771082525548-06d4af871594\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cafbf1db2898d445e925987009227ca8","sha1":"f3d4900ec8be827b766052e7b584a4c92b7bab1b","sha256":"411da186a11665ed4c214fa1ea787ca9b54f6c2583c1ac04d6a5ca6440b0caee","sha512":"bf1b5dcac09a053a3a413c5e2bec0906c25958fd04c9f570c6d82c265f0b2428db928587862485ac57ac5064ea4686326dfbfc79c0de6a50a71a4e9c16a7b50b","ssdeep":"","tlshash":"9fa0121d24c24c4873ca0431120201b550090223a959d21010c8264850016cdf344151","first_seen":"2026-02-14T15:22:27.810127Z","last_seen":"2026-02-14T15:22:27.810127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"trisigmarpc.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}