{"report_id":"bf697390-f8ee-4c43-9046-1cf52072a342","version":0,"status":"done","tags":[],"date":"2026-09-21T19:12:22Z","url":{"schema":"http","addr":"tervio.cc/","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":0,"asn":45102,"as":"Alibaba (US) Technology Co., Ltd.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tervio.cc/","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"title":"Pevsuki","dom":{"size":1336670,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54098)","md5":"10f066ec60ab1f01fa46b601eed5172a","sha1":"bf4798557deaa1d9dd6983a11276bb8e0ea54f25","sha256":"246aa8dd205dd078ba24dd8af4c709797448ba1135af423c291cc2af29b444ad","sha512":"24c62f77b82852ae8db2217dc4d64ac4a90c3f8bb75f2e472dca8bdb896c4a3baca9b196d75df30b6d144ee4b74c3a28ccb447c3636a8ef2cee27ec64411158a","ssdeep":"6144:q+Hb/0O/G5YIQYd0hxLlH8VUdeYHDs3LaIW3WeIi5qqFVrARUk+1R+Es2MYW3IK5:QRUs7rcg+Q","tlshash":"5355e7d1a39c13fce51f63f9c42134dc371d24bb36618868362e95ba97572e0ce8b8a5","dom_hash":"domhashf9a32a3b4e157f23641e6d221a7033ca","first_seen":"2026-09-21T19:12:45.08539Z","last_seen":"2026-09-21T19:12:45.08539Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tervio.cc/","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":0,"asn":45102,"as":"Alibaba (US) Technology Co., Ltd.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T19:12:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"symbol.clink-lists.com","ip":{"addr":"47.115.89.43","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2024-09-10","domain_rank":2945196,"first_seen":"2025-08-02T22:41:09.638391Z","last_seen":"2026-09-17T18:52:28.281303Z","alert_count":0,"request_count":2,"received_data":803,"sent_data":1142,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tervio.cc","ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2026-06-04","domain_rank":0,"first_seen":"2026-09-21T18:14:44.500606Z","last_seen":"2026-09-21T18:14:44.500606Z","alert_count":115,"request_count":23,"received_data":2328908,"sent_data":32159,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-20T23:34:05.890074Z","alert_count":0,"request_count":2,"received_data":22719,"sent_data":1176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":3,"received_data":41216,"sent_data":1628,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static-forms.clink-lists.com","ip":{"addr":"47.115.89.43","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2024-09-10","domain_rank":1868251,"first_seen":"2025-08-01T21:52:29.779327Z","last_seen":"2026-09-17T19:11:19.514103Z","alert_count":0,"request_count":2,"received_data":851,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"59b517704ce43f0f.ctxcollect.com","ip":{"addr":"47.238.126.244","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-11-03","domain_rank":0,"first_seen":"2025-11-05T09:08:31.963216Z","last_seen":"2026-09-20T01:29:24.174578Z","alert_count":0,"request_count":4,"received_data":2791,"sent_data":2140,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d39va5bdt61idd.cloudfront.net","ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-06-20T03:22:42.790222Z","last_seen":"2026-09-17T07:40:53.553019Z","alert_count":0,"request_count":6,"received_data":921668,"sent_data":3152,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn.statics-cdn-amz.com","ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-11-07","domain_rank":1794438,"first_seen":"2024-01-25T12:07:39Z","last_seen":"2026-09-17T19:11:18.710633Z","alert_count":0,"request_count":9,"received_data":251875,"sent_data":6022,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.112.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-16T00:38:23.516778Z","alert_count":0,"request_count":1,"received_data":32459,"sent_data":565,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-15T01:27:54.255531Z","alert_count":0,"request_count":1,"received_data":3557,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-21T17:55:09.249771Z","alert_count":0,"request_count":2,"received_data":292610,"sent_data":1196,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/cart-animate-shopyy.js?id=mswkbi8h","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b4dc2207469acc7874289ffdf9505b3","sha1":"bda722f772e83406104dfb5ff13536837c4f0844","sha256":"070e2b5768c417561ee9b7c4ba165d4cbfdad4a7e94937e3f3d30dbdaf477465","sha512":"6a1788fa67a5c81a2e186be782145d2746b32693205d16e3005c9b8bee725718ba213b7fbd5f6c28d39f1c779a093f1fe66ce3307d3520adde6e5bc0f005221c","ssdeep":"6144:ZTG02FfdsxCnEN2ykawp9kvgqaqa2eUsc1bYUEldJic3:Zq02FVsxht/aXanc3","tlshash":"8da43ceabb52b0a426f744bbc07b0525b238771b29058470b25afcc537686ca7127f7d","size":462874,"data":"","first_seen":"2026-09-19T11:14:32.917507Z","last_seen":"2026-09-21T19:12:45.097555Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/public.js?v=2c8e7fb4c2bb5aac7d7ef0c04e913a49092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2638861692bb435cdbb7200829b1b6f7","sha1":"67ef1ce8ee144d3579b1f37ca0937347c8e29124","sha256":"a0d59572bc4b2757120b03b596f0ddfd3baf514a31c76365736a826ccd880f3b","sha512":"e91a67d76ba0df968be546a0b9cb3e8b6e7e50745bd57d3b46896795a291211e4cfcd1239df4a8451f9b9c04c701e9a06ddc92a7dcedfb52eb2b4d43d4494c44","ssdeep":"6144:+Rx7Ob/iepp9GZ5wpjwk3ZRPUMIRbGG6o64u2lOYJI:+3866rwNxlOYq","tlshash":"e2b44bcdb2a1b06143e321a5406f5206b33b6859a80e4458f22dd8e67e7dd8d537bfbc","size":515683,"data":"","first_seen":"2026-09-21T09:51:14.307139Z","last_seen":"2026-09-21T19:12:45.09627Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/static-shopyy/js/cartAnimateCss.56205f3a.js","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec20cf4eb79955acb1e82e4c9af4ed53","sha1":"a906091883133dc36c064db095d8dffc0536f3af","sha256":"2ded63dec87847e5850fa81f071aa639e495d325cef838c7fae21d981ccf2b05","sha512":"dcf791269c10874f36b4ba8318e4bc2a73816d64e39c56bd477dea697b6cd7a4a57212c19aff291e9537829356950c9f43902af52f009e6ff5a9bf3c477e2f66","ssdeep":"","tlshash":"e1d0a923a4a2b8b83f3a08c089218920d8384862226475a76ea809159fa416e008c8b8","size":207,"data":"","first_seen":"2026-01-27T10:09:31.47147Z","last_seen":"2026-09-21T19:12:45.121228Z","times_seen":461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/countdown/229168/index.js?var=1785381963","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4321945f922c4dc293e41739deadf226","sha1":"f54aab37d5069d7b022842f9c01919833c2b026e","sha256":"4b98686b9c6318c7257faeefe9a35b0f856f4d353caed226beb43ffea3432727","sha512":"176560861a89d426fb997e18d9ed4aa500086abd5ceeb1c0eddf4e22a000b4d1cff151b0a0074a6c0ba0b1c587d2e6d68532dc16e0c489fe29a5402f46e422d4","ssdeep":"1536:Yn3TPj1HbtWCcWKpokd1YMtWrX7FCMEMmMOiawsV:wj1HMuKX1Y37ii0","tlshash":"f9533b84b1f2b07547bba724519f130bb37b6905f5068840952be5a2bcbcd87d067eac","size":63540,"data":"","first_seen":"2026-09-21T09:08:11.085787Z","last_seen":"2026-09-21T19:12:45.088056Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.b8OHV15W648.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrKm6UrWW_bP_uRDPzjMFn_hgeiQA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3feddf19ffc1311fd41c33ab6c5b470","sha1":"0209de8777c0059fd270d4b77040c1b3a4618724","sha256":"ced932dc0e4762bf76751783f76d487907abd3ae25242f74a89cb52622de35d2","sha512":"28216b3da471348fb5d97a74643846abd46619121f51185d8b76ecaa021184acaffbfe7a9bb9bc636e6ce3c862c7b86788b59de616856caf7b30e41dedf2a269","ssdeep":"3072:wRfiIm4KgqdIbB3KreB2kE045Pr2bMwnxDcWovJeunifNeyTtvVO1v+yd90:8uHrO54BwmvgE90","tlshash":"4b54d8dcb2a670a79363f4b5517f004ab13b68a5f8484d6cb288d8e26df4909417bf7c","size":291234,"data":"","first_seen":"2026-09-14T20:28:16.096002Z","last_seen":"2026-09-21T19:15:06.784743Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/googletranslate/229168/index.js?var=1785381940","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38921f8f2d47854ad60d41ade3c45a33","sha1":"12bc94edb28c1e43c3cdc608974b7dbe89cb8e83","sha256":"aac3c203507f3db5d670afdcdcc386f7b8d8f1dd8feaaeff1d3b658e29140a65","sha512":"0b50cb2a07767934657770a9842c676a0d709ddb77773f0e19197a726c61db701f24bac76b7910286cc0a17d252719f4961ba512a75a7077e7f4981243f0efac","ssdeep":"384:YjpjZDsUkjoH9olyLEMKkmC4oz8oi1+ZBi1GbsflK:CJsjob5KxC4Mm+ZI1GbsflK","tlshash":"1092e9c0a334baa900638114c3cf2286b219bd60a676cd74f636d89b4dedddf521fe59","size":21005,"data":"","first_seen":"2026-09-21T10:02:47.365676Z","last_seen":"2026-09-21T19:12:45.105083Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/trusttool/229168/index.js?var=1785382022","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e098c2b6627d8e9cc6a565dbc4d5e21d","sha1":"05a28799a038ac3e3ae71390848e95695d3e96bb","sha256":"6d848c88bbf1005682de98cd9aa1b51942bb75f44e728d86c4f41061b45004ae","sha512":"e04adb7a59100cbb62c2539016e5b9441a478b5fa9b8cda973944fd4efe1a5eafc7adbdce42d7ac2d585a8c7147cbac3c046a322210e7b45ac05286e9bfebf9b","ssdeep":"3072:ZmQV9I9Ls1K1C0VqljWaFy3QhcND500UyKBdWFkBruK+kBrSji:Q5CVYsjB2kBOkBoi","tlshash":"a1051af0f36c11fca90f4bfd8921686c332f30b779128478456db9b465636a8ca97ca5","size":842823,"data":"","first_seen":"2026-09-21T09:08:11.075963Z","last_seen":"2026-09-21T19:12:45.111233Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4575120241026f3ee156fbf088d2f357","sha1":"6c32838073ebb24ec2fc2948cd853ba6e41be7ad","sha256":"a6f51bd15388b218794b9ed39f9f0fb2c7cbe1bd198aa36c5de8a3e0c03ac429","sha512":"2996ef5119a6ef28aeea4a473ba1dd91ced4396595f383319c53e057840f58a0f3cbbece0f4295b651e075769cd98d3a17fe4e9dc282664dbcee787f608da732","ssdeep":"","tlshash":"a251029a98b6d0d6c4436c29dfef96b921440037a821ece57ddcd902ffb054ab60d5a4","size":2989,"data":"","first_seen":"2026-09-21T19:12:45.102733Z","last_seen":"2026-09-21T19:12:45.102733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/gtag.js?v=681978e82c48b74ca84c840010aa3bd9092212-2600226001","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bcf924d41a8f862d2ab07292547a7ef","sha1":"6f6d9a7314fbd83cd5520c3c545c671a5859c701","sha256":"98a3f508a4841ca8a622a3400f521d1dcf5bd4220725e5febc667daa1124f624","sha512":"aecd023358846ea684e57393cf798da2e26d76abefd1714135adbb3f488252ac4228090df98370ec34f277865c964b44e050ee90a311e7fa9538ea9c7147f0be","ssdeep":"384:ZPSnC25DpCi2eCdp+DlRAZYlUT2r8bJiSvBhAxJWjdj/zHqwoeY+bHtUQopmaYwB:IC25DR++DHA/5m2rZyA1kB","tlshash":"d0c20ab4f2727c31c8f52656521f7306b33b9624ae1e9053a93b9e781564e03d323bad","size":27544,"data":"","first_seen":"2026-09-18T20:51:52.473832Z","last_seen":"2026-09-21T19:12:45.095669Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/nishomee/nishomee_app.js?v=d191f8f24fd723d953b7c14770fb6daa092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49bdb735f27580fad549c2d272eda402","sha1":"3fba19b823b68b13039edb7b18d7fb27af8d3534","sha256":"f129ef5643fe1900cb470afa882ff3005f13bde621af04f0607b44aff6939a6a","sha512":"69fc59215e8cfd27e9adb27e008b8312cc3d057808ace64952edd8fe8634ce163134c8b073afde6a59ade006e0f6a61004e75690d83fae85f3fffbef4e77fb8b","ssdeep":"","tlshash":"b311ddcd759010fdc2b32495086f610c4677892a695768d4004d9a500f3ce9ea257f6f","size":1071,"data":"","first_seen":"2026-09-21T18:14:52.882288Z","last_seen":"2026-09-21T19:12:45.08963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/webpagebooster/229168/index.js?var=1785382040","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4cba0c4856b29c0fe92dbea9a5260f3","sha1":"07bb34951e4aedc850bd9f5a342da5e85bd6a2e7","sha256":"81aa727b60d0611fef010b65181a2772a92b5ea2de6fcd85b05a1e464c98810c","sha512":"6559a088c45a697c5c76d680cda5331ae863b259173d653fb7e6462655e71aeee091553c439ed4648d668758a5ca8d1b7733a6ea4b92e073db2fdc7aed87cf13","ssdeep":"768:pJm14E2dw/P2wtEmlxwc4E1Cg8CWElbK21OMzZbzXbqVcSzFbdw/P2wtEmlxwyYD:nm72dwWwt5v9fbKwmbdwWwt5VG","tlshash":"3e33ead8b2e6b06543ab7324515f1306f33b6c05f5568840e62bf8d26c7cd8ae127ead","size":50966,"data":"","first_seen":"2026-09-21T11:14:03.971199Z","last_seen":"2026-09-21T19:12:45.124061Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/carttrack-shopyy.js?id=4506","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42a0bd9f64e136b879cfe3b1954c5075","sha1":"60a4cd73639368f79af7bb4c0fe0700fa0a021e6","sha256":"7ea87bf2a236779b2ad2c0ae77d08679fb60cb9d49ae1b9db4da1b62360b1271","sha512":"c2f492d32e58ac77ec10ff50bd5ba58b5a7870a77cffde2f57e355064584bd8acfb77d687b3053aa48eb6d5f1c9e4e66c6ff7a257120f846855afd25a8291ff2","ssdeep":"1536:BTGPn5wQlZYIpp2DGZRAxvORPQDtwZrOJZztaIb3NfedECH1:8PnrXp2DGZRAhORCwoJZw6Mi4","tlshash":"2693818dfe96f0b852a37970812f520ab17b6b25b44e94c0d6a7d5c0ad3898f5037e3d","size":97373,"data":"","first_seen":"2026-09-17T18:52:33.302783Z","last_seen":"2026-09-21T19:12:45.128618Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/oneSymbol_20251211.min.js","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9b10470d75039c37b7668e89a28ee84","sha1":"7191ff00670f86d7480335bded76a25969fb9938","sha256":"5475c0147716e95fcc168721771fd6b4e4776bfb55710b52f5ee34996a672f60","sha512":"fd671973e7938f9215c00014c4b9a57f149d6feffd8b098f27c3e676427476baeb55e718c96159f8b625cdd5437294dff4d6f147e3dc6954e94c1e6db4972551","ssdeep":"","tlshash":"e781d99d39da286519d3b5f9bd3f3a0c20d02956bc14c4e7a71c6ec12f605ca2513b0c","size":4032,"data":"","first_seen":"2026-07-25T18:32:04.163337Z","last_seen":"2026-09-21T19:12:45.089065Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Theme] Common module loaded. Most features have been moved to separate modules.","filename":"https://tervio.cc/skins/default/public.js?v=2c8e7fb4c2bb5aac7d7ef0c04e913a49092212","line_number":4,"column_number":87858}]},"http":[{"url":{"schema":"https","addr":"symbol.clink-lists.com/cartx/oid","fqdn":"symbol.clink-lists.com","domain":"clink-lists.com","tld":"com"},"ip":{"addr":"47.115.89.43","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d39va5bdt61idd.cloudfront.net/onsite/index.html","date":"2026-09-21T19:10:05.665Z","timestamp":1790017805665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"symbol.clink-lists.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 23:24:05 GMT","end":"Sun, 08 Nov 2026 23:24:04 GMT"},"fingerprint":{"sha1":"9E:84:A6:A7:C2:58:02:9A:E5:BB:13:47:1E:69:08:A8:C7:F5:3B:EC","sha256":"A1:39:FE:D7:8B:7F:73:1D:AE:C9:76:B7:73:C9:7B:63:C7:57:8D:B5:C7:0F:0F:BC:AA:41:00:5B:79:DF:0E:31"}}},"request":{"raw":"OPTIONS /cartx/oid HTTP/1.1\r\nHost: symbol.clink-lists.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://d39va5bdt61idd.cloudfront.net/\r\nOrigin: https://d39va5bdt61idd.cloudfront.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 19:10:06 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":344,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T20:48:22.3472Z","times_seen":18590139,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":0,"dns":4,"connect":235,"send":0,"wait":232,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"59b517704ce43f0f.ctxcollect.com/cartxtrack","fqdn":"59b517704ce43f0f.ctxcollect.com","domain":"ctxcollect.com","tld":"com"},"ip":{"addr":"47.238.126.244","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:06.583Z","timestamp":1790017806583,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"59b517704ce43f0f.ctxcollect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 10:40:30 GMT","end":"Sat, 28 Nov 2026 10:40:29 GMT"},"fingerprint":{"sha1":"E0:0D:37:2B:F6:BC:74:E2:D4:8C:50:41:AB:82:F8:97:5A:E3:9A:77","sha256":"B8:AC:55:70:2C:88:BE:95:6C:73:38:D9:9C:A1:60:9B:72:0B:C1:2B:F9:A3:84:11:3B:60:EE:27:3E:D5:2D:AB"}}},"request":{"raw":"POST /cartxtrack HTTP/1.1\r\nHost: 59b517704ce43f0f.ctxcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 293\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":293,"data":"{\"uid\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"requestId\":\"08f00ca7-40d8-3989-ab75-b7d29f68f208\",\"timestamp\":1790017806578,\"eventType\":\"Site/Visit\",\"companyId\":4506,\"integrationId\":31,\"clientTimezone\":\"UTC\",\"cid\":null,\"customerId\":\"\",\"data\":{\"pathName\":\"https://tervio.cc/\",\"email\":\"\",\"phone\":\"\"}}"}},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.26.1\r\nDate: Mon, 21 Sep 2026 19:10:07 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tervio.cc\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Methods: POST, GET, PATCH, DELETE, PUT\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":723,"mime_type":"application/json","magic":"JSON text data","md5":"2931cb92447cdb791ea7fe9cb5a9035f","sha1":"81cf83907154eb0defb505d0e50bc36e54803cf9","sha256":"4ad782e15d023d0fca4cbf8193f85c47fe11ac22e7e9108fbb4a4dfafb7b3360","sha512":"6477131d857c263f8af829b0beacad2c8992eaa72de5cc1f530e31196a0b88d675ef321aeac994fb7055caba442665e07919f30e7ce3ab374ee2530c21a00e2a","ssdeep":"","tlshash":"55a0228032e00ef8af0330c0388c320800e83008ca00c03ccc8c220ccba00bbe082228","first_seen":"2026-09-21T19:12:45.087006Z","last_seen":"2026-09-21T19:12:45.087006Z","times_seen":1,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/countdown/229168/index.js?var=1785381963","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.638Z","timestamp":1790017804638,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-assets/countdown/229168/index.js?var=1785381963 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810CD892B132322FD42C\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 08:55:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14770252414478544042\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vBkzn11/utoDwhpYI6JXxQ==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: max-age=7200, private, max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63550,"size_decoded":18140,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63516), with no line terminators","md5":"4321945f922c4dc293e41739deadf226","sha1":"f54aab37d5069d7b022842f9c01919833c2b026e","sha256":"4b98686b9c6318c7257faeefe9a35b0f856f4d353caed226beb43ffea3432727","sha512":"176560861a89d426fb997e18d9ed4aa500086abd5ceeb1c0eddf4e22a000b4d1cff151b0a0074a6c0ba0b1c587d2e6d68532dc16e0c489fe29a5402f46e422d4","ssdeep":"1536:Yn3TPj1HbtWCcWKpokd1YMtWrX7FCMEMmMOiawsV:wj1HMuKX1Y37ii0","tlshash":"f9533b84b1f2b07547bba724519f130bb37b6905f5068840952be5a2bcbcd87d067eac","first_seen":"2026-09-21T09:08:11.085787Z","last_seen":"2026-09-21T19:12:45.088056Z","times_seen":5,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.623Z","timestamp":1790017805623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 20:17:08 GMT\r\nexpires: Thu, 16 Sep 2027 20:17:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 427977\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-21T19:15:06.59821Z","times_seen":74962,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/oneSymbol_20251211.min.js","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d39va5bdt61idd.cloudfront.net/onsite/index.html","date":"2026-09-21T19:10:05.634Z","timestamp":1790017805634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /oneSymbol_20251211.min.js HTTP/1.1\r\nHost: d39va5bdt61idd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://d39va5bdt61idd.cloudfront.net/onsite/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ndate: Mon, 21 Sep 2026 11:49:49 GMT\r\nserver: AmazonS3\r\nlast-modified: Mon, 21 Sep 2026 11:49:42 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f9b10470d75039c37b7668e89a28ee84\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: kS-X6lwrR2K_YZtdFwOrnw668M98O8xN-AnLhGJuk6h4EwuS3wuxTg==\r\nage: 26416\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4032,"size_decoded":2080,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (530)","md5":"f9b10470d75039c37b7668e89a28ee84","sha1":"7191ff00670f86d7480335bded76a25969fb9938","sha256":"5475c0147716e95fcc168721771fd6b4e4776bfb55710b52f5ee34996a672f60","sha512":"fd671973e7938f9215c00014c4b9a57f149d6feffd8b098f27c3e676427476baeb55e718c96159f8b625cdd5437294dff4d6f147e3dc6954e94c1e6db4972551","ssdeep":"","tlshash":"e781d99d39da286519d3b5f9bd3f3a0c20d02956bc14c4e7a71c6ec12f605ca2513b0c","first_seen":"2026-07-25T18:32:04.163337Z","last_seen":"2026-09-21T19:12:45.089065Z","times_seen":80,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/nishomee/nishomee_app.js?v=d191f8f24fd723d953b7c14770fb6daa092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.675Z","timestamp":1790017803675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/nishomee/nishomee_app.js?v=d191f8f24fd723d953b7c14770fb6daa092212 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:03 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810B0A8CC43831A6CD21\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 06:00:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 742830792090046346\r\nx-oss-storage-class: Standard\r\nContent-MD5: Sb23NfJ1gPrVScLScu2kAg==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1071,"size_decoded":1004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1012)","md5":"49bdb735f27580fad549c2d272eda402","sha1":"3fba19b823b68b13039edb7b18d7fb27af8d3534","sha256":"f129ef5643fe1900cb470afa882ff3005f13bde621af04f0607b44aff6939a6a","sha512":"69fc59215e8cfd27e9adb27e008b8312cc3d057808ace64952edd8fe8634ce163134c8b073afde6a59ade006e0f6a61004e75690d83fae85f3fffbef4e77fb8b","ssdeep":"","tlshash":"b311ddcd759010fdc2b32495086f610c4677892a695768d4004d9a500f3ce9ea257f6f","first_seen":"2026-09-21T18:14:52.882288Z","last_seen":"2026-09-21T19:12:45.08963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hind/v11/5aU69_a8oxmIdGl4BA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.594Z","timestamp":1790017804594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/hind/v11/5aU69_a8oxmIdGl4BA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:08:44 GMT\r\nexpires: Tue, 21 Sep 2027 17:08:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 10 Sep 2020 17:04:03 GMT\r\ncontent-type: font/woff2\r\nage: 7280\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16264,"size_decoded":17075,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16264, version 1.0","md5":"61e99a257f8899df3bab534a6aa0f9b2","sha1":"bc895894ebfb748518f9ddb9050560ed26aa1129","sha256":"d7a3280717b1f82f46bee459863720a03de43b16dc8097ba1b133440e5fe0edc","sha512":"dbfbd89c234c9fa45befd358310d13e1d09300c7ddf1f2cacaa3f3edc35676fbbef77a44175b1e4a8cf75ec02d4b01036f1354664513ea47084261fa04cc0a94","ssdeep":"384:sc9yRps+9EF5yzoV6SRIox5cwdUnO2hK81LgRbbQeo:scsUZ52YNhx5Z8O2PRB","tlshash":"7172c0b9b68c9a70d17693fc433850ee5f4c944eb0b5f0b0a292ef618dd53cb5825125","first_seen":"2023-05-21T22:12:48Z","last_seen":"2026-09-21T19:12:45.090319Z","times_seen":255,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":4,"connect":35,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/ec09635a3de88e9462345ecb5d7719eecff976f86282a602e9e5e04a5cd05603.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.702Z","timestamp":1790017804702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/ec09635a3de88e9462345ecb5d7719eecff976f86282a602e9e5e04a5cd05603.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AliyunOSS\r\ncontent-length: 15126\r\nx-oss-request-id: 6AB173E11F52473430D5A0B4\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 10274991456269178806\r\nx-oss-server-time: 109\r\nvia: 1.1 google\r\ndate: Mon, 21 Sep 2026 18:13:53 GMT\r\nlast-modified: Wed, 29 Jul 2026 07:48:42 GMT\r\netag: \"08618EF946EBA5089A44FC6063288AC4\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 3371\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15126,"size_decoded":15720,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e91679c592998e4eebf7fb385f9f07c4","sha1":"3ad4ebbb68354bbd4ca09a3e98706d1cf9cbb64c","sha256":"9d784402ba850e0e5e5324c4115b46390914f66252f79184afd30db204b43149","sha512":"f88d65bf49ee5a0d8f70514f953c29c6572bd62e91cc05236e1c7276f03b3a5f74c8a0e2d60ec04b2775a8ec29f67b0c1537702aadd78cde795083765ccd9b75","ssdeep":"384:GeWo6BNI72+Gqpq4ynUJfVNFvDX2pb7AO5Jjd5JTGF:Yo6BNIqYRrQnxJB5Je","tlshash":"8f62d0c22f087b95f3f48b3ab01b19849b74ed4981d181427dedadb0fe87bc41e58295","first_seen":"2026-08-11T18:04:32.104781Z","last_seen":"2026-09-21T19:12:45.090945Z","times_seen":16,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":51,"connect":14,"send":0,"wait":50,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"59b517704ce43f0f.ctxcollect.com/cartxtrack","fqdn":"59b517704ce43f0f.ctxcollect.com","domain":"ctxcollect.com","tld":"com"},"ip":{"addr":"47.238.126.244","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.530Z","timestamp":1790017805530,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"59b517704ce43f0f.ctxcollect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 10:40:30 GMT","end":"Sat, 28 Nov 2026 10:40:29 GMT"},"fingerprint":{"sha1":"E0:0D:37:2B:F6:BC:74:E2:D4:8C:50:41:AB:82:F8:97:5A:E3:9A:77","sha256":"B8:AC:55:70:2C:88:BE:95:6C:73:38:D9:9C:A1:60:9B:72:0B:C1:2B:F9:A3:84:11:3B:60:EE:27:3E:D5:2D:AB"}}},"request":{"raw":"OPTIONS /cartxtrack HTTP/1.1\r\nHost: 59b517704ce43f0f.ctxcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tervio.cc/\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.26.1\r\nDate: Mon, 21 Sep 2026 19:10:06 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tervio.cc\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Methods: POST, GET, PATCH, DELETE, PUT\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAllow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":673,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T20:48:22.3472Z","times_seen":18590139,"resource_available":true,"data":null}},"time_used":1495,"timings":{"blocked":-1,"dns":4,"connect":284,"send":0,"wait":353,"receive":0,"ssl":853},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.622Z","timestamp":1790017805622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 11854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-21T20:15:51.12254Z","times_seen":98279,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.112.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{1d4fdd53-7632-42a5-a4a8-83419a14ca45}?https://tervio.cc","date":"2026-09-21T19:10:05.661Z","timestamp":1790017805661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 21 Sep 2026 19:10:05 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CvoBCAESrAEBp2sxrk2vno9aQbVSH8Xkiu72Y2oee94qdD8xC0TALLCaqqRZS6HeH4xktODY_7eA_Ep1G-xXBLMGtSyr5ucqfbOQPfiENHaLRtjPaaUcvug5ED56h1MiqEJBIFmXAsDJKxyob_8mxHmab-Y0wRWZqiUfaT1sby_DLZNW7saiZl4E2MGgQ46ruHecckWaEu3_Imrupf3VR8zeHRRECM3QYjEVfGix7KwZuLbPKAEyRQEOK94RBWLS15bbfH3b6qROpzSdrj_zWx_b1BAbIFcynZBRO_Pov9cDXLGn1pyhkl8h95IBYeo-776k8m5Y5-BmEAh-CQ; expires=Tue, 23-Mar-2027 19:10:05 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Mon, 21 Sep 2026 19:10:05 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CvoBCAESrAEBp2sxrk2vno9aQbVSH8Xkiu72Y2oee94qdD8xC0TALLCaqqRZS6HeH4xktODY_7eA_Ep1G-xXBLMGtSyr5ucqfbOQPfiENHaLRtjPaaUcvug5ED56h1MiqEJBIFmXAsDJKxyob_8mxHmab-Y0wRWZqiUfaT1sby_DLZNW7saiZl4E2MGgQ46ruHecckWaEu3_Imrupf3VR8zeHRRECM3QYjEVfGix7KwZuLbPKAEyRQEOK94RBWLS15bbfH3b6qROpzSdrj_zWx_b1BAbIFcynZBRO_Pov9cDXLGn1pyhkl8h95IBYeo-776k8m5Y5-BmEAh-CQ","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-03-23T19:10:05Z","raw_expires":"Tue, 23-Mar-2027 19:10:05 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CvoBCAESrAEBp2sxrk2vno9aQbVSH8Xkiu72Y2oee94qdD8xC0TALLCaqqRZS6HeH4xktODY_7eA_Ep1G-xXBLMGtSyr5ucqfbOQPfiENHaLRtjPaaUcvug5ED56h1MiqEJBIFmXAsDJKxyob_8mxHmab-Y0wRWZqiUfaT1sby_DLZNW7saiZl4E2MGgQ46ruHecckWaEu3_Imrupf3VR8zeHRRECM3QYjEVfGix7KwZuLbPKAEyRQEOK94RBWLS15bbfH3b6qROpzSdrj_zWx_b1BAbIFcynZBRO_Pov9cDXLGn1pyhkl8h95IBYeo-776k8m5Y5-BmEAh-CQ; expires=Tue, 23-Mar-2027 19:10:05 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3612,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-21T19:54:32.853166Z","times_seen":28633,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":37,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/c1ff5f152fea8e3ea5cd445b9c608ad8df99790e649ca23e5799bdb2dc3e7ab0.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.701Z","timestamp":1790017804701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/c1ff5f152fea8e3ea5cd445b9c608ad8df99790e649ca23e5799bdb2dc3e7ab0.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: AliyunOSS\r\ncontent-length: 23522\r\nx-oss-request-id: 6AAE6E611F52473438E8E2B8\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 10228167220345535013\r\nx-oss-server-time: 225\r\nvia: 1.1 google\r\ndate: Sat, 19 Sep 2026 11:13:37 GMT\r\nage: 201388\r\nlast-modified: Wed, 29 Jul 2026 07:48:42 GMT\r\netag: \"AD366717B229F7A7FD1CD6D22A233D78\"\r\ncontent-type: image/webp\r\nvary: Origin\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":23522,"size_decoded":24098,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6d627c5f66f6787931d3bccedf31d5b","sha1":"966f4d657a61eb5f7074c7a8b706cea606334390","sha256":"e66c0e8f1f943c3ec8bdb22fe57dc4478250beb8e95b7d0ebcac0f0057a58b5b","sha512":"3beb58038697d355be124f1035867c26fc752e080713b4f43afbaf0b6e4e0def053db5c5d7a8b11cac9268366915def6febe6cc70e6ca3a85186eb82015092a2","ssdeep":"384:TWzGZs6JcPLALazGeoROcx0w3bdehavyZdNDCav/BFJDU9VHGMAohj+QarprfUzu:TWzGZsNPgazG/VysdAuyZdNd/BvDCxh8","tlshash":"0fb2d03aad64d6d8e077c03a28c23b66852d07f4af95829fe5e90781714e26371cdf38","first_seen":"2026-08-11T18:04:32.153901Z","last_seen":"2026-09-21T19:12:45.09284Z","times_seen":16,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":52,"connect":14,"send":0,"wait":18,"receive":7,"ssl":248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.304Z","timestamp":1790017805304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 23:17:39 GMT\r\nexpires: Fri, 17 Sep 2027 23:17:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330746\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-21T20:15:51.179949Z","times_seen":38755,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":18,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/cart.json?promoter=cartpop","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.392Z","timestamp":1790017805392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /cart.json?promoter=cartpop HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03; googtrans=%2Fauto%2Fen; googtrans=%2Fauto%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:05 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-trace-id: 340FD532-5449-9C82-FE2B-398DA9A197C0\r\nExecution-Time: 0.0216331482\r\nTrace_Id: 340FD532-5449-9C82-FE2B-398DA9A197C0\r\nSet-Cookie: utm_source=direct; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/\nutm_medium=default; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/\nutm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nutm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nutm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\norder_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/\n_bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; expires=Mon, 21-Sep-2026 19:40:05 GMT; Max-Age=1800; path=/\naxwrt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\ncurrency_code=NOK; path=/\nPHPSESSID=93bbdcb96d85e84841a58db6d688fa45; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"utm_source","value":"direct","quoted":false,"path":"/","expires":"2026-10-21T19:10:05Z","raw_expires":"Wed, 21-Oct-2026 19:10:05 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_source=direct; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/"},{"name":"utm_medium","value":"default","quoted":false,"path":"/","expires":"2026-10-21T19:10:05Z","raw_expires":"Wed, 21-Oct-2026 19:10:05 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_medium=default; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/"},{"name":"utm_term","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"utm_campaign","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"utm_content","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"order_utm_history","value":"%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D","quoted":false,"path":"/","expires":"2026-10-21T19:10:05Z","raw_expires":"Wed, 21-Oct-2026 19:10:05 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/"},{"name":"_bbiafh_ka","value":"7EF8722F-2667-BD89-DB3A-005E65D5BFA0","quoted":false,"path":"/","expires":"2026-09-21T19:40:05Z","raw_expires":"Mon, 21-Sep-2026 19:40:05 GMT","max_age":1800,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; expires=Mon, 21-Sep-2026 19:40:05 GMT; Max-Age=1800; path=/"},{"name":"axwrt","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"axwrt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"currency_code","value":"NOK","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"currency_code=NOK; path=/"},{"name":"PHPSESSID","value":"93bbdcb96d85e84841a58db6d688fa45","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":694,"size_decoded":1706,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b891d4e3b3acb08fa78ddcfe3ca76e7d","sha1":"30b78539b38b8a8787bb267a2ec11417f0cf451f","sha256":"9df3baaf4f7aea20c2fe8e014bc1c1e05deae50b62d7eb9b0b867bd51a1741cf","sha512":"ed22f1406003de71529a8663727af1a8289a94c6e48665465157b1cd0f21da9ac42ac57cbd511d540888d2b9e4f146a937e9056bd3eaafe61cee2a105e6e00b6","ssdeep":"","tlshash":"f4017820597805b5ebb09a14c04756914bfa120fbfd697b9cbfcc60c83e244f9702926","first_seen":"2026-09-21T19:12:45.094481Z","last_seen":"2026-09-21T19:12:45.094481Z","times_seen":1,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-forms.clink-lists.com/cartsee/form/out/load","fqdn":"static-forms.clink-lists.com","domain":"clink-lists.com","tld":"com"},"ip":{"addr":"47.115.89.43","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.397Z","timestamp":1790017805397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-forms.clink-lists.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 23:06:42 GMT","end":"Fri, 11 Dec 2026 23:06:41 GMT"},"fingerprint":{"sha1":"09:E6:47:29:24:02:AE:04:C6:BD:C1:02:0A:9F:77:74:A4:3C:BC:A4","sha256":"8E:85:D5:70:B2:B7:4E:E9:B5:4C:5D:AE:0C:41:B9:4F:A4:E3:5F:48:1F:2D:75:A7:65:27:05:EE:4B:63:4F:B7"}}},"request":{"raw":"OPTIONS /cartsee/form/out/load HTTP/1.1\r\nHost: static-forms.clink-lists.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tervio.cc/\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 19:10:06 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":375,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T20:48:22.3472Z","times_seen":18590139,"resource_available":true,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":7,"connect":259,"send":0,"wait":256,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/gtag.js?v=681978e82c48b74ca84c840010aa3bd9092212-2600226001","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.426Z","timestamp":1790017803426,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/default/gtag.js?v=681978e82c48b74ca84c840010aa3bd9092212-2600226001 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:03 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810BD8675631341BFA14\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 09:34:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 463699622746866609\r\nx-oss-storage-class: Standard\r\nContent-MD5: e8+STUGo+GLSqwcpJUen7w==\r\nx-oss-server-time: 5\r\nContent-Encoding: gzip\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27544,"size_decoded":8417,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27491)","md5":"7bcf924d41a8f862d2ab07292547a7ef","sha1":"6f6d9a7314fbd83cd5520c3c545c671a5859c701","sha256":"98a3f508a4841ca8a622a3400f521d1dcf5bd4220725e5febc667daa1124f624","sha512":"aecd023358846ea684e57393cf798da2e26d76abefd1714135adbb3f488252ac4228090df98370ec34f277865c964b44e050ee90a311e7fa9538ea9c7147f0be","ssdeep":"384:ZPSnC25DpCi2eCdp+DlRAZYlUT2r8bJiSvBhAxJWjdj/zHqwoeY+bHtUQopmaYwB:IC25DR++DHA/5m2rZyA1kB","tlshash":"d0c20ab4f2727c31c8f52656521f7306b33b9624ae1e9053a93b9e781564e03d323bad","first_seen":"2026-09-18T20:51:52.473832Z","last_seen":"2026-09-21T19:12:45.095669Z","times_seen":11,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":166,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/public.js?v=2c8e7fb4c2bb5aac7d7ef0c04e913a49092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.443Z","timestamp":1790017803443,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/default/public.js?v=2c8e7fb4c2bb5aac7d7ef0c04e913a49092212 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:03 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810B66B7253236418C1C\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 09:34:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6854456079223344650\r\nx-oss-storage-class: Standard\r\nContent-MD5: JjiGFpK7Q1zbtyAIKbG29w==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":515683,"size_decoded":152994,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"2638861692bb435cdbb7200829b1b6f7","sha1":"67ef1ce8ee144d3579b1f37ca0937347c8e29124","sha256":"a0d59572bc4b2757120b03b596f0ddfd3baf514a31c76365736a826ccd880f3b","sha512":"e91a67d76ba0df968be546a0b9cb3e8b6e7e50745bd57d3b46896795a291211e4cfcd1239df4a8451f9b9c04c701e9a06ddc92a7dcedfb52eb2b4d43d4494c44","ssdeep":"6144:+Rx7Ob/iepp9GZ5wpjwk3ZRPUMIRbGG6o64u2lOYJI:+3866rwNxlOYq","tlshash":"e2b44bcdb2a1b06143e321a5406f5206b33b6859a80e4458f22dd8e67e7dd8d537bfbc","first_seen":"2026-09-21T09:51:14.307139Z","last_seen":"2026-09-21T19:12:45.09627Z","times_seen":12,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":321,"dns":0,"connect":0,"send":0,"wait":355,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/cart-animate-shopyy.js?id=mswkbi8h","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.673Z","timestamp":1790017803673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /cart-animate-shopyy.js?id=mswkbi8h HTTP/1.1\r\nHost: d39va5bdt61idd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ndate: Mon, 21 Sep 2026 11:49:50 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 18 Sep 2026 07:57:14 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"3b4dc2207469acc7874289ffdf9505b3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: I43QxoXfiMLChHMHtunIXcYJcs-d7xUSIxQUZzIDhr0iN3JErPtXng==\r\nage: 26415\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":462874,"size_decoded":128243,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"3b4dc2207469acc7874289ffdf9505b3","sha1":"bda722f772e83406104dfb5ff13536837c4f0844","sha256":"070e2b5768c417561ee9b7c4ba165d4cbfdad4a7e94937e3f3d30dbdaf477465","sha512":"6a1788fa67a5c81a2e186be782145d2746b32693205d16e3005c9b8bee725718ba213b7fbd5f6c28d39f1c779a093f1fe66ce3307d3520adde6e5bc0f005221c","ssdeep":"6144:ZTG02FfdsxCnEN2ykawp9kvgqaqa2eUsc1bYUEldJic3:Zq02FVsxht/aXanc3","tlshash":"8da43ceabb52b0a426f744bbc07b0525b238771b29058470b25afcc537686ca7127f7d","first_seen":"2026-09-19T11:14:32.917507Z","last_seen":"2026-09-21T19:12:45.097555Z","times_seen":5,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":28,"connect":8,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/homeapi/collect?store_id=229168","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.692Z","timestamp":1790017803692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"POST /homeapi/collect?store_id=229168 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://tervio.cc/\r\nContent-Length: 716\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":716,"data":"{\"hit_type_name\":\"index_index\",\"hit_type_label\":\"\",\"hit_type\":\"page_view\",\"theme_dir\":\"nishomee\",\"pv_id\":\"667709D5-5D18-E7D2-9E92-B606EDF116F0\",\"oemsaas_global_visit_id\":\"D8AD3D45-EEC4-88A8-44C6-E58643259BBF\",\"landing_page\":\"aHR0cHM6Ly90ZXJ2aW8uY2Mv\",\"oemsaas_global_visit_session\":\"6DD6E677-E86A-1B98-CE2B-E2A6970E9899\",\"store_id\":229168,\"document_location_url\":\"https%3A%2F%2Ftervio.cc%2F\",\"document_location_title\":\"Pevsuki\",\"meta_keywords\":\"Pevsuki\",\"prev_url\":\"\",\"vid\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"rnd\":0.3004321902964817,\"shop_client_timezone\":\"Etc/UTC\",\"shop_client_broswer_language\":\"en-US\",\"shop_client_screen_size\":\"1280X1024\",\"shop_client_viewport_size\":\"1280X1024\",\"data_source\":\"\",\"data_from\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\ntrace_id: D7CA75BF-F50A-D0C9-FF3B-7CCE66759BBF\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":214,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0f4c669c5d08c1688789c694f0660e4b","sha1":"d79604defbd1c13174bde73c5482ff00a5506926","sha256":"faaa899914ac23e30fe978ac2e2c51b53fbd62e6d1c170429d8ffe9f4cf66f3e","sha512":"30a9ec0715645432aafedcf263a4644451f1e3baf3aae45610ab6e5105b2f6e5860b90fff957357fd68e9a7ab615dbb6e1c35b8673b0d295c2685f94cd151014","ssdeep":"","tlshash":"886000000f00000003c0c30c000c000003c000300000000003c0c000003c0000cc0000","first_seen":"2026-09-21T19:12:45.098179Z","last_seen":"2026-09-21T19:12:45.098179Z","times_seen":1,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":0,"connect":165,"send":0,"wait":174,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/1d2e0616948c112bddcda3672990e35f19df34cf7f09726de13b729a44badb1a.png?x-oss-process=image/resize,m_lfit,h_2560/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.704Z","timestamp":1790017804704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/1d2e0616948c112bddcda3672990e35f19df34cf7f09726de13b729a44badb1a.png?x-oss-process=image/resize,m_lfit,h_2560/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AliyunOSS\r\ncontent-length: 81410\r\nx-oss-request-id: 6A9264AD8F28BD3231734C4A\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 10916692806239266524\r\nx-oss-server-time: 226\r\nvia: 1.1 google\r\ndate: Sat, 29 Aug 2026 04:48:45 GMT\r\nlast-modified: Mon, 06 Jul 2026 03:16:19 GMT\r\netag: \"2458451C652560036E5DBC185D283EC1\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 2038879\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":81410,"size_decoded":82007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1942x809, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f4b30b50a0efda68e75264e5af55c3b","sha1":"28bbf6a4338b1c9403e8298beabaa4fe5d2283f1","sha256":"4a81897888253320cfa725aa088decfc6e79de21f39eb795273574c8efc188fa","sha512":"65960054498b2c5d0b2f7d748ccb310c6ad2933fe59811b55af318723a92dd093b1d676cd9196bbc96026c5679e26d3d471c334c24e44b110c3c0b136520d466","ssdeep":"1536:GIzjA105pzNs6Vex5DfQxB8sYdoIeLJbmeGsDDUJcKK5nBrK7Fv1V0tRq2q2B5:7j1HzKwWDoKeFyeGsnUar9Kx/CRqUB5","tlshash":"ab83022a5e5eb68498c201b67e4942c2099c24ecf6cac796de381447c31cb8ecf9f55e","first_seen":"2026-06-25T09:08:34.424987Z","last_seen":"2026-09-21T19:12:45.099309Z","times_seen":25,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":49,"connect":12,"send":0,"wait":24,"receive":22,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"59b517704ce43f0f.ctxcollect.com/cartxtrack","fqdn":"59b517704ce43f0f.ctxcollect.com","domain":"ctxcollect.com","tld":"com"},"ip":{"addr":"47.238.126.244","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.527Z","timestamp":1790017805527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"59b517704ce43f0f.ctxcollect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 10:40:30 GMT","end":"Sat, 28 Nov 2026 10:40:29 GMT"},"fingerprint":{"sha1":"E0:0D:37:2B:F6:BC:74:E2:D4:8C:50:41:AB:82:F8:97:5A:E3:9A:77","sha256":"B8:AC:55:70:2C:88:BE:95:6C:73:38:D9:9C:A1:60:9B:72:0B:C1:2B:F9:A3:84:11:3B:60:EE:27:3E:D5:2D:AB"}}},"request":{"raw":"POST /cartxtrack HTTP/1.1\r\nHost: 59b517704ce43f0f.ctxcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 293\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":293,"data":"{\"uid\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"requestId\":\"92e4729e-2662-1e0b-978e-622c131f0dd7\",\"timestamp\":1790017805524,\"eventType\":\"Site/Visit\",\"companyId\":4506,\"integrationId\":31,\"clientTimezone\":\"UTC\",\"cid\":null,\"customerId\":\"\",\"data\":{\"pathName\":\"https://tervio.cc/\",\"email\":\"\",\"phone\":\"\"}}"}},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.26.1\r\nDate: Mon, 21 Sep 2026 19:10:07 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tervio.cc\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Methods: POST, GET, PATCH, DELETE, PUT\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":722,"mime_type":"application/json","magic":"JSON text data","md5":"9e8aee37ecea8528443903ca3bc5245c","sha1":"33ce27b003c74e28e4c2eb60a25e560e5cbeba95","sha256":"3e6a6f4f46edba7bdcbb968f1aed8439eecb43b1f69c4b690088f21e65331736","sha512":"ffcd3396cf911716ef2a0aa0e6b1203e08ebc3a923af57b8a06eea7064d20b6d88c81e090e9c841d790ca3b5aa309db6ab3f86b4f046490e2e08f0112f79af5b","ssdeep":"","tlshash":"dda0220008e02fe8af0330c03c0c222800c8a000ca00c0bccc0ca00ccb8002aa282220","first_seen":"2025-10-18T18:32:19.260254Z","last_seen":"2026-09-21T19:12:45.099984Z","times_seen":3,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/homeapi/facebook","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.707Z","timestamp":1790017803707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"POST /homeapi/facebook HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 520\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":520,"data":"{\"visitor_id\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"country_code\":\"NO\",\"event_name\":\"PageView\",\"event_id\":\"1790017803695.9027681.7188267\",\"event_source_url\":\"https://tervio.cc/\",\"action_source\":\"website\",\"user_data\":{\"fbcode\":\"\",\"client_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"fbc\":\"\",\"fbp\":\"fb.1.1790017802870.887408168801980603\",\"em\":\"\",\"ph\":\"\",\"country\":\"9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59\"},\"custom_data\":{\"event_category\":\"index\"}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: application/json\r\nContent-Length: 86\r\nConnection: keep-alive\r\ntrace-id: AB453599-6E05-8976-542B-E1CB888B698D\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86,"size_decoded":281,"mime_type":"application/json","magic":"JSON text data","md5":"8a6f049cb8d3afb5b61832697eb9c4be","sha1":"58acc89b34c5feaf676148ec8de7fb80ef93a7a5","sha256":"364c50e9ea8fb419d1bfc8107ea6c7dc6d5b8b42de7ab9509ce9f5fc2648caed","sha512":"e759ca9e539949a66f59bad5cbb7e181229ffab7ee0e0c48e96c28d8381b8e10878a7aec3904e0d7722d4f0d257185a10f3bdb3fcd29a9cbb0a552553033dbfc","ssdeep":"","tlshash":"cfa01247005c6d428c82304b0828874020c520068908032085483a185b04013ffc4420","first_seen":"2026-09-21T19:12:45.101617Z","last_seen":"2026-09-21T19:12:45.101617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":735,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.028Z","timestamp":1790017805028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 21 Sep 2026 19:10:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2989,"size_decoded":1580,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1824)","md5":"4575120241026f3ee156fbf088d2f357","sha1":"6c32838073ebb24ec2fc2948cd853ba6e41be7ad","sha256":"a6f51bd15388b218794b9ed39f9f0fb2c7cbe1bd198aa36c5de8a3e0c03ac429","sha512":"2996ef5119a6ef28aeea4a473ba1dd91ced4396595f383319c53e057840f58a0f3cbbece0f4295b651e075769cd98d3a17fe4e9dc282664dbcee787f608da732","ssdeep":"","tlshash":"a251029a98b6d0d6c4436c29dfef96b921440037a821ece57ddcd902ffb054ab60d5a4","first_seen":"2026-09-21T19:12:45.102733Z","last_seen":"2026-09-21T19:12:45.102733Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":8,"connect":16,"send":0,"wait":44,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-api/trusttool/229168/config?route=index/index","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.183Z","timestamp":1790017805183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-api/trusttool/229168/config?route=index/index HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03; googtrans=%2Fauto%2Fen; googtrans=%2Fauto%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:05 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-app-id: 74\r\nx-trace-id: 8051FD27-D747-0D94-E7BA-69C9097C7D85\r\nshop-domain: stanley.amzshoppy.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 1800\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Request-Headers: *\r\nAccess-Control-Expose-Headers: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4180,"size_decoded":1813,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"091f885f9f7f924286604bf7e57d6409","sha1":"a11be28b4a79871dfa4d830c39b037898d58f18d","sha256":"7234bb8f89e30e9b904bff9bc65c4194daf9d79461f7c895099171ec764b075d","sha512":"3b76dba8acb86bcae31468e8d8f35d3e7f2c66a5ee4a95322269ae43045cdc46c8f928edb63e93f22fd34658f450736ae2c5254fbfc40d80f5999690b212680d","ssdeep":"96:XXVwowPwkwMwcwuwY5k5TKpvpGlTvWx2t/QV1/N:7Sx2dQVlN","tlshash":"3281f21eb7284ebcda8509dd649b79acca36316e35f61ee970392cbc219c8c9511b133","first_seen":"2026-09-21T19:12:45.103785Z","last_seen":"2026-09-21T19:12:45.103785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:15.658Z","timestamp":1790017815658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://tervio.cc/\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://tervio.cc\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:10:15 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":517,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T20:48:22.3472Z","times_seen":18590139,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":37,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/googletranslate/229168/index.js?var=1785381940","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.636Z","timestamp":1790017804636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-assets/googletranslate/229168/index.js?var=1785381940 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB16594B0166131333FB3FA\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 08:55:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3254725167241792697\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OJIfjy1HhUrWDUGt48RaMw==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: max-age=7200, private, max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21005,"size_decoded":8476,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20765), with no line terminators","md5":"38921f8f2d47854ad60d41ade3c45a33","sha1":"12bc94edb28c1e43c3cdc608974b7dbe89cb8e83","sha256":"aac3c203507f3db5d670afdcdcc386f7b8d8f1dd8feaaeff1d3b658e29140a65","sha512":"0b50cb2a07767934657770a9842c676a0d709ddb77773f0e19197a726c61db701f24bac76b7910286cc0a17d252719f4961ba512a75a7077e7f4981243f0efac","ssdeep":"384:YjpjZDsUkjoH9olyLEMKkmC4oz8oi1+ZBi1GbsflK:CJsjob5KxC4Mm+ZI1GbsflK","tlshash":"1092e9c0a334baa900638114c3cf2286b219bd60a676cd74f636d89b4dedddf521fe59","first_seen":"2026-09-21T10:02:47.365676Z","last_seen":"2026-09-21T19:12:45.105083Z","times_seen":4,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/favicon.ico","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.181Z","timestamp":1790017805181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03; googtrans=%2Fauto%2Fen; googtrans=%2Fauto%2Fen\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-21T20:48:14.890848Z","times_seen":561550,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"symbol.clink-lists.com/cartx/oid","fqdn":"symbol.clink-lists.com","domain":"clink-lists.com","tld":"com"},"ip":{"addr":"47.115.89.43","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d39va5bdt61idd.cloudfront.net/onsite/index.html","date":"2026-09-21T19:10:05.664Z","timestamp":1790017805664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"symbol.clink-lists.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 23:24:05 GMT","end":"Sun, 08 Nov 2026 23:24:04 GMT"},"fingerprint":{"sha1":"9E:84:A6:A7:C2:58:02:9A:E5:BB:13:47:1E:69:08:A8:C7:F5:3B:EC","sha256":"A1:39:FE:D7:8B:7F:73:1D:AE:C9:76:B7:73:C9:7B:63:C7:57:8D:B5:C7:0F:0F:BC:AA:41:00:5B:79:DF:0E:31"}}},"request":{"raw":"POST /cartx/oid HTTP/1.1\r\nHost: symbol.clink-lists.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 12\r\nOrigin: https://d39va5bdt61idd.cloudfront.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://d39va5bdt61idd.cloudfront.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"{\"oneId\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 19:10:06 GMT\r\ncontent-type: application/json\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: *\r\nx-trace-id: e5f0b98dcefd4543b88a37a6538df9e6.211.17900178064654676\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76,"size_decoded":479,"mime_type":"application/json","magic":"JSON text data","md5":"f19be906a0c0b0213123e69811b880e4","sha1":"7347a9573a8d64c0051ea664d9586f6beafe8d39","sha256":"3e4ab26bceeb899fa038523fe5192cd9eb8e21b39e111299222ba56a94754949","sha512":"1d6f357982bfe9a792a16b1dc8e5586fe8e360327bf6cc2fe609c5636c9f6c7d5091e462cadd9944c7fae2e5d66b441564adae847a31f127366d128982c56340","ssdeep":"","tlshash":"fda024403d371cc45f0d144c340d331c10f451c0cc030410dcdc110ccf0c434d141114","first_seen":"2026-09-21T19:12:45.107223Z","last_seen":"2026-09-21T19:12:45.107223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/homeapi/collect?store_id=229168","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:06.168Z","timestamp":1790017806168,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"POST /homeapi/collect?store_id=229168 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://tervio.cc/\r\nContent-Length: 1220\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03; googtrans=%2Fauto%2Fen; googtrans=%2Fauto%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1220,"data":"{\"hit_type_name\":\"timing\",\"hit_type_action\":\"index_index\",\"hit_type_category\":\"index\",\"hit_type_label\":\"\",\"hit_type_id\":\"\",\"redirect_time\":0,\"dns_lookup_time\":149,\"tcp_time\":498,\"dom_parse_time\":1338,\"dom_content_load_time\":20,\"dom_proccessing_time\":2748,\"dom_resource_time\":1410,\"app_cache_time\":11,\"response_time\":0,\"request_time\":165,\"load_event_time\":0,\"execution_time\":85.7460499,\"ttfb_time\":844,\"ttsr_time\":2596,\"ttdc_time\":3879,\"ttfl_time\":3879,\"unload_time\":0,\"unload_event_time\":0,\"navigation_type\":\"NAVIGATENEXT\",\"navigation_redirect_count\":0,\"hit_type\":\"performance\",\"theme_dir\":\"nishomee\",\"pv_id\":\"667709D5-5D18-E7D2-9E92-B606EDF116F0\",\"oemsaas_global_visit_id\":\"D8AD3D45-EEC4-88A8-44C6-E58643259BBF\",\"landing_page\":\"aHR0cHM6Ly90ZXJ2aW8uY2Mv\",\"oemsaas_global_visit_session\":\"6DD6E677-E86A-1B98-CE2B-E2A6970E9899\",\"store_id\":229168,\"document_location_url\":\"https%3A%2F%2Ftervio.cc%2F\",\"document_location_title\":\"Pevsuki\",\"meta_keywords\":\"Pevsuki\",\"prev_url\":\"\",\"vid\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"rnd\":0.9711554029981417,\"shop_client_timezone\":\"Etc/UTC\",\"shop_client_broswer_language\":\"en-US\",\"shop_client_screen_size\":\"1280X1024\",\"shop_client_viewport_size\":\"1280X1024\",\"data_source\":\"\",\"data_from\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:06 GMT\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\ntrace_id: 0E9E1003-4761-297C-5D32-888D5F35596F\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":214,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8c41b72649add66f97908fec04dd0fc3","sha1":"80b5939ccc963dfbfb44abaaa33d6d91f25602c6","sha256":"1e5c98c1a61b6725601673511251a6f32d7e9bb63bb35dfdda314354b2028324","sha512":"a9acb2e2cbf39258821695d06ef9fbf8f58bb26f2848bdc5403efda2dc4e8be4e25251aa585f72d9a9f82924d9d433d4d82a78271d68c0939da3c304f739691e","ssdeep":"","tlshash":"e86000003f00000003c0c30c000c000003c000330c03000003c0c000003c0000cc0000","first_seen":"2026-09-21T19:12:45.108554Z","last_seen":"2026-09-21T19:12:45.108554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T19:10:02.114Z","timestamp":1790017802114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-trace-id: 667709D5-5D18-E7D2-9E92-B606EDF116F0\r\nExecution-Time: 0.0857460499\r\nTrace_Id: 667709D5-5D18-E7D2-9E92-B606EDF116F0\r\nSet-Cookie: _fbp=fb.1.1790017802870.887408168801980603; expires=Sun, 20-Dec-2026 19:10:02 GMT; Max-Age=7776000; path=/; domain=tervio.cc\n_bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; expires=Thu, 18-Sep-2036 19:10:02 GMT; Max-Age=315360000; path=/\n_bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; expires=Thu, 18-Sep-2036 19:10:02 GMT; Max-Age=315360000; path=/\n_bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; expires=Tue, 22-Sep-2026 19:10:02 GMT; Max-Age=86400; path=/\nutm_source=direct; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/\nutm_medium=default; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/\nutm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nutm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nutm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\norder_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/\nlanding_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; expires=Tue, 21-Sep-2027 19:10:02 GMT; Max-Age=31536000; path=/\n_bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; expires=Mon, 21-Sep-2026 19:40:02 GMT; Max-Age=1800; path=/\nfirst_http_referer=null; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/\nfirst_visit_time=1790017802; expires=Thu, 18-Sep-2036 19:10:02 GMT; Max-Age=315360000; path=/\naxwrt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\ncurrency_code=NOK; path=/\nPHPSESSID=93bbdcb96d85e84841a58db6d688fa45; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"_fbp","value":"fb.1.1790017802870.887408168801980603","quoted":false,"path":"/","domain":"tervio.cc","expires":"2026-12-20T19:10:02Z","raw_expires":"Sun, 20-Dec-2026 19:10:02 GMT","max_age":7776000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_fbp=fb.1.1790017802870.887408168801980603; expires=Sun, 20-Dec-2026 19:10:02 GMT; Max-Age=7776000; path=/; domain=tervio.cc"},{"name":"_bbiafh_vid","value":"D8AD3D45-EEC4-88A8-44C6-E58643259BBF","quoted":false,"path":"/","expires":"2036-09-18T19:10:02Z","raw_expires":"Thu, 18-Sep-2036 19:10:02 GMT","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; expires=Thu, 18-Sep-2036 19:10:02 GMT; Max-Age=315360000; path=/"},{"name":"_bbiafh_cvid","value":"9EE198AF-28CC-C81B-8D4D-865056F8EE13","quoted":false,"path":"/","expires":"2036-09-18T19:10:02Z","raw_expires":"Thu, 18-Sep-2036 19:10:02 GMT","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; expires=Thu, 18-Sep-2036 19:10:02 GMT; Max-Age=315360000; path=/"},{"name":"_bbiafh_vs","value":"6DD6E677-E86A-1B98-CE2B-E2A6970E9899","quoted":false,"path":"/","expires":"2026-09-22T19:10:02Z","raw_expires":"Tue, 22-Sep-2026 19:10:02 GMT","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; expires=Tue, 22-Sep-2026 19:10:02 GMT; Max-Age=86400; path=/"},{"name":"utm_source","value":"direct","quoted":false,"path":"/","expires":"2026-10-21T19:10:02Z","raw_expires":"Wed, 21-Oct-2026 19:10:02 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_source=direct; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/"},{"name":"utm_medium","value":"default","quoted":false,"path":"/","expires":"2026-10-21T19:10:02Z","raw_expires":"Wed, 21-Oct-2026 19:10:02 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_medium=default; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/"},{"name":"utm_term","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"utm_campaign","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"utm_content","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"order_utm_history","value":"%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D","quoted":false,"path":"/","expires":"2026-10-21T19:10:02Z","raw_expires":"Wed, 21-Oct-2026 19:10:02 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/"},{"name":"landing_page","value":"aHR0cHM6Ly90ZXJ2aW8uY2Mv","quoted":false,"path":"/","expires":"2027-09-21T19:10:02Z","raw_expires":"Tue, 21-Sep-2027 19:10:02 GMT","max_age":31536000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; expires=Tue, 21-Sep-2027 19:10:02 GMT; Max-Age=31536000; path=/"},{"name":"_bbiafh_ka","value":"7EF8722F-2667-BD89-DB3A-005E65D5BFA0","quoted":false,"path":"/","expires":"2026-09-21T19:40:02Z","raw_expires":"Mon, 21-Sep-2026 19:40:02 GMT","max_age":1800,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; expires=Mon, 21-Sep-2026 19:40:02 GMT; Max-Age=1800; path=/"},{"name":"first_http_referer","value":"null","quoted":false,"path":"/","expires":"2026-10-21T19:10:02Z","raw_expires":"Wed, 21-Oct-2026 19:10:02 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"first_http_referer=null; expires=Wed, 21-Oct-2026 19:10:02 GMT; Max-Age=2592000; path=/"},{"name":"first_visit_time","value":"1790017802","quoted":false,"path":"/","expires":"2036-09-18T19:10:02Z","raw_expires":"Thu, 18-Sep-2036 19:10:02 GMT","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"first_visit_time=1790017802; expires=Thu, 18-Sep-2036 19:10:02 GMT; Max-Age=315360000; path=/"},{"name":"axwrt","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"axwrt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"currency_code","value":"NOK","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"currency_code=NOK; path=/"},{"name":"PHPSESSID","value":"93bbdcb96d85e84841a58db6d688fa45","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":559569,"size_decoded":112440,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54172)","md5":"7bbbebfb565e3d05c68a3a641f210007","sha1":"32c3f798eab599d91676a842379d743e3e23ee39","sha256":"d9a696319188f00962a248d36a65239ae55dd1135f78775d5cd76b2abc34a024","sha512":"f67d50d18136f5663b6b61aa222a4b3161610fccbe087594b84c0a0cbf74d97c9e70e3576a1029e0e5b68d87ba03357c9f73922f31d69120a7913fdfdaffb460","ssdeep":"6144:G+Hb/0O/G5YIQYd0hxLlH8VUdeYHDs3LaIW3WeIi5qqFVrARUk+1R+Es2MYg3IbD:kRUsvP+F","tlshash":"02c475c362dc2751e23b71f5c06575cc6a10a98f22704c98372f86abcb5f5e16e8b1b9","first_seen":"2026-09-21T19:12:45.109827Z","last_seen":"2026-09-21T19:12:45.109827Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":148,"connect":165,"send":0,"wait":328,"receive":335,"ssl":334},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/trusttool/229168/index.js?var=1785382022","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.640Z","timestamp":1790017804640,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-assets/trusttool/229168/index.js?var=1785382022 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB173E00586AC3234BEE62C\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 08:55:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12246544687862046758\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4JjCtmJ9jpzGpWXbxNXiHQ==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: max-age=7200, private, max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":842823,"size_decoded":275194,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e098c2b6627d8e9cc6a565dbc4d5e21d","sha1":"05a28799a038ac3e3ae71390848e95695d3e96bb","sha256":"6d848c88bbf1005682de98cd9aa1b51942bb75f44e728d86c4f41061b45004ae","sha512":"e04adb7a59100cbb62c2539016e5b9441a478b5fa9b8cda973944fd4efe1a5eafc7adbdce42d7ac2d585a8c7147cbac3c046a322210e7b45ac05286e9bfebf9b","ssdeep":"3072:ZmQV9I9Ls1K1C0VqljWaFy3QhcND500UyKBdWFkBruK+kBrSji:Q5CVYsjB2kBOkBoi","tlshash":"a1051af0f36c11fca90f4bfd8921686c332f30b779128478456db9b465636a8ca97ca5","first_seen":"2026-09-21T09:08:11.075963Z","last_seen":"2026-09-21T19:12:45.111233Z","times_seen":5,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/24c4b7d08e9c0b4bc86b143ea936b9b38d3bb099e67b60c9245b8f0c2c87ae70.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.699Z","timestamp":1790017804699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/24c4b7d08e9c0b4bc86b143ea936b9b38d3bb099e67b60c9245b8f0c2c87ae70.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AliyunOSS\r\ncontent-length: 30750\r\nx-oss-request-id: 6AB173E1B6DE1D3038DCE449\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 3642273923668289051\r\nx-oss-server-time: 135\r\nvia: 1.1 google\r\ndate: Mon, 21 Sep 2026 18:13:53 GMT\r\nlast-modified: Wed, 29 Jul 2026 07:48:42 GMT\r\netag: \"37AFC8F5838F738D4089D6D34A643EE5\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 3371\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":30750,"size_decoded":31343,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9402166b33e3673f3f2cffb5c44717cd","sha1":"ce6f2c0a9ff3590a04fe4febf82bcf56eb50ab4c","sha256":"51e784815a998b19014138b6fc9c5ebcffb6b55fdd495631ac28d9ce6ac68c95","sha512":"1f3d1f646f5f4866fca8c57f031cd9eacdfb1553418345cc08d3664904284071e4d692b81067ee774bba9c8abebbdac37ceee09b849ed54dadde7bd93e6daa32","ssdeep":"768:9c3zmfQYRV7JS4uM3AqPwJ5FsPu3UuRsUU+5:9gybRFJSBM3AkU5FsmkUXF","tlshash":"cdd2e1ae35e9882efffaa0764780d58913407fd337d52d6ea52e03243529692b424bc8","first_seen":"2026-08-29T04:49:38.971932Z","last_seen":"2026-09-21T19:12:45.111857Z","times_seen":15,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":54,"connect":15,"send":0,"wait":50,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/5538b90ae9fbe460865b0204405cdac52c60747863214b9974814b6f798fa357.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.711Z","timestamp":1790017804711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/5538b90ae9fbe460865b0204405cdac52c60747863214b9974814b6f798fa357.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AliyunOSS\r\ncontent-length: 19410\r\nx-oss-request-id: 6A9F19C4342C483333EA0EF2\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 16076097898615573956\r\nx-oss-server-time: 123\r\nvia: 1.1 google\r\ndate: Mon, 07 Sep 2026 20:08:36 GMT\r\nlast-modified: Wed, 29 Jul 2026 07:48:42 GMT\r\netag: \"B60A8399EDFF12343377CAFB945462C7\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 1206088\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":19410,"size_decoded":20007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52de2fe4191a7119b57ed4038ad8882d","sha1":"6b17c36dfc29aa8010811b1bc017bb9644d0e284","sha256":"f1acce41133cbd1a2e7bcc81ee1cbaf97ecaad158aff296056f6369f93aa9acf","sha512":"587d38a973672020916e2f04bff5c2d6badfe194b2e05edc26b9287bfb0484202dde2f6830ccc7434203e180296192844184291a7633cb40beb30e3b1d2a4799","ssdeep":"384:8saeW9ZypbgEiVmSoASJ+cSJODWPtxfCibEw13/nN:Kz98JTiHYlK2WPEOV","tlshash":"0192df27313d1f21f5c1a63e6417ed1b284639bf1aaad8945ee5b330a9d7f802062818","first_seen":"2026-08-29T04:49:39.038784Z","last_seen":"2026-09-21T19:12:45.112473Z","times_seen":15,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/static-shopyy/css/cartAnimateCss.bbb237c4.chunk.css","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.357Z","timestamp":1790017805357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /static-shopyy/css/cartAnimateCss.bbb237c4.chunk.css HTTP/1.1\r\nHost: d39va5bdt61idd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: br\r\ndate: Mon, 21 Sep 2026 11:49:52 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 18 Sep 2026 07:57:16 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"cf58cec1e12e7a4563bbb76ee5658a5b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: gPL4xoROkvbx9sf7ap54OfjQ49p3vA7bKEUJxSMmLwy4sTljZs78HQ==\r\nage: 26413\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":178973,"size_decoded":16927,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"cf58cec1e12e7a4563bbb76ee5658a5b","sha1":"025eedae81767b2881c295f43ab0ebd64e1603ac","sha256":"84a0d4427e2b244e0722c179060cdba421d89a30d1c001653d04c9e71f3eeb0d","sha512":"361ba8105a2d35050831e658aae23aa690333283546996cc6a8ff27e4acea2f94b289f35ac665c228bfa8b14b3618bd57464d47cfafc03e173b48c7af37f1a49","ssdeep":"768:FLOSqmqxPC5moQXsqHqYly3VJcOMvRsWxDvh4bjVcKRnECiwYkPdRidk1LC2ZYRu:FhcoLnyrygoUTBy","tlshash":"e004ac66521223f8516e4a2a708852ff6924f320bd52aabeb631f13f4fdf7d5021719c","first_seen":"2026-09-19T11:14:32.916397Z","last_seen":"2026-09-21T19:12:45.114106Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"59b517704ce43f0f.ctxcollect.com/cartxtrack","fqdn":"59b517704ce43f0f.ctxcollect.com","domain":"ctxcollect.com","tld":"com"},"ip":{"addr":"47.238.126.244","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:06.584Z","timestamp":1790017806584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"59b517704ce43f0f.ctxcollect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 10:40:30 GMT","end":"Sat, 28 Nov 2026 10:40:29 GMT"},"fingerprint":{"sha1":"E0:0D:37:2B:F6:BC:74:E2:D4:8C:50:41:AB:82:F8:97:5A:E3:9A:77","sha256":"B8:AC:55:70:2C:88:BE:95:6C:73:38:D9:9C:A1:60:9B:72:0B:C1:2B:F9:A3:84:11:3B:60:EE:27:3E:D5:2D:AB"}}},"request":{"raw":"OPTIONS /cartxtrack HTTP/1.1\r\nHost: 59b517704ce43f0f.ctxcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tervio.cc/\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.26.1\r\nDate: Mon, 21 Sep 2026 19:10:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tervio.cc\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Methods: POST, GET, PATCH, DELETE, PUT\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAllow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":673,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T20:48:22.3472Z","times_seen":18590139,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/nishomee/nishomee_theme.css?v=b5d7b27fc73a002fdd76310cfbdb3ac5092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.448Z","timestamp":1790017803448,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/nishomee/nishomee_theme.css?v=b5d7b27fc73a002fdd76310cfbdb3ac5092212 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:03 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810B2994B939376DBB2A\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 06:00:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11562145373914942628\r\nx-oss-storage-class: Standard\r\nContent-MD5: euf88mRjJuSdDfUzvTZrDQ==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28583,"size_decoded":6097,"mime_type":"text/css","magic":"ASCII text, with very long lines (28583), with no line terminators","md5":"7ae7fcf2646326e49d0df533bd366b0d","sha1":"d6098484f0415553d8b03f9016bc8b0bfbd04669","sha256":"e8fe37f26bdf823ccf84a8cc458f836967318df0925ba4a9252fd0e841538e0f","sha512":"b374af06d06a739128ff0d68e94c17a1cb3e222c5916aec534c8fba47e8d5a162a2a8f650ad96d704bf2486368313b18ebd7fe2f6887ccf45e6d743d4586f220","ssdeep":"384:1E2x5q9XEOXbezVfQAQcmbQH6OC8KvmJyX25pZXikkSBV5BV7uuWMb0v6wLeF6:22x0mOXbezVYbbvIBZQeF6","tlshash":"2ed2c996d9367236543b5821f5c876ec3175a012de430aebb318862ecac77e35371b2d","first_seen":"2026-09-21T18:14:52.872371Z","last_seen":"2026-09-21T19:12:45.114679Z","times_seen":2,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":169,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-api/webpagebooster/229168/front/config","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.993Z","timestamp":1790017804993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-api/webpagebooster/229168/front/config HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:05 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-app-id: 183\r\nx-trace-id: F62C4A8C-692F-4C8A-9EB1-F34296E96E83\r\nshop-domain: stanley.amzshoppy.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 1800\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Request-Headers: *\r\nAccess-Control-Expose-Headers: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135,"size_decoded":702,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2f83365f4f773795971a44c4a0a7e8e6","sha1":"7caabd4f480c908565637c4411a270f44d5295ce","sha256":"f3271cbdf8ad7357ba5c320ebfb1d300bc0420c70c8361e70c3d3753a1cd1c45","sha512":"87f5ca440589acd3b5deb95e7b0aa52f435111830b58c12b93c8f65dfc4497abbeeee4d164c5b912f97f105afd76a4e6bda91ceba5c0f073bc773677c3badd07","ssdeep":"","tlshash":"86c02b1084588ec154c0a0884c045d4266ac5001fc004324860c4930521c83c73cd012","first_seen":"2026-09-21T19:12:45.115509Z","last_seen":"2026-09-21T19:12:45.115509Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.b8OHV15W648.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrKm6UrWW_bP_uRDPzjMFn_hgeiQA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.305Z","timestamp":1790017805305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.b8OHV15W648.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrKm6UrWW_bP_uRDPzjMFn_hgeiQA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 101318\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:51:32 GMT\r\nexpires: Tue, 21 Sep 2027 17:51:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 4713\r\nlast-modified: Fri, 11 Sep 2026 21:32:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":291234,"size_decoded":102177,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"d3feddf19ffc1311fd41c33ab6c5b470","sha1":"0209de8777c0059fd270d4b77040c1b3a4618724","sha256":"ced932dc0e4762bf76751783f76d487907abd3ae25242f74a89cb52622de35d2","sha512":"28216b3da471348fb5d97a74643846abd46619121f51185d8b76ecaa021184acaffbfe7a9bb9bc636e6ce3c862c7b86788b59de616856caf7b30e41dedf2a269","ssdeep":"3072:wRfiIm4KgqdIbB3KreB2kE045Pr2bMwnxDcWovJeunifNeyTtvVO1v+yd90:8uHrO54BwmvgE90","tlshash":"4b54d8dcb2a670a79363f4b5517f004ab13b68a5f8484d6cb288d8e26df4909417bf7c","first_seen":"2026-09-14T20:28:16.096002Z","last_seen":"2026-09-21T19:15:06.784743Z","times_seen":517,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":6,"connect":18,"send":0,"wait":17,"receive":37,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/static-shopyy/css/arco.4a5ec323.chunk.css","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.356Z","timestamp":1790017805356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /static-shopyy/css/arco.4a5ec323.chunk.css HTTP/1.1\r\nHost: d39va5bdt61idd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: br\r\ndate: Mon, 21 Sep 2026 11:49:52 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 18 Sep 2026 07:57:16 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"3e8d8a5846e886c3b392e3cbdade7be3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: J1GeFK3gIW_Su2PXsrzfNmoHA7nPjz9L9CbCJShd1HLGx810t1BBwQ==\r\nage: 26413\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":272269,"size_decoded":24866,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3e8d8a5846e886c3b392e3cbdade7be3","sha1":"6235b706472fccdc08eb9f028e69f5f97d7143f2","sha256":"f80873b9b82ee9dba11fa77c4459189dc1844bacb559919e76b2114f5d3589f1","sha512":"32defa1f994f394094a6f61d4e2dff99c6de7067809fe570a4f5e4fb7e35ae9b77c786106f3fb20dafc8bff4e76bb80472b5e568552b61d960a65c2a796031ac","ssdeep":"6144:7HbQrTAqx6XZh6up1+3uPG5sVxRj/dsdPL1:7NhBAL1","tlshash":"9144df166e642176192b893b7a88bb9939053471fc628f5ef3639c144bceff60533827","first_seen":"2026-01-28T16:27:56.592446Z","last_seen":"2026-09-21T19:12:45.117248Z","times_seen":579,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/dist/front/assets/5ca3440d2ad22ff34b0c.woff2","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.421Z","timestamp":1790017805421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /dist/front/assets/5ca3440d2ad22ff34b0c.woff2 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03; googtrans=%2Fauto%2Fen; googtrans=%2Fauto%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:05 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3672\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810D71809B35339567F1\r\nVary: Origin\r\nETag: \"E60CE16A8779F648F793520F3B39D391\"\r\nLast-Modified: Mon, 21 Sep 2026 08:55:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8404660285287436718\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5gzhaod59kj3k1IPOznTkQ==\r\nx-oss-server-time: 1\r\nCache-Control: private, max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3672,"size_decoded":4284,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 3672, version 1.0","md5":"e60ce16a8779f648f793520f3b39d391","sha1":"b6d30faf3caa62eb2adfab06de67ac9d8741f422","sha256":"9be807033d7d59a652cf81be7cadf8f986d4e7dda4d51e57b8587b70c671d24e","sha512":"8cbcd9971e424ea358114eab5fb54159fbea554bb65cf995e55d09ebe6d2825d3fdf2ddf8ab203e5d5e1ba6931e91d795317a05b115b02ff6ed6566979b2a4f7","ssdeep":"","tlshash":"e0715d8e2149b691e64bbd3f73313bd010556152c43a7f94f0f476b18ec6a404e56c5a","first_seen":"2025-06-30T13:33:20.381661Z","last_seen":"2026-09-21T19:12:45.117832Z","times_seen":708,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/cart.json?promoter=cartrack","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.528Z","timestamp":1790017805528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /cart.json?promoter=cartrack HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03; googtrans=%2Fauto%2Fen; googtrans=%2Fauto%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:05 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-trace-id: BD7877DF-637B-31EC-C93D-83789C2943C3\r\nExecution-Time: 0.0233278275\r\nTrace_Id: BD7877DF-637B-31EC-C93D-83789C2943C3\r\nSet-Cookie: utm_source=direct; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/\nutm_medium=default; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/\nutm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nutm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nutm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\norder_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/\n_bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; expires=Mon, 21-Sep-2026 19:40:05 GMT; Max-Age=1800; path=/\naxwrt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\ncurrency_code=NOK; path=/\nPHPSESSID=93bbdcb96d85e84841a58db6d688fa45; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"utm_source","value":"direct","quoted":false,"path":"/","expires":"2026-10-21T19:10:05Z","raw_expires":"Wed, 21-Oct-2026 19:10:05 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_source=direct; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/"},{"name":"utm_medium","value":"default","quoted":false,"path":"/","expires":"2026-10-21T19:10:05Z","raw_expires":"Wed, 21-Oct-2026 19:10:05 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_medium=default; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/"},{"name":"utm_term","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"utm_campaign","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"utm_content","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"order_utm_history","value":"%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D","quoted":false,"path":"/","expires":"2026-10-21T19:10:05Z","raw_expires":"Wed, 21-Oct-2026 19:10:05 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; expires=Wed, 21-Oct-2026 19:10:05 GMT; Max-Age=2592000; path=/"},{"name":"_bbiafh_ka","value":"7EF8722F-2667-BD89-DB3A-005E65D5BFA0","quoted":false,"path":"/","expires":"2026-09-21T19:40:05Z","raw_expires":"Mon, 21-Sep-2026 19:40:05 GMT","max_age":1800,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; expires=Mon, 21-Sep-2026 19:40:05 GMT; Max-Age=1800; path=/"},{"name":"axwrt","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"axwrt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"currency_code","value":"NOK","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"currency_code=NOK; path=/"},{"name":"PHPSESSID","value":"93bbdcb96d85e84841a58db6d688fa45","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":694,"size_decoded":1706,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b891d4e3b3acb08fa78ddcfe3ca76e7d","sha1":"30b78539b38b8a8787bb267a2ec11417f0cf451f","sha256":"9df3baaf4f7aea20c2fe8e014bc1c1e05deae50b62d7eb9b0b867bd51a1741cf","sha512":"ed22f1406003de71529a8663727af1a8289a94c6e48665465157b1cd0f21da9ac42ac57cbd511d540888d2b9e4f146a937e9056bd3eaafe61cee2a105e6e00b6","ssdeep":"","tlshash":"f4017820597805b5ebb09a14c04756914bfa120fbfd697b9cbfcc60c83e244f9702926","first_seen":"2026-09-21T19:12:45.094481Z","last_seen":"2026-09-21T19:12:45.094481Z","times_seen":1,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/onsite/index.html","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.533Z","timestamp":1790017805533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /onsite/index.html HTTP/1.1\r\nHost: d39va5bdt61idd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-length: 217\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 11:49:48 GMT\r\nserver: AmazonS3\r\nlast-modified: Sat, 27 Jun 2026 11:39:19 GMT\r\netag: \"13f65243d8384fe463af620d1facc976\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: Ew3fjhDEhVTp2QxMq0qQ7ia--Jxp5YDi0FERwfd1GUNitGfrVTd5Wg==\r\nage: 26417\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":217,"size_decoded":723,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"13f65243d8384fe463af620d1facc976","sha1":"4a4b634a6d02300ac8274a1b03e67a4c481423b6","sha256":"c6df63093c0ace7916b3885a4e77d0e744060edc5870212c8eeca04ea3aee31d","sha512":"bb3065b56aaeec8ae6ccce69ce205c0baeef65308858d8f6d13ce19e7dd1df4e3bf6d95b7203add09f56b6973101aca0bfe7b15c35515dbe58862eb9a4e330e6","ssdeep":"","tlshash":"6cd0228ecc69aa00b1005a830ec2f1490882d2db69d1c84935db64129fa63d698837a8","first_seen":"2025-12-11T09:23:23.081825Z","last_seen":"2026-09-21T19:12:45.1184Z","times_seen":519,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.681Z","timestamp":1790017803681,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/default/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541092212 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 6857\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810C9741E7313272361F\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"51BA92483A4282450A82BD1E58A7B541\"\r\nLast-Modified: Mon, 21 Sep 2026 09:34:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12169997832694763196\r\nx-oss-storage-class: Standard\r\nContent-MD5: UbqSSDpCgkUKgr0eWKe1QQ==\r\nx-oss-server-time: 1\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6857,"size_decoded":7374,"mime_type":"image/png","magic":"PNG image data, 1020 x 1020, 8-bit/color RGB, non-interlaced","md5":"51ba92483a4282450a82bd1e58a7b541","sha1":"0a9c0f2bdd7f801733f8c07e7f8d41e172701263","sha256":"900803e3916a6a75d3c2e39f033ec970387de83a5b91385030e620fe7623d6ff","sha512":"ee48fe06e10217246e9781e68418e97d31cc179cdb8baf13034768e1e87cf8b537bc676944865d80b877efeab744b4777d432a995aa4c6e2d2acc6da3865e367","ssdeep":"48:Lh2/6rB4knA9WIcvjzS/c0SsyNcyox3oyzz1HA6y3SIHANv1:d2SCknmWI8K/oilHbxIHot","tlshash":"ade165489c464c8c13b9aac974c4213fdfde0accb6309f55a986b506695fe7bc458f43","first_seen":"2023-05-07T17:49:17Z","last_seen":"2026-09-21T19:12:45.118981Z","times_seen":3609,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":761,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/30f5d44c309088bd6281a8000354aa884755e5f12bdaee58563e4cf482eaa645.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.708Z","timestamp":1790017804708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/30f5d44c309088bd6281a8000354aa884755e5f12bdaee58563e4cf482eaa645.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AliyunOSS\r\ncontent-length: 26630\r\nx-oss-request-id: 6AA593EEF488A5353758CE4D\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 17049519837492592621\r\nx-oss-server-time: 121\r\nvia: 1.1 google\r\ndate: Sat, 12 Sep 2026 18:03:26 GMT\r\nage: 781598\r\nlast-modified: Wed, 29 Jul 2026 07:48:36 GMT\r\netag: \"053FDBEF103E34C243DE2519BA88D342\"\r\ncontent-type: image/webp\r\nvary: Origin\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":26630,"size_decoded":27226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"426e26bcae785389050017fa2b6df12d","sha1":"20a4bd8e0ee7684c4f38559b0f844eb520aef3c4","sha256":"d61a61cf0cd7a557c6446b2b5221249bb923d40b99e7505b0efb9fab0c39dca2","sha512":"603b1df9418171d14f19e622c0473a89009f3ff7d2398d534a0c6c307500d34f67f187f26af146868cbafaabcd1d48e4da1485a0926cc333078435fed483180f","ssdeep":"384:fjSXLBBXWwYR5vELy7HZOtb3Mq+LtltZFlfWK89JbmZpKAkYXFWMJYr0q2E:bUqhlOl36BjDRG9BgpLhF+gNE","tlshash":"c8c2e1a98e9013b6ca3ed3b67bd124552083324deaffd51223d65692af0f3715db0b60","first_seen":"2026-08-11T18:04:32.189305Z","last_seen":"2026-09-21T19:12:45.119535Z","times_seen":16,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-api/googletranslate/229168/front/config","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.841Z","timestamp":1790017804841,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-api/googletranslate/229168/front/config HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-app-id: 90\r\nx-trace-id: A364D22B-FCE7-D425-822C-76FDAA07B363\r\nshop-domain: stanley.amzshoppy.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 1800\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Request-Headers: *\r\nAccess-Control-Expose-Headers: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":734,"size_decoded":979,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"917653dc2bc9c19a4ee5ad174a966cb9","sha1":"891cddc9f1ab244f375d92ae7c2ed303dc5b73a8","sha256":"39369e825a2defd161bb8c4367918bdafb265d554c2c9c9583891ae8e4d035c1","sha512":"b94b0ac285fd6e1b887e5bd45336b2bfb518e6dbca56a1cf23a9e70582b07d4ff6039b6d39ff45157a948e0b9968380238f7a2ab5f127026512fa11f4bf544a1","ssdeep":"","tlshash":"3e0147155e8f462dcfcd03c8599d090c11ee2426190dbd65cbdece840f067f0648748e","first_seen":"2026-09-21T19:12:45.120098Z","last_seen":"2026-09-21T19:12:45.120098Z","times_seen":1,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d39va5bdt61idd.cloudfront.net/static-shopyy/js/cartAnimateCss.56205f3a.js","fqdn":"d39va5bdt61idd.cloudfront.net","domain":"d39va5bdt61idd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.190","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.359Z","timestamp":1790017805359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /static-shopyy/js/cartAnimateCss.56205f3a.js HTTP/1.1\r\nHost: d39va5bdt61idd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 207\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 11:49:52 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 18 Sep 2026 07:57:17 GMT\r\netag: \"ec20cf4eb79955acb1e82e4c9af4ed53\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: aQTHE5rc5lGcA8faquGYuMnpXkdGnzGfh6vCrUao3Q4ovkG9Hc1qSQ==\r\nage: 26413\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":207,"size_decoded":719,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"ec20cf4eb79955acb1e82e4c9af4ed53","sha1":"a906091883133dc36c064db095d8dffc0536f3af","sha256":"2ded63dec87847e5850fa81f071aa639e495d325cef838c7fae21d981ccf2b05","sha512":"dcf791269c10874f36b4ba8318e4bc2a73816d64e39c56bd477dea697b6cd7a4a57212c19aff291e9537829356950c9f43902af52f009e6ff5a9bf3c477e2f66","ssdeep":"","tlshash":"e1d0a923a4a2b8b83f3a08c089218920d8384862226475a76ea809159fa416e008c8b8","first_seen":"2026-01-27T10:09:31.47147Z","last_seen":"2026-09-21T19:12:45.121228Z","times_seen":461,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/homeapi/collect?store_id=229168","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.708Z","timestamp":1790017803708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"POST /homeapi/collect?store_id=229168 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://tervio.cc/\r\nContent-Length: 920\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":920,"data":"{\"hit_type_name\":\"file\",\"hit_type_category\":\"SCRIPT\",\"hit_type_label\":\"{\\\"themeType\\\":\\\"nishomee\\\",\\\"tagname\\\":\\\"SCRIPT\\\",\\\"src\\\":\\\"https://connect.facebook.net/en_US/fbevents.js\\\"}\",\"hit_type_action\":\"index_index\",\"hit_type_value\":\"\",\"hit_type_id\":\"public\",\"hit_type\":\"error\",\"theme_dir\":\"nishomee\",\"pv_id\":\"667709D5-5D18-E7D2-9E92-B606EDF116F0\",\"oemsaas_global_visit_id\":\"D8AD3D45-EEC4-88A8-44C6-E58643259BBF\",\"landing_page\":\"aHR0cHM6Ly90ZXJ2aW8uY2Mv\",\"oemsaas_global_visit_session\":\"6DD6E677-E86A-1B98-CE2B-E2A6970E9899\",\"store_id\":229168,\"document_location_url\":\"https%3A%2F%2Ftervio.cc%2F\",\"document_location_title\":\"Pevsuki\",\"meta_keywords\":\"Pevsuki\",\"prev_url\":\"\",\"vid\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"rnd\":0.07001544145541594,\"shop_client_timezone\":\"Etc/UTC\",\"shop_client_broswer_language\":\"en-US\",\"shop_client_screen_size\":\"1280X1024\",\"shop_client_viewport_size\":\"1280X1024\",\"data_source\":\"\",\"data_from\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\ntrace_id: 6FB8EAEB-1D90-2C11-6327-C227D2CCD301\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":214,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0f4c669c5d08c1688789c694f0660e4b","sha1":"d79604defbd1c13174bde73c5482ff00a5506926","sha256":"faaa899914ac23e30fe978ac2e2c51b53fbd62e6d1c170429d8ffe9f4cf66f3e","sha512":"30a9ec0715645432aafedcf263a4644451f1e3baf3aae45610ab6e5105b2f6e5860b90fff957357fd68e9a7ab615dbb6e1c35b8673b0d295c2685f94cd151014","ssdeep":"","tlshash":"886000000f00000003c0c30c000c000003c000300000000003c0c000003c0000cc0000","first_seen":"2026-09-21T19:12:45.098179Z","last_seen":"2026-09-21T19:12:45.098179Z","times_seen":1,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":0,"dns":0,"connect":168,"send":0,"wait":175,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/ff722b2a759e5fdf887c79d71f5dbac29124c86362ad4ca33241afe28ce7781f.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.705Z","timestamp":1790017804705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/ff722b2a759e5fdf887c79d71f5dbac29124c86362ad4ca33241afe28ce7781f.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: AliyunOSS\r\ncontent-length: 21006\r\nx-oss-request-id: 6A9F19C486F289313066D9ED\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 5377369223990169807\r\nx-oss-server-time: 97\r\nvia: 1.1 google\r\ndate: Mon, 07 Sep 2026 20:08:36 GMT\r\nlast-modified: Wed, 29 Jul 2026 07:48:36 GMT\r\netag: \"EE7C16BD1547B3DD3E18C93CC2216E94\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 1206089\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":21006,"size_decoded":21581,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14afe9186b42fa6cc01690bb6a77e449","sha1":"46b8b2e0ddebcff5b8c99608bcb7c93fd324f7a7","sha256":"72cf5ccc8a4eec93afe7787032ff740e67ad062a7070ef521f6327b6a27cc433","sha512":"955b18679b709825072603ef54992d01961cfb4ec90f996e7a085149dbedaeb23fe71156d81ab573336607dc2e74d6e1e2eca9c53e60779999f03fb4dfeef03a","ssdeep":"384:vdp09EA/867x59/Ad/vbanC8iwpmOhmZABhjjAKOtaQPrIOl:09EA/8Ox5RARcp3sZtaQPrb","tlshash":"9c92d0560a731498e0b043bca0f2aae13ed9b2c120366fc66125bc26f12fe5449fdbc5","first_seen":"2026-08-11T18:04:32.090442Z","last_seen":"2026-09-21T19:12:45.122373Z","times_seen":16,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":48,"connect":14,"send":0,"wait":15,"receive":6,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.680Z","timestamp":1790017803680,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/default/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b092212 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 23352\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810C55D5CE373106EC2E\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"7FE39BDCDCABDC30D14D1F99C308DB2B\"\r\nLast-Modified: Mon, 21 Sep 2026 09:34:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7125506954030682244\r\nx-oss-storage-class: Standard\r\nContent-MD5: f+Ob3Nyr3DDRTR+ZwwjbKw==\r\nx-oss-server-time: 1\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23352,"size_decoded":23869,"mime_type":"image/png","magic":"PNG image data, 3840 x 1600, 8-bit/color RGB, non-interlaced","md5":"7fe39bdcdcabdc30d14d1f99c308db2b","sha1":"1d355213e4346ff9d06274c93523fc4d98b583c0","sha256":"a290c6c3053dc46eb4c6632cebcea32eea7da4274d3931d4c703f2ba6c916af7","sha512":"bbe4ebc75ec128be534f86f9343311cb4ca25f998fa055f1c733eee0a11c778f3c9941e952edcf71dba0799bd1d1c24c20133852a5a4b47179535d05ddb561e6","ssdeep":"48:t/6rB4knA9WIcvC/c0lbsi3AdHA6y3QHANhffffffffffffffffffffffffffffF:tSCknmWI8C/cHb5Hov","tlshash":"83a2382a626287e0ffcd1c72abf71f691ba055c9f022a351d3f552291f923214d8e8dd","first_seen":"2023-04-11T19:45:22Z","last_seen":"2026-09-21T19:12:45.122945Z","times_seen":2873,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":761,"dns":0,"connect":0,"send":0,"wait":184,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hind/v11/5aU19_a8oxmIfNJdERySjQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.596Z","timestamp":1790017804596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/hind/v11/5aU19_a8oxmIfNJdERySjQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16268\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:08:44 GMT\r\nexpires: Tue, 21 Sep 2027 17:08:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 10 Sep 2020 17:04:02 GMT\r\ncontent-type: font/woff2\r\nage: 7280\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16268,"size_decoded":17079,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16268, version 1.0","md5":"7927dae4485c649d860c42c595a23aab","sha1":"edd66151374d07e336842e23022ccd827a50378f","sha256":"e2f1a473a1649fe316dbddc5cf8f45c525d62b8373d1be395272864c0cf1e60f","sha512":"672de7f3f7c728f99748e8bac4d0d0a5d812a9b8fdc815bd259c0289f27473d2cef6470dc2a8cf56d2ebcf1554d079f6d2d70c4c99edbf514ef943d11d4b74ce","ssdeep":"384:m3R9VssNcPHinIuWhOTlTmaBXQZLcjWX7lPpSAvrLjolzxY:m3R9BNcPyIuWh4lyaBX4L2W5BrLP","tlshash":"e272c0cc841c677375be207b7894b1a89fd4935b1c117b1ea119a10b43f594763093eb","first_seen":"2023-07-25T10:42:22Z","last_seen":"2026-09-21T19:12:45.123527Z","times_seen":182,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/app-assets/webpagebooster/229168/index.js?var=1785382040","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.642Z","timestamp":1790017804642,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /app-assets/webpagebooster/229168/index.js?var=1785382040 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45; _BAIHZAB_ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0)%2520Gecko%252F20100101%2520Firefox%252F134.0; _BAIHZAB_pu=; _BAIHZAB_tz=Etc%2FUTC; _BAIHZAB_ss=1280X1024; _BAIHZAB_lang=en-US; _BAIHZAB_vs=1280X1024; _BAIHZAB_dt=2026-09-21%2019%3A10%3A03\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:04 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810C3B047D35376F2431\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 08:55:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7652289710823422354\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5MugxIVrKcD+ktvqmlJg8w==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: max-age=7200, private, max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":50966,"size_decoded":15747,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50792), with no line terminators","md5":"e4cba0c4856b29c0fe92dbea9a5260f3","sha1":"07bb34951e4aedc850bd9f5a342da5e85bd6a2e7","sha256":"81aa727b60d0611fef010b65181a2772a92b5ea2de6fcd85b05a1e464c98810c","sha512":"6559a088c45a697c5c76d680cda5331ae863b259173d653fb7e6462655e71aeee091553c439ed4648d668758a5ca8d1b7733a6ea4b92e073db2fdc7aed87cf13","ssdeep":"768:pJm14E2dw/P2wtEmlxwc4E1Cg8CWElbK21OMzZbzXbqVcSzFbdw/P2wtEmlxwyYD:nm72dwWwt5v9fbKwmbdwWwt5VG","tlshash":"3e33ead8b2e6b06543ab7324515f1306f33b6c05f5568840e62bf8d26c7cd8ae127ead","first_seen":"2026-09-21T11:14:03.971199Z","last_seen":"2026-09-21T19:12:45.124061Z","times_seen":3,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/28573988ddbd808fc4d2bea8c8c79bac9c093d43d5044fab6731fdf3b94eb7fd.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.710Z","timestamp":1790017804710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/28573988ddbd808fc4d2bea8c8c79bac9c093d43d5044fab6731fdf3b94eb7fd.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AliyunOSS\r\ncontent-length: 20158\r\nx-oss-request-id: 6AA593EE9191FB383083A454\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 6377701939415602639\r\nx-oss-server-time: 218\r\nvia: 1.1 google\r\ndate: Sat, 12 Sep 2026 18:03:26 GMT\r\nlast-modified: Wed, 29 Jul 2026 07:48:42 GMT\r\netag: \"910319DBB095330CC85CAF817611E976\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 781598\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":20158,"size_decoded":20753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd7a9fc4cb5fa5549a0c5dee357a1de5","sha1":"795d227f76b9fa4f2c339b7d4c4614dd94321446","sha256":"a442fddc47a530282ac0513d19c3ea1f41715297a4df85479913122e4727c144","sha512":"140260e653f6082ec01e668bd22328315cdb198adb1778e59abb8a78932108f9c5a01d1a623dcd62c402a008748e7cc6ec4a4ab5afcf68842581f1cab4e80ee8","ssdeep":"384:QYt9eHS0G9lBPbpFrDDtN7UDjsWtHTUEoI407UnIaxa:Qswi1zrDX7U/vtHkg","tlshash":"1c92d1b26ba44a5de130883b00cb6af1dcb7bf6d56b1724882c544b4b2595ccbd37395","first_seen":"2026-08-11T18:04:32.116219Z","last_seen":"2026-09-21T19:12:45.124742Z","times_seen":16,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-forms.clink-lists.com/cartsee/form/out/load","fqdn":"static-forms.clink-lists.com","domain":"clink-lists.com","tld":"com"},"ip":{"addr":"47.115.89.43","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:05.395Z","timestamp":1790017805395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-forms.clink-lists.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 23:06:42 GMT","end":"Fri, 11 Dec 2026 23:06:41 GMT"},"fingerprint":{"sha1":"09:E6:47:29:24:02:AE:04:C6:BD:C1:02:0A:9F:77:74:A4:3C:BC:A4","sha256":"8E:85:D5:70:B2:B7:4E:E9:B5:4C:5D:AE:0C:41:B9:4F:A4:E3:5F:48:1F:2D:75:A7:65:27:05:EE:4B:63:4F:B7"}}},"request":{"raw":"POST /cartsee/form/out/load HTTP/1.1\r\nHost: static-forms.clink-lists.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 478\r\nOrigin: https://tervio.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":478,"data":"{\"cid\":null,\"formUid\":null,\"pathname\":\"/\",\"hostname\":\"tervio.cc\",\"parameters\":\"\",\"event\":\"load\",\"companyUUID\":\"mswkbi8h\",\"shopifyUserId\":\"9eee92f2c7406b40efc4e86af08e6f39\",\"anonymous\":false,\"abMapping\":null,\"excludeProductIdsVersion\":null,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"ver\":\"1\",\"browserBrand\":\"Firefox\",\"env\":\"{\\\"deploy\\\":\\\"shopyy\\\",\\\"integrationId\\\":31,\\\"customerLocale\\\":\\\"en-US\\\",\\\"clientTimezone\\\":\\\"UTC\\\"}\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 19:10:06 GMT\r\ncontent-type: application/json\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: *\r\nx-trace-id: 645d432d29bf41ad84a565369e0079f0.235.17900178065640532\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":506,"mime_type":"application/json","magic":"JSON text data","md5":"89074ea33c299c9fe1a9ffa1db2b896d","sha1":"2f8f0af430449d66aa68df3c9bee81d25107a5b7","sha256":"8a997e0f25d622667f3796c01431d0c72626444bf1487630b8e9292654095c79","sha512":"c33d6b053bdb86be6cd8da66471a7c86228ac632be5d6bad3534ee8f231804aa226b682a2a3f0e50b624e450a64c8bc175666f2f8b8778ba681a6b7df06f20f9","ssdeep":"","tlshash":"32b0122112dd88e567a38060220a28001710d400c1c13f342808197d250008902067a1","first_seen":"2026-09-21T19:12:45.125361Z","last_seen":"2026-09-21T19:12:45.125361Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tervio.cc/skins/default/public.css?v=bd04c4a681dd44183ab9ad2ee3ce6b49092212","fqdn":"tervio.cc","domain":"tervio.cc","tld":"cc"},"ip":{"addr":"47.89.246.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:03.445Z","timestamp":1790017803445,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tervio.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:26:49 GMT","end":"Thu, 12 Nov 2026 02:26:48 GMT"},"fingerprint":{"sha1":"06:03:33:64:36:EB:F0:E6:A6:99:4B:26:57:5B:A8:AB:E8:72:91:9C","sha256":"92:66:1F:5D:47:AA:8B:2C:54:B7:3A:D3:78:4E:37:CF:8F:ED:AD:94:02:B6:92:0B:C2:87:B0:47:4D:79:AF:F8"}}},"request":{"raw":"GET /skins/default/public.css?v=bd04c4a681dd44183ab9ad2ee3ce6b49092212 HTTP/1.1\r\nHost: tervio.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tervio.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _fbp=fb.1.1790017802870.887408168801980603; _bbiafh_vid=D8AD3D45-EEC4-88A8-44C6-E58643259BBF; _bbiafh_cvid=9EE198AF-28CC-C81B-8D4D-865056F8EE13; _bbiafh_vs=6DD6E677-E86A-1B98-CE2B-E2A6970E9899; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1790017802%2C%22expire_time%22%3A1792609802%7D%5D; landing_page=aHR0cHM6Ly90ZXJ2aW8uY2Mv; _bbiafh_ka=7EF8722F-2667-BD89-DB3A-005E65D5BFA0; first_http_referer=null; first_visit_time=1790017802; currency_code=NOK; PHPSESSID=93bbdcb96d85e84841a58db6d688fa45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 19:10:03 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-oss-request-id: 6AB1810BF3412F3638B75025\r\nVary: Accept-Encoding, Origin\r\nLast-Modified: Mon, 21 Sep 2026 09:34:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8950047814066933411\r\nx-oss-storage-class: Standard\r\nContent-MD5: 7TEzSOZeBIc9mcG5NDCXHQ==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\nCache-Control: private, max - age = 691200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":163477,"size_decoded":25353,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ed313348e65e04873d99c1b93430971d","sha1":"e0e15c627774b672b594728ebf5eb4fae3e25bea","sha256":"a30e9138918b397dc8d133f5bac48c7603c44597dd6c015024775af63010727c","sha512":"6c03bd8f0857e9b70c021a1d7d4cff9ac2ebea083cc32bee8d5d7714e3e2fd05b97b001388ca695fdf0a6f5a6a0d8ba9f202c99aa82a203193e1a492fb5332fc","ssdeep":"1536:1NUIf61W8TRVpPLqhUTjaNF2dnR2o3278JB/jKw6xMvA3z:Xbf61W8TRVpPLqhUTjaNF2dUAKw6qA3z","tlshash":"54f3d895e670103ea5279a30a9c0dbed7538f505e5531afef680b929c3ce6eb037620d","first_seen":"2026-09-21T10:02:47.344699Z","last_seen":"2026-09-21T19:12:45.12638Z","times_seen":5,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":166,"send":0,"wait":337,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"tervio.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"tervio.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.statics-cdn-amz.com/pics/aad98953eb8b3cf6327bd10aba8e0881bb8b201c711552c2330729d68308b4c7.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp","fqdn":"cdn.statics-cdn-amz.com","domain":"statics-cdn-amz.com","tld":"com"},"ip":{"addr":"34.111.216.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tervio.cc/","date":"2026-09-21T19:10:04.707Z","timestamp":1790017804707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.statics-cdn-amz.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 17:50:23 GMT","end":"Fri, 27 Nov 2026 18:45:17 GMT"},"fingerprint":{"sha1":"53:15:58:7A:6D:36:B9:E0:21:84:87:CF:B0:F1:E0:D3:66:59:CC:DB","sha256":"C0:07:B4:E0:D9:06:01:C5:8F:9D:62:51:D2:2A:8F:F0:CC:BA:5D:FF:4A:9F:4D:16:95:C7:17:33:E2:10:E1:C0"}}},"request":{"raw":"GET /pics/aad98953eb8b3cf6327bd10aba8e0881bb8b201c711552c2330729d68308b4c7.jpg?x-oss-process=image/resize,m_lfit,w_552/quality,q_90/format,webp HTTP/1.1\r\nHost: cdn.statics-cdn-amz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tervio.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: AliyunOSS\r\ncontent-length: 8566\r\nx-oss-request-id: 6A9F19C56F45C83430D70304\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\ncontent-disposition: inline\r\nx-oss-force-download: false\r\nx-oss-hash-crc64ecma: 2969931844575425126\r\nx-oss-server-time: 76\r\nvia: 1.1 google\r\ndate: Mon, 07 Sep 2026 20:08:37 GMT\r\nlast-modified: Wed, 29 Jul 2026 07:48:42 GMT\r\netag: \"53036940C60FA5C92131902DB6E6E77C\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 1206088\r\ncache-control: public,max-age=2592000\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8566,"size_decoded":9140,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a184f55af0cd1982166448f4aaed434d","sha1":"51d72dc4c44850b0cf30702698caed96a7f69f60","sha256":"e66688ef94b6391c6434a5aebf4a0c69b12fa59239063f2fdf78679154a831c6","sha512":"a5bdcb21394c875c66e751c58c047ac5bbabf08a089f037ec096a50a203160e8dd7fd34e07136f3cd3be93f9d066a2ee60417bd6da1571f0ce4ad91bd358c4e1","ssdeep":"192:2clo/CSHe9Fw2x68WVjIA+ZQKGVMPKu+Ldn1/yCepHsWo:Zlihe9Fw2x68WT+U6yusr/yNpHs","tlshash":"e902af69b732fd13d0415f7a8bb4529e89a30e50eedbc8a073d06ac527b4a4237442ed","first_seen":"2026-08-11T18:04:32.166328Z","last_seen":"2026-09-21T19:12:45.126933Z","times_seen":16,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":46,"connect":14,"send":0,"wait":15,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}