{"report_id":"c5ab85cb-cd9f-4429-8f9c-1287e9c8e376","version":0,"status":"done","tags":[],"date":"2026-06-18T11:03:16Z","url":{"schema":"http","addr":"natrivex-ia.com","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"104.21.96.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"natrivex-ia.com/","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"title":"Natrivex – Analyse assistée par IA pour les marchés crypto et actions","dom":{"size":33709,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31173)","md5":"9644c31858709809b6e1edda39c772b6","sha1":"782c8a0672377176fe14c1be74c7b9bde0cfff3c","sha256":"5cd0c40149e1d232a73b5b6bbd1bf0ac96f96164b1378d816963183f70199ab7","sha512":"a60d18b0d720938abcd34746d4e5b0d20011d28a70ca6daf2112d11c6b7f50aba5a0df687a64429c1b35cdf69aafb232d1cbcc53ec47a9debfe577f03cf5ae1a","ssdeep":"768:GgdsDCFsdA+zZN+NRImgcxxS3LNNEZt4IntpGz6nh7mqlgoxp:GS84qAQf+bIm3S3L0P4Ic6h7mo","tlshash":"42e24d7991906523470b29e5ba31ab2fb5ab830ccf13490893fc8bc95fd2cd9cd165ac","dom_hash":"domhash016b8f51f11a445185f9e20742ef997e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"natrivex-ia.com","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"104.21.96.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T11:03:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"natrivex-ia.com","ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":68,"request_count":34,"received_data":556402,"sent_data":17494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":1,"received_data":260068,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-14T22:29:33.380889Z","alert_count":0,"request_count":1,"received_data":425088,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-partners.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ffe7c551deb8250a1cc07cc442dc122","sha1":"4f9add75741d9bca4fe00e157daae6c9b0badb02","sha256":"06f965a8bffba0d054c5f78abedb30db7b5455fe6e46967680a6c7a0171c3a1f","sha512":"0ad46f632dc295a66d947b96a5dd8b9c829bac0cba4375823d5eee9aa60b2788d74db37fe44ad098bbc6286eee65f27a56b53ae868bbbeba4e2a0a7bc767d7c4","ssdeep":"","tlshash":"bbe07d0385711035550b282c09eef700269cc0038c04be417e5d4d044fce21e5af71cb","size":389,"data":"","first_seen":"2026-05-29T11:19:07.301011Z","last_seen":"2026-07-22T21:33:06.627437Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-opportunities.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc11f354d28a47828366e5ed0170135","sha1":"84f0a8b5b7a7d288a40d113482693285dcfc84c4","sha256":"584c17b9f6bd2233d5cd69fb1e2b53339ed16e820dfe16bc957bd64ced812271","sha512":"13beac077df72c45814c5d6ef940b7615d9ffc7ffa1c4b2199fd363da6fc68f738ca98eb29ff8c6b996306efc0893a99e65caf09b8efdfbcdd3acde2efe7a68e","ssdeep":"","tlshash":"34f0500b30706036904f093d49ebea4ef7a5d0039804ba15f98c51099fddbbd94f29c9","size":621,"data":"","first_seen":"2026-05-29T11:19:07.323421Z","last_seen":"2026-07-22T21:33:06.613452Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-benefits.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dbd35fd0037e320d43d218945f8874b","sha1":"948cbefcbc63b66d735502e83db7d11da289b1e7","sha256":"827de3e56f86d46f3624f5ade3700be6217b8fd710a0158b737806bf25c814d1","sha512":"24ee97be54894d6e98c7196521c542787ae70813482240e4cb34dc1a0311f132baced53a0a813bcf752caa52d6d356c9a2b08f080e83e8fdd8b416f8069a740a","ssdeep":"","tlshash":"80f0ed1704b16036521b141d1aaaea49b6d8c0079801ba01becc5a09afdea6e96b71cf","size":471,"data":"","first_seen":"2026-05-29T11:19:07.344329Z","last_seen":"2026-07-22T21:33:06.609517Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BSYHL1RNXB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe49d4ef2f594a6a0b26ebd2197b49c","sha1":"71738a8ba5e2d79a80f922fbabd94ea8eb72e450","sha256":"897e6bbd6aeb4237c5370c0a5cb97dcfac11bf62dae78a11213f4c981dee7448","sha512":"bd888cba3b883aa28c8e3428e71d6b2a81aeed45e86aee75044e9dd17f702428a0e897441207bf38e7249f6dce5d79988b37d593b267296dd5b14b30b21b1850","ssdeep":"6144:Tj4g0DAFmvq/uYJycf7paX9Z08hdAYOyuInyBLJ81oK:/v//uYy86+4","tlshash":"a094f9cdb3da74629392f478503f018ba17a69e2f448c899f186ccd42e746998277f7c","size":424484,"data":"","first_seen":"2026-06-18T11:03:22.459932Z","last_seen":"2026-06-18T11:03:54.887968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/header.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b1cb4df07c706865f9f3e1e87a5fe1e","sha1":"d0a99437af32bc85e451472f5270c468abce92eb","sha256":"6489e9e41e19b9b7693c57212863f0b3fcd805056339e7cc85b169d1aeff1e86","sha512":"16adfd45b8a53ea3e9dc12e2f2d45b44c763bd83d67734fea468dd8103941c786efcc0f866099a3d4ac708be1567a22a8de89bd7654df339b809835477752541","ssdeep":"768:/gA16IhTp6BfAVbxtMDKgi0rzjqU7Z+Nr8Vyq0RdCa5dcAXUj9gjUVLISSQzzmWr:L1FR4BQxiDK5u4ic5dcpj9EUVz8i","tlshash":"aa43a65966e13134d303b03b969fcd08b339945b564ace483d2ca6986f4983897b7fec","size":56838,"data":"","first_seen":"2026-05-29T11:19:07.331319Z","last_seen":"2026-07-22T21:33:06.639248Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9f92ad923a2e58ce6e4c7ac15b312c1","sha1":"1b5a2e38e2b51f4a15bf85d0fffb9707108c323e","sha256":"0bb65c38e0dc426c3d453775874e49d315b2bcf0b4198d91eaff013e18798593","sha512":"7303b879d056812cc63adf01c4b38b73122bfa5d3057b2ff0b75a7bcf5404d4b2fdd0b4fd4e369f18e2106a0c0b2e4affa5881148182898330db8b4e53be8dc9","ssdeep":"","tlshash":"c5c09b8c21475d7156eb5f414b9ff704b1513234a5955c32091573485522c576758e54","size":142,"data":"","first_seen":"2026-06-18T11:03:22.465494Z","last_seen":"2026-06-18T11:03:54.903689Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/validation/intlTelInput.min.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"475fdc0630d2997afd1f230b7d5617de","sha1":"e57c798a7aac45a8a049481a330893ad9224e39e","sha256":"df2fca8c5e5a0a3455ceb3530594a8ff13548a5ced799d73c234012f05b3bf11","sha512":"ec662d5dafc77f1925bed23f0860675f33b5093b6f47031504fbb3596278ef79855b7b791e05476bd43ff709f47ef257c2b4ef84b6d8aeab588fb15a3d0e981b","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikl/7LOpQn2Vits8Zb:cDiIz8A4knYdYk9bs2","tlshash":"4cf209ae737116376abe82fa30e74503aeae34465604442d389c8fcd0b98ed571f6778","size":37503,"data":"","first_seen":"2026-05-29T11:19:07.321122Z","last_seen":"2026-07-22T21:33:06.636419Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-hero.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7c2d08766df94c49ffbfb33ca3aaeb5","sha1":"649f951bd6cd3a9492f5e71dc8599da6ff4467c6","sha256":"8bc146b03f6083f6f19f33e314bc52270887407cca4345b09909af5952e83f11","sha512":"90ead8d0fc8cce98a011c51d33c5247962d400f40fd27b72e374f46ec3dd331b57a74d6e4e8c21725292071c0c93d27147142220f12f1c3047dae983c16a8dde","ssdeep":"","tlshash":"5b318f9a72f310708767a23abbaf5785253491033442ed9c7ddd42102f51d52a6f7fe8","size":1752,"data":"","first_seen":"2026-05-29T11:19:07.333343Z","last_seen":"2026-07-22T21:33:06.640057Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-cards.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a6e82ca664a022fe0ba27a3aa92a1","sha1":"5456648e933a8fb5764c05c00687af8dd2d4cabb","sha256":"710ab8e8b52be5f2338f028f9e60c41b7228905970305f20a55b9edb3776307b","sha512":"637c4e582589f43468f8c2f63a25e115e21408f2b9fe660ac4d0f752072275ff3d99576843d198df00919c7a9e3f0a2f95fe154d82fedd1bcfc40cd0d74ce7e3","ssdeep":"","tlshash":"7bf0e51700b05031515b203d4aeee649b7e490036808ba11b98c4109efd9b7a65f65c9","size":532,"data":"","first_seen":"2026-05-29T11:19:07.308261Z","last_seen":"2026-07-22T21:33:06.61177Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-23T06:20:40.368432Z","times_seen":1900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.026Z","timestamp":1781780570026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-48d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tB%2Fqr2slrksob0EriDOE8nBr2mz4CrNvy%2F5DIu%2FXP39lpgBHV57qva8ziZXLoAkuMtH%2BMjI7n1bFKjZsio%2BVTV8YWtAj2IwK%2FWD6PSmUFXL1g0eHmwJf%2FC9LH6d%2Ba8RHmfE%3D\"}]}\r\ncf-ray: a0d9cdd2a99956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1225,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ecc52ba801200f4e6e07bce14f5b2c0","sha1":"22f3381961dda0a6f700233be04ab2e1dec173aa","sha256":"476889f1bd277c069ef21987bc4af168c0cf339d1f1c775ddcae5af482c7460a","sha512":"e059f288819e5d94ac593d24e90948529e4e8ab7541deac613b50833e008235c2a3ad87b72ab9bcc5fea6192114179242ee0cd58108273bec7c36530d0372af5","ssdeep":"","tlshash":"77216b66b22ca418d32383ce224638e9303fa0ea771603c4c5c42e6f96646c61c3f6dd","first_seen":"2026-02-01T05:35:27.974168Z","last_seen":"2026-07-22T21:33:06.648646Z","times_seen":102,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/x-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.033Z","timestamp":1781780570033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/x-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a22c0c8-164\"\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3e6PTuhkEznLFpQDAMIIbNGwjrATcoOn8EfFZqj7jrb9wYiW685xB83utscOY9DnPH%2FhxbgCrCpE9VgmfnqyApRf9FM8qF4KlMDEwaAyvavBZuVY14DZ3IznWJzv%2FekjBE0%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9cdd2b99d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":966,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9d288b6a62efbb46adf6c414e894b91","sha1":"32d0325ebf05205f61a3d4cbf24532df4fa42855","sha256":"805f0ebb3ed4c45904f1b5b3dd4fb17ec8a13133d95f703f14e16278a860eaf5","sha512":"b5f06d02f99625d7f575fa9ea5f587c5a9b76a3ea1cb0d3a23764ac215178dcacb0b2ad9af1c053d012402f95917b305ec353295d438d95a0912238683768bb1","ssdeep":"","tlshash":"28e068e9114df384840d8ed04229333212da71e2abc4d34cc1526202f8841499c1d5d9","first_seen":"2026-02-01T05:35:27.974946Z","last_seen":"2026-07-22T21:33:06.655307Z","times_seen":103,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/yt-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.035Z","timestamp":1781780570035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/yt-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-46d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cR%2FFgm%2B1LX7Tyywha%2Fmue8DBgNvJYUzjlTbQAe9GO%2FGINluIZkkJurVh4kfmuJuml7Y5Bl5pXxujBvrp7dZLTlPb1IAc0K%2BX%2Bq74btPhZUXaiTL7Ok8sC3iNJt%2FZ%2BbfAGZc%3D\"}]}\r\ncf-ray: a0d9cdd2b99e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1133,"size_decoded":1298,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e0c0d2d22e110c402986b7bdf984049","sha1":"eec12524e6bd14bfde045ba21702eae55540bbb1","sha256":"b23575dea942fec2968ec7a483526046cda22064b11d489a690da9dcea47b3f1","sha512":"d8d8f321a0b64f4be55b8f60ddba121060481dc6ab253f9bfbea5f17c7f56bff2a1ccecf91c62c69595ac8896445167404361140fe989e3ed3839a7200854790","ssdeep":"","tlshash":"48218ef683268a60e90ddbf4d68e346c209637b2bb59c386d3587514f04b4dc9658c4c","first_seen":"2026-02-01T05:35:27.985538Z","last_seen":"2026-07-22T21:33:06.614809Z","times_seen":102,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/fonts/RobotoCondensed-Regular.woff2","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.226Z","timestamp":1781780570226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-Regular.woff2 HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://natrivex-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a22c0c8-f8b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXaMqLNNlrbKeN1U6EBEdbdbU8XLFGcdUWS5iL0lfFfMbkdOmmdxPKWu2BdPTY1R3HRhflGXNMBdiR21XqyFvheBae8Ay8gGvYcrKKdoHjl%2BPJ40vl6eQtYqXMpFGlQB%2BaM%3D\"}]}\r\ncontent-length: 63672\r\ncf-ray: a0d9cdd3f9a856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63672,"size_decoded":64407,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63672, version 1.0","md5":"e813ab562ab74cf2fea116f6573ec2a1","sha1":"3a5d2faa0d673b8839df26a76735aa1ee0c02bce","sha256":"07fe1001734bda1c26b3773008f02e54a9998bdb7c0592eabbc4e948bebeebf5","sha512":"07f1505bf8d636d373fd7780425aceddf78ba39f09e3733a9acd82dd39f5a41f6fc8d92a4ad3ff379180b87e09c6da8e8ba7c2718666dc57be2d7f54bbc41b80","ssdeep":"768:ovBaPod+pexZSKCbG0eOyDF4ZkNAjjmhDQEVo8mb8rJXErm+jvRfYOdRMgvV0Dzp:bq+pCubtyR4ZiD/GIXEC+Igqgy/b3Lv","tlshash":"7a530249b6d53a262a3fd2cc958280c3c419ba72e8383c7bf92dd6dac85dda264515cc","first_seen":"2026-02-01T05:35:27.981516Z","last_seen":"2026-07-22T21:33:06.649288Z","times_seen":161,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/coindesk-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.302Z","timestamp":1781780570302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/coindesk-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-1a06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7DLAg%2Boi3NKbXTNcuauVrs4eugIs5qrEolzGd9c4HUbznbVztGjOQanLC1%2BGyqUCDdkWOuh5oey3fTK%2FEcH5rrQLNLmy4%2Fawd87R%2FB2IeyG%2BkhsOaZd6UtRyzO7zda9KaU%3D\"}]}\r\ncf-ray: a0d9cdd469b056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6662,"size_decoded":3513,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98204686e236109e0306d0e23510cb67","sha1":"0a3a2a2832fe38f81ab58c3c97af79c1a35ae2b2","sha256":"fdb470fec4ed878417026c27211c08dfa773248688c135cd1fe4c5e7825ba259","sha512":"3a3ac622b85daf630a18d0db786e8b2faeaa5db7d95d62e4f487a695a4243ef01100dddefb9212610e59c65d2ec6010c103fb0dad15d1f14c6f03ed454e4144b","ssdeep":"192:8rg6THKrsJ2Fax+lSzJR+uyqsyPyT+DD9VZ/Naatg:gRr8F++lKR+uxpPyTykatg","tlshash":"6bd109ee63e4a2e4f002c3f5d917049a3ea73cf92b51c504cb808e69ec5959d4d98ed3","first_seen":"2026-02-01T05:35:27.99183Z","last_seen":"2026-07-22T21:33:06.621243Z","times_seen":104,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T11:02:49.320Z","timestamp":1781780569320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOivFvaRI43k22SHWK784HVEi1h%2FJlSw4nH0BMYW%2Fv7MBbaOgVbwqjk4kjEOe6MhB5kSOtgoGRtlMiKidDLLEVwfpjE6flL3s908B6CXBgWvgxpXLU4G5IVDBBQhP5PMj%2Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-ray: a0d9cdce896c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":33721,"size_decoded":8754,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (31563)","md5":"283957971fadf3eb51acfd108a4b380c","sha1":"a4ddf4e8bc704bd23046c161f6d9c75261d3efb6","sha256":"ded9d4647ab0bd6cc035e5baddfbec70a34c4b65294edd8f325d8fdb0f3a71d8","sha512":"c8ba5645d12ca5d02f71f1139775cdc18d956f4e5c30ae63e62c66497517520a7d237d7c28853f91f20cec88bd393c47911aa3c4e244ec053e17fcf939d186b6","ssdeep":"768:q7tckPFEN4G3lOQlG4sbHi3rNlF04wX1x+bi/pb2Plgoxp:qRFty4eOiGfi3rl04wIiRb2t","tlshash":"e0e2fa7c90a0a523471735e5ba62ab5b749bc30cca134818d3ecdac56fc3cb9cd365a9","first_seen":"2026-06-18T11:03:22.439361Z","last_seen":"2026-06-18T11:03:54.871634Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":16,"connect":25,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/css/index-mob.css","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.740Z","timestamp":1781780569740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/css/index-mob.css HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-3e43\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOAdzqAloq%2BTMo4qDyXbtc%2FBeru2Ui6xGZtGynoZNtHKdx2fTONULEJ3VDnmIAtDXHVSLNmLEaJG2YbmCI81jnoLlfxU0XO6Q6bDlJNH6ltTX%2F1JspO5NtrzX5qCWSkZ4K4%3D\"}]}\r\ncf-ray: a0d9cdd0e98056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15939,"size_decoded":3703,"mime_type":"text/css","magic":"ASCII text, with very long lines (15939), with no line terminators","md5":"cec98a79a19bc73520c0fe6015402e72","sha1":"5aa3cf9414acf223f5d745b37d94502935e507d7","sha256":"ab55cc4546ada02e037c55d7beb9c27eaa5639d5da33027cd6f3754b4bf4a6eb","sha512":"d77f4708c2b29e93cd5074dbd05d7a871cd6ff3caf7b7fac455b1b876991554135859b22c1546e47f997e5275adc4a80268f6e17fcd3db61c95f00d09047ef07","ssdeep":"192:hCi9TdXhfvN3h/O7xtsMRZX0w7IFWQJa4zXKHwv8XYJcSxcniHlS/SvRuzL7yT1r:Qodx3FVLOuJJcaezw8uKQStPcBaIT","tlshash":"7762642892142115f293e8793f96bfc6d306e571a707e0bdcad9312dc2ce56606b2bcd","first_seen":"2026-05-29T11:19:07.339613Z","last_seen":"2026-07-22T21:33:06.649897Z","times_seen":34,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/phone.webp","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.998Z","timestamp":1781780569998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/phone.webp HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i\r\netag: \"6a22c0c8-420a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tklfuMYKY0ax%2BdkIchkaAt43n1A6VGDw0I4ayScTyhlZPr1L4K0MBnpwtlL55KcHg1yXbMp9itnN6zbCkD%2FpFzE2L16oFniRD1fzfYtWccfcf0%2B49YU7X2FCGV13OzldUwg%3D\"}]}\r\ncontent-length: 16906\r\ncf-ray: a0d9cdd2899156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16906,"size_decoded":17640,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c334ed25ee125a3a0acd8829568b9f9a","sha1":"8ce713ff656d9956f2bb9d0299b04e68201c2e21","sha256":"12b05a7ae2cc672765bc338b9756fa581d21fb7bb12690c4539e80949e071f8e","sha512":"c23b461315bfc48eaffb986a172d7e87f9a59d1dc40f424649a4a4eed171bbfc67f804330ce0fca099260d957e2e152ebb5a4cf33677ecb488179954a940fc72","ssdeep":"384:Y13qlNJOzV0p5cVX4OVelnIorrZtn670tJhuqG0:ASNCVqS4WeprrtJcj0","tlshash":"1472c0fe2b0a0076cd0a79f6c9417588ec8f264952e4c566d94d5cd2cbacc5e813bedc","first_seen":"2026-02-01T05:35:27.977673Z","last_seen":"2026-07-22T21:33:06.608152Z","times_seen":104,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-opportunities.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.008Z","timestamp":1781780570008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/js/block-opportunities.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a22c0c8-26d\"\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jqC8WBSmF0JKWebqULX6Zx9aE6KeehyIV3cE1UZOf0ak%2BuKaX6XXy4YV0tag%2F63pElNzBc6PhtTSFdiVSvI%2BZcWSR9lL%2Bf3QQKBZhKl04Ln0zD2wbF6ZWe%2Fqky8J4JTJWY%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9cdd2999756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":1072,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8bc11f354d28a47828366e5ed0170135","sha1":"84f0a8b5b7a7d288a40d113482693285dcfc84c4","sha256":"584c17b9f6bd2233d5cd69fb1e2b53339ed16e820dfe16bc957bd64ced812271","sha512":"13beac077df72c45814c5d6ef940b7615d9ffc7ffa1c4b2199fd363da6fc68f738ca98eb29ff8c6b996306efc0893a99e65caf09b8efdfbcdd3acde2efe7a68e","ssdeep":"","tlshash":"34f0500b30706036904f093d49ebea4ef7a5d0039804ba15f98c51099fddbbd94f29c9","first_seen":"2026-05-29T11:19:07.323421Z","last_seen":"2026-07-22T21:33:06.613452Z","times_seen":34,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/1-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.031Z","timestamp":1781780570031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/1-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a22c0c8-1e6\"\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XG6wIePzgiu5MiMwQY27PZYs7A6GKlHjTwJYhENX%2FY%2F6UFvWIrKUJP1xtGadF6eLex3Yp3SVnp8Mf5rBYIU6Bodsp%2BZnTRvP%2FvWKuSxRqwk%2FpaDB%2BJy8xo7CWfOsZG7ydAM%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9cdd2b99c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":999,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac489bc5c3a0c31fda739db8195d2bf6","sha1":"afd67eb161da250eeaff7e488b40fa83be41bc92","sha256":"fc0435ed03a3ecce1cfb22a835bc7f22c709a67b06c1158029011a011c755eba","sha512":"9187198bb54b90ecddb30734784dfec4ba7378602cc27fe45d440f791394f833c79f453beb5c52a0ce6a8127cead65d30ceb853ec833eca411aca0241d362542","ssdeep":"","tlshash":"73f0e9f9b3088f88830347355f086576159f30fb668e156751402d87724ded6ded6dac","first_seen":"2026-02-01T05:35:27.983504Z","last_seen":"2026-07-22T21:33:06.653912Z","times_seen":102,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/validation/style.php","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.189Z","timestamp":1781780570189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"POST /validation/style.php HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nOrigin: https://natrivex-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FA6s086MFRDy6l%2F6iRAsPlPgyskLmUisdtFT6fgv7N%2FSST54dtgxgcZAj4ZIbFQDIceRZS6cdKIrze%2BuR6oEp0oWPMS1oG7AKXjTF3CXwa0S6czvTI0RKtW4Unv6Mkg9%2BuQ%3D\"}]}\r\ncontent-length: 42\r\ncf-ray: a0d9cdd3b9a656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22,"size_decoded":1055,"mime_type":"application/json","magic":"JSON text data","md5":"13b97b018234978982047354ec6c1525","sha1":"c0bc943cb84935398caa3e6a5428d2a9067e6fd8","sha256":"64ea5e0dfb30ea0f640cf6f7e47b262bbf37c70eeef9609761e11f6d35ba0b39","sha512":"a9ef37d00b5239aa89c38159374874e7c59ad553d8a73f8c70fd02394723652c090aab00684c6c3f121538877ca784120a444cc3f6bcccb8d7ff93a7747bfa7a","ssdeep":"","tlshash":"b57000888380c0e0200020ce800800020c000000c0820a0c8008020002e202882000aa","first_seen":"2026-06-18T11:03:22.44408Z","last_seen":"2026-06-18T11:03:22.44408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/coinbase-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.297Z","timestamp":1781780570297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/coinbase-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-eff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ht6L5UQgFhdVTw%2FLcn85sT2msMir4eAXl5KIr9CCMIVcYu8pb3ym%2BuBbPmZ2S23NwgyblufmanICporm6SFg2y4qHbd3R9MtnykHubN9gB5RC5sJptMIxvyP6lCCtOUQDI8%3D\"}]}\r\ncf-ray: a0d9cdd459ae56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3839,"size_decoded":2478,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28bd94ed1796c03e587a0a98a90e16dc","sha1":"651cd56ae54c37e8ceef0d94a61eecb6fe236247","sha256":"cc6b71738a6a1f8c4b55137201c8568470c0b586c4a542c2d1f858c338b4b0b8","sha512":"b1c22b60ca273873017296be230927129e7bf66da4b2f4d1cc578dd06fddb6c634b9a314cc7eab745bc215c99d63e9dc024b2f14edceb6901ab86490a942b35e","ssdeep":"","tlshash":"c78162ef23f855e9f0c5d3e3ef4340393d4aa1f20a58cb5453585e6793820ac686ad67","first_seen":"2026-02-01T05:35:27.993963Z","last_seen":"2026-07-22T21:33:06.642932Z","times_seen":104,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/nansen-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.313Z","timestamp":1781780570313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/nansen-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-7650\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcX%2FqNIxjY61aDF3ySL4rh%2FcH%2FHlMnCO%2FDdTaxqbieznBy%2FivoOICmEoxNaCL1fySADb1iYLAm5bGj2XLPwoG9mOjqqsPYSzxYmMOdJXUrhOv9YNfxe21ibiz%2BjmIBX8m6Q%3D\"}]}\r\ncf-ray: a0d9cdd479b656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30288,"size_decoded":21663,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c92487a071ec8e517841d889a171d30e","sha1":"1b3711a1fd64d38374b60426b0202c7440216a3e","sha256":"546847d1e6ac7d68a88d48eaa30654ce3db328d647677611e0b7244208de0100","sha512":"b9eec3ddab5533900f2fe20fc4eec9d16f6f7beb828584f5f937e89c00c1f3c3facca900cb9d49adedb579d7f382d50215bd9dbd7cd9374d612a61ac1df92596","ssdeep":"768:QXhUJYmWWUkWhMnEED38PJtr0YeZEAFCNFbx:QXhUJT4M5D30JHemAFsFbx","tlshash":"9bd248622883cfbeefe54c20f656edf6ed6228ddc09b9148da1511614ba6240d6c0ff0","first_seen":"2026-02-01T05:35:27.994907Z","last_seen":"2026-07-22T21:33:06.610661Z","times_seen":104,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/header.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.733Z","timestamp":1781780569733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/js/header.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-de06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipjTrY9z9k1ZImDjdUjvusZroQppJkJBYtf4athejS%2BlCChBLXAgEN22QbYBiX9skHu40Snu0bBgUShBxiJ73VtOAa9WNSFG9z4cxYwdHtKLm%2Fy2D9H3EmQsEz540SP7NlQ%3D\"}]}\r\ncf-ray: a0d9cdd0d97d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56838,"size_decoded":16166,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (724)","md5":"1b1cb4df07c706865f9f3e1e87a5fe1e","sha1":"d0a99437af32bc85e451472f5270c468abce92eb","sha256":"6489e9e41e19b9b7693c57212863f0b3fcd805056339e7cc85b169d1aeff1e86","sha512":"16adfd45b8a53ea3e9dc12e2f2d45b44c763bd83d67734fea468dd8103941c786efcc0f866099a3d4ac708be1567a22a8de89bd7654df339b809835477752541","ssdeep":"768:/gA16IhTp6BfAVbxtMDKgi0rzjqU7Z+Nr8Vyq0RdCa5dcAXUj9gjUVLISSQzzmWr:L1FR4BQxiDK5u4ic5dcpj9EUVz8i","tlshash":"aa43a65966e13134d303b03b969fcd08b339945b564ace483d2ca6986f4983897b7fec","first_seen":"2026-05-29T11:19:07.331319Z","last_seen":"2026-07-22T21:33:06.639248Z","times_seen":34,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/validation/intlTelInput.min.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.001Z","timestamp":1781780570001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /validation/intlTelInput.min.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-927f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dA7yRCs6xKUMf9N%2B8GEFEM5Cx3mWOWiDZYJjISMGX8JBZMs9UR3fkmjdHRNB%2FC6eC7Dqr3j8%2BBrILSy5Onz6sJ3CDRGh4q5thaJs9H%2FPUCkkRlXkqOJY5xkr8dhf57DDgBg%3D\"}]}\r\ncf-ray: a0d9cdd2899356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37503,"size_decoded":14036,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29515)","md5":"475fdc0630d2997afd1f230b7d5617de","sha1":"e57c798a7aac45a8a049481a330893ad9224e39e","sha256":"df2fca8c5e5a0a3455ceb3530594a8ff13548a5ced799d73c234012f05b3bf11","sha512":"ec662d5dafc77f1925bed23f0860675f33b5093b6f47031504fbb3596278ef79855b7b791e05476bd43ff709f47ef257c2b4ef84b6d8aeab588fb15a3d0e981b","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikl/7LOpQn2Vits8Zb:cDiIz8A4knYdYk9bs2","tlshash":"4cf209ae737116376abe82fa30e74503aeae34465604442d389c8fcd0b98ed571f6778","first_seen":"2026-05-29T11:19:07.321122Z","last_seen":"2026-07-22T21:33:06.636419Z","times_seen":60,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/rating-pp.webp","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.028Z","timestamp":1781780570028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/rating-pp.webp HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=5,i\r\netag: \"6a22c0c8-972\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7uw37C0MCk1boK5EQxrv12MUpqh57SLsSUnmLLqGWi2bgSRW5100%2Bw8HKa%2B6GHY1vT9PHiDJqQGmvSH%2Bp0%2BR3wxTHImvZ6r4Rj3IdAPkf4uB6zGxoRXHWEttTKTW1d74Nk%3D\"}]}\r\ncontent-length: 2418\r\ncf-ray: a0d9cdd2b99a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2418,"size_decoded":3152,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecbfd9b2102df0bcbb14d9acc7e7287c","sha1":"125335a93ea3e114508002341f179497c5e27c2f","sha256":"ae280ad98a0105059fb781e96b09b40559b11c2bcd3367f6410ebd0379924e92","sha512":"22f56b4ad73f3673c4131e0fb8ebea0e6d42a304765819fdfb54ade5867e34b7fe60cd192214bfda0c24a0ec02bebd02592e178b1269a00315e133be7c715f7e","ssdeep":"","tlshash":"70413d44cef6ecf38db6ec6bd1365a727226dee51a75cd7600d18d20c07963149d4500","first_seen":"2026-02-01T05:35:27.996355Z","last_seen":"2026-07-22T21:33:06.63819Z","times_seen":104,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/validation/imgs/flags.webp","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.191Z","timestamp":1781780570191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /validation/imgs/flags.webp HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://natrivex-ia.com/validation/intlTellInput.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=4,i\r\netag: \"6a22c0c8-400e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Na0qrOym6NIoY1rM2Olky3fGRSnGGfpXAjKkcU0Yxcuo0HeXQE9CXpg6D6UNp91rjTlSQOlEJxIAzAE3v6AGParrg42xAUz80v3vdX8aqqW4dojN7%2BADh9BjBA8FKhmCT0c%3D\"}]}\r\ncontent-length: 16398\r\ncf-ray: a0d9cdd3b9a756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16398,"size_decoded":17128,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e04a429f047bf49a416645746b6ab9ee","sha1":"81f328617acadbd6fd07ab50977feffa2da3efca","sha256":"760f6774dabb35d9d7cdfb1c748ffd5e37eacf2c2dd4e750b53e66e3b9246ac7","sha512":"06dd1ace2a0776c044f5d8109db05e4fc4ee1d5b676a9da24b7178288f8baae7efc67232370baf3eba849789a93e5c92675354e6ec750fa452b5f8238252642b","ssdeep":"384:CpLvGfOAKQ6wUyvTOaqso3jEAgjZ50AxMD5enKY/M:27DQWUTPqso3YfZ5HCLYk","tlshash":"ea72d08d72fc585cfa36d9021277b18da086ce24b576d9394ac3f985b4b3c98f5cc492","first_seen":"2025-11-06T16:28:10.856082Z","last_seen":"2026-07-22T21:33:06.6264Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/fonts/RobotoCondensed-ExtraBold.woff2","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.228Z","timestamp":1781780570228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-ExtraBold.woff2 HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://natrivex-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a22c0c8-1010c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZbTtF2VUUXu4jkMFIutju9uELKuTiqkb7ewHkoIsg8YkqTVMgstQXN3IsKtp98b6kprmukmWuPaDaE%2FOHOUb2poscHUjNcDUQmw%2FfFA3tmj5U9WYSpyxxtlzlocJVXaVcvA%3D\"}]}\r\ncontent-length: 65804\r\ncf-ray: a0d9cdd3f9a956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65804,"size_decoded":66540,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65804, version 1.0","md5":"53069609c1d8fa3047a0c102c5391c2a","sha1":"2c4110fbf89c85ebcadb7501b9e52402824db4dd","sha256":"fb6a5fc89213242e7024a41384ebc611d31a9d7da67867c25bf033c7bad44174","sha512":"321d7f90a43c75fec00f503dfa27ac8e8fa089ba13f91007895ca2749df49dae9ca3f220abb7c96dcf922c710cccf8d3b56b31e04084a149421dc91bedce896e","ssdeep":"1536:b2n+VaO4AWR/0tMgc4jhgQhZboogEbg9X6eHGnD2vhj7e:bAwaOW9gc49RhZbooiMeOKvhjC","tlshash":"3f530190cfc2d39be6b02a375831ae4c2ed21d1bd82a7e9291fae446f4274e65490cc4","first_seen":"2026-02-01T05:35:27.976591Z","last_seen":"2026-07-22T21:33:06.640769Z","times_seen":103,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.523Z","timestamp":1781780570523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nOrigin: https://natrivex-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 56438\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-bma-essb1270049-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2687879\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=synQz5AyOfbkWZoVsRyDozwxOnE7ohwn4GPFDZ%2Bm4yAO1fuzMc7QBLABSxtXlHUxf6lWaZjGdl5AX%2Fa2lQmxl%2Fo%2BR50m90DQI2vmwX6yAD8QNtIMiTnurQgcIK%2F1trBdsIA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0d9cdd5e91b783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258914,"size_decoded":57592,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-23T06:20:40.368432Z","times_seen":1900,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":8,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-hero.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.002Z","timestamp":1781780570002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/js/block-hero.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-6d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EP7PMOPmcyFozwXjBCSYHZvRbv9fd6Djk%2BnsCVV6imvvvVDNMEJfyMtpnIDd%2B8iBS7R3VoN8CqUZqxxq8plfy0XtgGF3oRrY6LahZcPbGyUNasq9BhkRU3h7xjdGn%2F7J3Pw%3D\"}]}\r\ncf-ray: a0d9cdd2899456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1752,"size_decoded":1359,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e7c2d08766df94c49ffbfb33ca3aaeb5","sha1":"649f951bd6cd3a9492f5e71dc8599da6ff4467c6","sha256":"8bc146b03f6083f6f19f33e314bc52270887407cca4345b09909af5952e83f11","sha512":"90ead8d0fc8cce98a011c51d33c5247962d400f40fd27b72e374f46ec3dd331b57a74d6e4e8c21725292071c0c93d27147142220f12f1c3047dae983c16a8dde","ssdeep":"","tlshash":"5b318f9a72f310708767a23abbaf5785253491033442ed9c7ddd42102f51d52a6f7fe8","first_seen":"2026-05-29T11:19:07.333343Z","last_seen":"2026-07-22T21:33:06.640057Z","times_seen":34,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-cards.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.006Z","timestamp":1781780570006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/js/block-cards.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a22c0c8-214\"\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CX1fLxsbkejKoTcjG0bh9%2BKd5f0z8sLmFzug%2FMJ%2BYlpEA7wLBQvOLb8chWM6Y7iX0Z%2BTHsG9gUpUiavEgR3%2FAp%2BNaQ8eOR6Cjku74OVqhYzziHCJncEP98LQN3KBKAm1%2Fvg%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9cdd2899656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":1017,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c79a6e82ca664a022fe0ba27a3aa92a1","sha1":"5456648e933a8fb5764c05c00687af8dd2d4cabb","sha256":"710ab8e8b52be5f2338f028f9e60c41b7228905970305f20a55b9edb3776307b","sha512":"637c4e582589f43468f8c2f63a25e115e21408f2b9fe660ac4d0f752072275ff3d99576843d198df00919c7a9e3f0a2f95fe154d82fedd1bcfc40cd0d74ce7e3","ssdeep":"","tlshash":"7bf0e51700b05031515b203d4aeee649b7e490036808ba11b98c4109efd9b7a65f65c9","first_seen":"2026-05-29T11:19:07.308261Z","last_seen":"2026-07-22T21:33:06.61177Z","times_seen":34,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/stars.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.030Z","timestamp":1781780570030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/stars.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-1d22\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWsyP0eGWsrZEWcLDa%2FcDOAWdjym225xlZahI5WY95M6qn%2FrRBUj4cxcol4BRKBDG%2F1E1gzStjkCQ6p7n6pDaa0hPU4kFlT5r3VjnRmBaBid0CIkSUAv9EURhY80LdEn65Q%3D\"}]}\r\ncf-ray: a0d9cdd2b99b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7458,"size_decoded":2736,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"014a0e3b61fba37a9c6fc12662901ef6","sha1":"d54b604534f25a15a46beaadf4254ce5f88e15bf","sha256":"e90bf9cc25d153355a41b65e010557055032a2dedeb905362b340bfa267b10ff","sha512":"48a788a683542461581ef176642bebf818a7888cf87d99bf38b09ecf80181de494d92dec96ae36d8cbf56008f8f9966c9542dd2fa6a55e00b25e7c1dad54a4c1","ssdeep":"96:T53xYfmhdJbQep+MA0NoKlUR3t573bcIhue1fRqzlGNv5yDa/vt:d+gAMA0N83t5ncaJqzlGjN/1","tlshash":"e5f1a6f4159cb3a8c302dfc1cf6922f469ac76fd67de8b61e3b06896783819ac5448c5","first_seen":"2026-02-01T05:35:27.98436Z","last_seen":"2026-07-22T21:33:06.628182Z","times_seen":104,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/sec-b.webp","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.293Z","timestamp":1781780570293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/sec-b.webp HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=5,i\r\netag: \"6a22c0c8-6f86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOhBV65yAOWRl2fNjstV0fBtviBmaH%2FtVM2OHjPGlJedfm%2B7aU7KoVDCiz78EadHwG2IGQhtEu0uU44vR4uti6JTpCYunYBfsrAPVb%2F044j%2F6hCyY52hxHBd%2BGiZX5MphYo%3D\"}]}\r\ncontent-length: 28550\r\ncf-ray: a0d9cdd459ad56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28550,"size_decoded":29288,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47970bfc7e827a72c5144644617bf884","sha1":"10d90d462c590e9ca2240da4e99fb5034c04ba2c","sha256":"be1ec2a169b943a5297c2d04b74014b72763b06edd0d6a5da02584c60a8a1b15","sha512":"7a5630d58d7697318510757f869a62c2ab732fd9f61f447b3358cca4e24dcde01e7d950f6ad5a7c97165fd7bf702e6b21859596745c6d9e1265611486c30b3f8","ssdeep":"768:ESizQmpupxgHPrgYCz54lSeRFzgDMAMwOlSE:ESgQmp5PYdmDzgDM6ISE","tlshash":"d3d2e1b761d71f632c72c1b86e48e80976ec84be0f4a3886c360757e7615724d2f4ca2","first_seen":"2026-02-01T05:35:27.999381Z","last_seen":"2026-07-22T21:33:06.632852Z","times_seen":104,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/binance-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.299Z","timestamp":1781780570299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/binance-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-118d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9axDb3RgbQfOEoLdiGsZdnVVv3MJUwEw6YILKbjOu2Ess1zwDNkY6G1hgoKwuFKFhSTt9iGDIq4TY6lt9BIj8AA1WW0%2FnmUHQfJY4%2BrEJKujzN15LH3EWd7brtQ8Zt0NZU%3D\"}]}\r\ncf-ray: a0d9cdd469af56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4493,"size_decoded":2771,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35a001dceb5d304e217ae7dcde7b9328","sha1":"756564a2c8c1eee3b30be5389524025e57c6f9c5","sha256":"744973c7abb9be82e61288f0dfd09338adba6076c6dbbdac4463755ac20a776f","sha512":"e99c6d04081a34e672fb23b806931d2c261d5a1338f09e4c81740969a711d0353d8b8a85eba1f003a298407aab72c842dbc8e26913903bec6fe5dfece9a60a37","ssdeep":"96:r4Na2W38JZDx1cvUGHW+cyeDtnIT2aNAS79XJJcQDkHij3bmMXSu:r4NSup82h5UmQp3bmc","tlshash":"c49193c87bec22f0e802abd7d917643a7d1727ff6b81c611c7d09e86549406d4c5adc6","first_seen":"2026-02-01T05:35:27.975741Z","last_seen":"2026-07-22T21:33:06.619914Z","times_seen":104,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/validation/intlTellInput.min.css","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.731Z","timestamp":1781780569731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /validation/intlTellInput.min.css HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-3bfe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDwyNeKHt%2FC6Xue82aPDGSxQKxZ8gsQyfFWvONmygOv0gcqXA3%2Fv1mc6DjvpSkUPcFkNnKNgEWKawK9vzqFTEiU%2Fh8IIBFHlG0xtSxt%2BdjDKoCcH0nkHru%2B%2B5ifsv87oCTs%3D\"}]}\r\ncf-ray: a0d9cdd0d97c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15358,"size_decoded":4152,"mime_type":"text/css","magic":"ASCII text, with very long lines (15358), with no line terminators","md5":"27f3ca4ca9a401438a0ce7df6b4fdb75","sha1":"ddf04596ee636e5af007dd41f26d224157612207","sha256":"504af9f2b61d09f92ce112c6a35100f32fcfc456a0e7e701a31a1ff1e71627b0","sha512":"68a83d4fed5935da504ce784fac4276b8ab3598a25497306ebd1b8f36205f9a826537d6540396ac9cbb97596e10b61e57b6f437be5f2900bd83f916ea89e48f5","ssdeep":"192:eRjvqrrF59XnX/zSuOhOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKaJWRCl8:F93vIhOEM7egCl8","tlshash":"9862a8130308953ee716c1397072d5fd3fbfab4178d6cad5e6c8821f988798089aba59","first_seen":"2026-05-06T12:51:42.484911Z","last_seen":"2026-07-22T21:33:06.617882Z","times_seen":66,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/css/index-desk.css","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.992Z","timestamp":1781780569992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/css/index-desk.css HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-3b95\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3nvLQkkL032p7232xpLvyM%2BR7tbOiu5qYq4ELmQDLVGkss7upANdjGW7RjPkkWnax59xirGtOle92VIYRJgHS9q%2B40mwcEFBj3MXq1z7P4w6eue2cZxJz9tsPGl0c0BrD8%3D\"}]}\r\ncf-ray: a0d9cdd2799056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15253,"size_decoded":3197,"mime_type":"text/css","magic":"ASCII text, with very long lines (15253), with no line terminators","md5":"dc2f0f8acd342088b0e6d5876f73c3df","sha1":"8d82f24195867228a2a078db72f83c99e2fd09cf","sha256":"5abe5d5b844996e5b8537d508d28c24a361a77b2d7d9a548db3b35f9ae70de4c","sha512":"ccd0549c9d6e6dee700e1bd84943d960f378cb4a9892152d8e672314c4f9024d09995eed7517b0af4edaaf9e52aa49209ae749c43f181721542df672b1fc5cae","ssdeep":"384:gGcEzQEUm3qzw9Wby/v9XUqMyfUqwVdhMMQMCIAO6PWV:gG/QEUm38w9Wby/vBUqMyf0","tlshash":"a262b198a1103209e657e43b3c9f6e488617a230e777a5bda573311ccbde3a51063bde","first_seen":"2026-05-29T11:19:07.315021Z","last_seen":"2026-07-22T21:33:06.650457Z","times_seen":34,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-benefits.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.009Z","timestamp":1781780570009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/js/block-benefits.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a22c0c8-1d7\"\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLodGarU8pEv9DQw0ZvINwrM5l4%2BhvUKgvFIpMGiUAsPSg%2BVrj145cizcVaQMuAAi5PnhPtKvcYa57JGU5G%2B%2FX7miKpHH9WV7MExkcT%2BzMbsyHE2SrLX4tq9ZXrk8NI1Heo%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9cdd2999856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":1009,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8dbd35fd0037e320d43d218945f8874b","sha1":"948cbefcbc63b66d735502e83db7d11da289b1e7","sha256":"827de3e56f86d46f3624f5ade3700be6217b8fd710a0158b737806bf25c814d1","sha512":"24ee97be54894d6e98c7196521c542787ae70813482240e4cb34dc1a0311f132baced53a0a813bcf752caa52d6d356c9a2b08f080e83e8fdd8b416f8069a740a","ssdeep":"","tlshash":"80f0ed1704b16036521b141d1aaaea49b6d8c0079801ba01becc5a09afdea6e96b71cf","first_seen":"2026-05-29T11:19:07.344329Z","last_seen":"2026-07-22T21:33:06.609517Z","times_seen":34,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/ledger-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.309Z","timestamp":1781780570309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/ledger-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-d5c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRUSB7DqbaaOiDLV7q3dz8VGvxHo1Vtm6N9G96%2FZI7LHNTQQ7w%2BMFpcg6nb%2Fa3HQ82FTCCprhGQkqu5wgPu6LMt21n2k%2FJiz3JyN5waCs%2Ba3ZMZVIPpOjnOn0o6Lx5%2FkYu4%3D\"}]}\r\ncf-ray: a0d9cdd479b456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3420,"size_decoded":2317,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2701dd236218c68e506257127151a98","sha1":"dbb9c8e8d180f2edb5caad16017adeb99ad24637","sha256":"a188ab0cb689c9d51976cced1034636b097d5bd4fbd49854cf3261c08e583db0","sha512":"928b21138b211639a30345ec3bda91164f8d727cb9e7e348b453da15469a37dc30cfa95932c313269a68d2c0993e7e10659e4eab0e496775eefc69f29fe8213d","ssdeep":"","tlshash":"b36185ce5fbb19e8f84ae3fddb0268bc341678bca562db50d3081a46f14245c8531d87","first_seen":"2026-02-01T05:35:28.000228Z","last_seen":"2026-07-22T21:33:06.616292Z","times_seen":104,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.453Z","timestamp":1781780570453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln; _ga_BSYHL1RNXB=GS2.1.s1781780570$o1$g0$t1781780570$j60$l0$h0; _ga=GA1.1.98486226.1781780570\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-48d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeEgYjUctyuPOoQs4Y1g6Z5WNQBF9RdAwynNeg3IpOuOzuhiOVG3lqT9S2CraUhL9EZ%2FgZ6XcZ%2F1QA4hYbTgDJ%2BoByi%2Ba8WxtSiFE3SWWD1m9tiUVLfoeSi6e0SWizUeb%2FI%3D\"}]}\r\ncf-ray: a0d9cdd559bc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1229,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ecc52ba801200f4e6e07bce14f5b2c0","sha1":"22f3381961dda0a6f700233be04ab2e1dec173aa","sha256":"476889f1bd277c069ef21987bc4af168c0cf339d1f1c775ddcae5af482c7460a","sha512":"e059f288819e5d94ac593d24e90948529e4e8ab7541deac613b50833e008235c2a3ad87b72ab9bcc5fea6192114179242ee0cd58108273bec7c36530d0372af5","ssdeep":"","tlshash":"77216b66b22ca418d32383ce224638e9303fa0ea771603c4c5c42e6f96646c61c3f6dd","first_seen":"2026-02-01T05:35:27.974168Z","last_seen":"2026-07-22T21:33:06.648646Z","times_seen":102,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/css/style.css","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.735Z","timestamp":1781780569735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-318c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5qpzdDgFfN%2BFPwinC7NAeb18Z9rETp7RCWtJQGuZhcz%2B97mXO%2Fij20Pm5eEM9CzHK99nQ%2B5WSTtAXokp%2Bflfg2aE1W4EVu6higRe0c63QzGqqL2mt%2BUNbyQX9NV2GhdIdo%3D\"}]}\r\ncf-ray: a0d9cdd0d97e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12684,"size_decoded":3755,"mime_type":"text/css","magic":"ASCII text, with very long lines (12684), with no line terminators","md5":"10987acfda4791e45892c100fb3eb9fc","sha1":"d1059c6900632856fbb8910866b9b323d214a98a","sha256":"bc11191d335bd9bd4e0af727b83287e6ad03242380b49af7f8d24809555f24a4","sha512":"82cfb4c55b45d91491adc0acb4d685c7665f20f9d2e1ee72654612c3f19fb32d53dd451e4fa187e357338797c9cd062c048501b3a0e4daa6c2d998fb39aa4946","ssdeep":"96:1ojX+/UZ7pI4L1j4fXjRO4ReEn7lBNupEv/YD836oi0GNN3LL1vTeherZ7qx+5oE:MzM4JCsrEnOX17eIrZaEvbJvgFc","tlshash":"2642322572052304a61be158bfda4b1c533ca511e217d2febf9e3a0e96cf16416b2bcd","first_seen":"2026-05-29T11:19:07.294053Z","last_seen":"2026-07-22T21:33:06.606731Z","times_seen":34,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BSYHL1RNXB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:49.995Z","timestamp":1781780569995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-BSYHL1RNXB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\nexpires: Thu, 18 Jun 2026 11:02:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149362\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424484,"size_decoded":149966,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"dfe49d4ef2f594a6a0b26ebd2197b49c","sha1":"71738a8ba5e2d79a80f922fbabd94ea8eb72e450","sha256":"897e6bbd6aeb4237c5370c0a5cb97dcfac11bf62dae78a11213f4c981dee7448","sha512":"bd888cba3b883aa28c8e3428e71d6b2a81aeed45e86aee75044e9dd17f702428a0e897441207bf38e7249f6dce5d79988b37d593b267296dd5b14b30b21b1850","ssdeep":"6144:Tj4g0DAFmvq/uYJycf7paX9Z08hdAYOyuInyBLJ81oK:/v//uYy86+4","tlshash":"a094f9cdb3da74629392f478503f018ba17a69e2f448c899f186ccd42e746998277f7c","first_seen":"2026-06-18T11:03:22.459932Z","last_seen":"2026-06-18T11:03:54.887968Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":42,"receive":57,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/fonts/RobotoCondensed-Bold.woff2","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.232Z","timestamp":1781780570232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-Bold.woff2 HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://natrivex-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a22c0c8-1029c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2%2FRgev0oT8B1kfCZ3hfL6ujYUFkoFepZmGbXgLtdTqX2RtR3NBGtUIvAg%2F7ZVC9Yq0dxvoKL171lr%2BwNgLvCS%2F9GhhdwJ1jw5r7Hxogurvw%2F0QROFNRTC2WYQ%2FZomG%2BSkc%3D\"}]}\r\ncontent-length: 66204\r\ncf-ray: a0d9cdd3f9aa56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66204,"size_decoded":66950,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66204, version 1.0","md5":"eb3479e39688e6b86a926e32fbce8211","sha1":"fb4a169cf706b05db70496d4ee824b824513b5cd","sha256":"9b8b48a4569e96489a13cda60a878f0ef1e10cb987dd02e9845b12641354b988","sha512":"96bf1c97e9d8a8c10614a6295334d16c8f3406fb854fc9d5cff653487287173eb90b42ec958f7e35d6395882747c8ef68ea65cf454b14c291e1faf513847a458","ssdeep":"1536:iB7TVSmu0xY5/75fi+0nNpreJk/BxNYduWfQ8rN0tuIH0:iB3Imsjwp6axNPCQztH0","tlshash":"f35302676433681bf79a7290b981073059335efec2e8d0834458fa7dd25d2e150b2fea","first_seen":"2025-10-01T02:38:25.778132Z","last_seen":"2026-07-22T21:33:06.641657Z","times_seen":172,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/js/block-partners.js","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.004Z","timestamp":1781780570004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/js/block-partners.js HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a22c0c8-185\"\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJoYr9chlvCjdXzEY1J25h%2FZVBq41ZWRyNZU632xURdN2RRQL62Thfakpz4MdP0uWfkhwZDCZugB17L1Bwecnriwqr4gbq9LmpkJ6xiNjSDF4AH6OBgwOXe3%2FGM6IAjOPys%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9cdd2899556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":965,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2ffe7c551deb8250a1cc07cc442dc122","sha1":"4f9add75741d9bca4fe00e157daae6c9b0badb02","sha256":"06f965a8bffba0d054c5f78abedb30db7b5455fe6e46967680a6c7a0171c3a1f","sha512":"0ad46f632dc295a66d947b96a5dd8b9c829bac0cba4375823d5eee9aa60b2788d74db37fe44ad098bbc6286eee65f27a56b53ae868bbbeba4e2a0a7bc767d7c4","ssdeep":"","tlshash":"bbe07d0385711035550b282c09eef700269cc0038c04be417e5d4d044fce21e5af71cb","first_seen":"2026-05-29T11:19:07.301011Z","last_seen":"2026-07-22T21:33:06.627437Z","times_seen":34,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/trading-view.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.304Z","timestamp":1781780570304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/trading-view.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-e9b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjKmcGlnuxpkpinrln2UoBMGxY9YM6pCmIFAaYOWRHZlZbqCFzdtUZ4ktBmy0tPUZdoVbK0JZQhpq6tIgjf4ywYx1aVtKGp%2F3BUBZR%2BjkmEgf2yfitqz%2Fljn158caybJAU8%3D\"}]}\r\ncf-ray: a0d9cdd469b156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3739,"size_decoded":2257,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79b1b46b6609cfb200a845d186a4bd62","sha1":"8d65ce42eb0b3ae30e367db942849d55a58ae4e5","sha256":"44eb37cb71b7e5bc0f39d8f030dcde80db60544b1f2cb3e62a89c684d107fefc","sha512":"3bc573e38ce7006b7d795bd16783812d0d838e86c653ff53337d98e8b4076df279e5033600b55fa7907aea4deec0e406602e8bc4440f8433c170c767017f3b7e","ssdeep":"","tlshash":"207197fe97f4c6e4fe10c762a851252d3607437af537c99c82184eacbba449ca8458c9","first_seen":"2026-02-01T05:35:27.99094Z","last_seen":"2026-07-22T21:33:06.643587Z","times_seen":104,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/deloitte-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.307Z","timestamp":1781780570307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/deloitte-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-114f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2F0xeVFLcJWSf%2FXO5Pq7mRfGDGodWNIFDOf%2B8jML0T33gGX4BSZMj1E1aAxTG3TAHVVV8sgxukSndHbPZj6DBFl2ppUWhHnmDLNPXl4Kfyz7qIwElBMi2GZ879igkERHS%2FM%3D\"}]}\r\ncf-ray: a0d9cdd469b356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4431,"size_decoded":2730,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6285a881129c28fdb30de641e1e0816","sha1":"c8b507f3d04b7f79b30dacfb19d83c9a2ab826b8","sha256":"13813c91955ef07765d51425c95d2e6acef3a7ce1556743f112325dcaafc85ae","sha512":"4b4e1a78eeb05c591bb2202c3f1eceb1b42298b79b5cb9d45ab06695588c7c2409c4936a6f58962783d759f47ff9db15ac3c6713f962efc8b1a7dc5e4d27e2c1","ssdeep":"96:QZa2bP+VaZKmCFIf7go6gVh3QJvvwwoQwS+e5Rm6dfHI0X:QZbFXJfXVgRYwolSHzhd//","tlshash":"4091a6fe4be9256cf908a7eef616846d3e822aec2751cb91c3185e4d345581cec21ce7","first_seen":"2026-02-01T05:35:27.986972Z","last_seen":"2026-07-22T21:33:06.656634Z","times_seen":104,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"natrivex-ia.com/assets/img/decrypt-logo.svg","fqdn":"natrivex-ia.com","domain":"natrivex-ia.com","tld":"com"},"ip":{"addr":"172.67.173.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://natrivex-ia.com/","date":"2026-06-18T11:02:50.312Z","timestamp":1781780570312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natrivex-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 11:20:14 GMT","end":"Thu, 03 Sep 2026 12:18:37 GMT"},"fingerprint":{"sha1":"32:E9:B1:73:F0:8C:34:C9:12:64:41:6A:6D:25:27:BA:DF:8F:0D:DE","sha256":"76:6D:4F:B8:79:7C:C6:F6:FA:0D:2E:1D:20:A1:C0:FC:F7:6B:E0:FB:EA:40:86:0F:C2:B9:D4:C0:97:D5:33:D6"}}},"request":{"raw":"GET /assets/img/decrypt-logo.svg HTTP/1.1\r\nHost: natrivex-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://natrivex-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rt34tfr8ij9f5q1cotbvofdgln\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:02:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 12:27:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22c0c8-2b2f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5niyqqKsSmYhZZ7rDUj3%2BMWssOAjKqiDgV6%2BXr3HKwieYJctpSh3qKopfwOgG%2BSn7ROFXc2D7LI3MFZAJ%2FSJSjDvBahPOpAJlLp1HCadWg1rTdiXMLrYws9seMMsP6J7K3U%3D\"}]}\r\ncf-ray: a0d9cdd479b556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11055,"size_decoded":5747,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0bfdb82b88bfdaca38a61b92992c6b4","sha1":"537966a938067e93b5a528d51a39d9a4acddb1e5","sha256":"84dae5d901c30dfd7212656608dc68da3880b37925e412ed231a31ce0379b3bf","sha512":"ff009f66936f92de9aadfc9a427744c393b2cbb749e8d054ac3503417c9bf0be873b26e2d1791753fb609e312373d1cef0180fda411011b577290bb61df95f09","ssdeep":"192:/W0rqAs/vpx++UdglW3ob5GBAhUDJ0t9VFkkTccJlPiWMFPA38pCNmf7aW0OA7iQ:+qIps4FxUS5kpcJlPOFPbpAbOATXi7WR","tlshash":"9132e9ddbbb462f8f940f3eec31268787a0668e73912ca6cc7ac1d06951244cd996cd7","first_seen":"2026-02-01T05:35:27.968664Z","last_seen":"2026-07-22T21:33:06.622298Z","times_seen":104,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"natrivex-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}