{"report_id":"d31d62dd-2e3a-4b9b-a616-768528c19110","version":6,"status":"done","tags":[],"date":"2026-03-10T20:25:54Z","url":{"schema":"http","addr":"m.tirveavip.cc","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"172.67.220.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pc.tirveavip.cc/#/","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"title":"Trive","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.tirveavip.cc","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"172.67.220.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T20:25:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.tirveavip.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-10","domain_rank":0,"first_seen":"2026-03-10T20:25:57.996195Z","last_seen":"2026-03-10T20:25:57.996195Z","alert_count":15,"request_count":15,"received_data":1353675,"sent_data":7332,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pc.tirveavip.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":48,"request_count":24,"received_data":4295929,"sent_data":10912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.triveltdus.com","ip":{"addr":"172.67.129.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-27","domain_rank":0,"first_seen":"2025-07-04T14:44:29.929822Z","last_seen":"2025-07-04T14:44:29.929822Z","alert_count":0,"request_count":1,"received_data":1697,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.tirveavip.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-10","domain_rank":0,"first_seen":"2026-03-10T20:25:57.99596Z","last_seen":"2026-03-10T20:25:57.99596Z","alert_count":0,"request_count":20,"received_data":67324,"sent_data":11060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/viewse149ac88.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7a199496e6ce305e655511ade5be6c0e","sha1":"e3f5d8c584dd91d85228d8bae46812472e5bf8de","sha256":"b81f9d06927e197ad4f5c4de3b00eb89cee4febfb0a933e856861e6d50c6ade0","sha512":"7d5fee73b2f7c8a8f0004a1ad224b7b8290d4d1d7cf8c497ffaafe836ee7299eafa0d2179b75ba90da547e81283cadc719bad10c91d1ce2f7e354297ddf9baae","ssdeep":"12288:shFGGhACVLJhJ+qChum5bHvjW/Dx7V2pl46AnPczSAJsLAfPFXI6s:IoHby7V2T46AnPczSAJsLAfPFXI6s","tlshash":"fec46c45a8a9b86c59f7a51db88d3a70609c1ffed202c4d022fc09e623e3d756395b3d","size":570407,"data":"","first_seen":"2026-03-10T20:26:03.757495Z","last_seen":"2026-03-10T21:55:15.719229Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/vendor5f54cb35.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"74f38ec2b335e7e138439f4b39de82f3","sha1":"5d2d773a4bb5438b375dca5ebfa90fedec9cbe4b","sha256":"1f3084d9bfd720e35004e1ad1860e266dbe4f89c568fa574e28fca153e88cc5a","sha512":"9fd58e44b2f23bc2c9460a466868d455c3ec34e62a6daafb69924535c1c81a8a0f6d28bebaead14a901b4d6f37b73a18610fc6020747e93c1ff7911bd919508e","ssdeep":"3072:f501zkOJbgC1LWDQ07O5mTfHvhozxDT7woeC3AI71tmYJq:h01zk6bfV0CmjZoR7woPw","tlshash":"0a142ae93182b46253ba19f640771006f3792819380dc894f2adecdb7d7b84a91b7f6d","size":204846,"data":"","first_seen":"2026-03-10T20:26:03.695565Z","last_seen":"2026-03-10T21:55:15.718415Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/entry/index2631f6a5.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e596addec970dec02dfc1a32435543d2","sha1":"8124384723b9237a0c4d115ba8d2f7d5ee01285d","sha256":"10a59660f5dbd79f59ae27abf95e1e5c71095f51b96e332d9b7b9e5d44baf619","sha512":"6197bb143e9a55570ca181bbeb8cf9d5459c8275f8cb1c1eae697eac1614082613e56002e9703341c6c68dc81e41bf2c0ee4a8be8a9e8f12fc6766fa32894259","ssdeep":"384:I9qHKAxCIOKWbTr9AtEtJ7RsNe/LYXDGuVow8QwdNK18hEG918pg7:qqHKAxCX1XgIhqUjSVow8XK1tZpg7","tlshash":"93b23bf91b6884fc91d74baebf2102846f1f64bb76e585d0e1af8f649287d84e107e40","size":25216,"data":"","first_seen":"2026-03-10T20:26:03.657964Z","last_seen":"2026-03-10T21:55:15.707585Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/chart0328bd34.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8602f9aee688c843654f6a5464ff3407","sha1":"17d28cbaac4fd692cb2a0546df1568c22e9c4aab","sha256":"4a25cddcaae4be5b252c9f7551214552a37d015ce836400d7520d44cf6cbda63","sha512":"2a6f15ac4badff22b425bbe51aec9603848fd53ace3478a5de89a7926e002e18fb1bcf744e1e748148b8d59c7b4be52ffb1f0298527c2acc7024aaa48f2ffe49","ssdeep":"3072:xHAx+wOQrhmgeFVXmMuomdPFNKqJQN2ZPQymBJZTyuG6:CxYgeFVXmMLm9FNKqJQNGPQymBJZTyuD","tlshash":"ef04d8c4f66170155263a1b9423f1907b336369e944b86acb56fc9da2cbc0ca2277f7c","size":189869,"data":"","first_seen":"2025-10-09T17:34:39.544386Z","last_seen":"2026-06-22T17:08:40.911409Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/requesteec687f7.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bde7183681130228c176cd888e66815b","sha1":"25a2c98c0080410712caad48ef8ac03c8d4a4a46","sha256":"45093c5a5799804ab4dacf5798417775bd7dd0f33635fdbdebf264d1135f59b0","sha512":"a85f78c54eb46ca785060d09e4071a8b36a090c315c1f31ee05af727efeafd4729799db3c05a7d0617bca23f230f677d87277835777e202c51d4d50e3c7afd29","ssdeep":"768:nlSfITeQKms7ELPs7l299XLRKGeHAZjJ0hbYacqhEnniFbzFOXENfMXyIOIH1jWI:i1NREE9Fyx8+qnF9Y","tlshash":"0df229d576d2b06153aa24f540af0502f3399629b40d84e4f168aceb2cb610f97bbf7d","size":35946,"data":"","first_seen":"2026-03-10T20:20:45.850279Z","last_seen":"2026-06-22T17:08:08.087486Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/router2125594d.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"19bcfaf36354732c28665e63ceb451d2","sha1":"1c62ff74019f166f020757723512560b6ea09ac5","sha256":"d37c0eacc21aa548d826ed64bb61f992b5897eafa17bde256169f16e31f9ff32","sha512":"de989b38eb47928b725976353173c1295404dee84eedb63371ae63b855038ba763996bc67ae34dc2156906ef8a50c9c2465bebaf635be6c7ac203b67ee21d407","ssdeep":"768:BEglS0zTfCrCoKKCun9Y5L2wdloaM5TpNK3ums0YIwQ2O/knU41t5eQ4Kp5+g5FE:JlRCO5H7IpYuz6Pl","tlshash":"1eb2f8e63382706597fa1ae5517e1201f2764986344e84d0f22cad933c37da9c2bfe6d","size":25508,"data":"","first_seen":"2026-03-10T20:26:03.616729Z","last_seen":"2026-03-10T21:55:15.719735Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/uifcda0fc0.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a7a9dc33413c36af8eca9254aea0735e","sha1":"396bd23ce71d6ef06f5ba2352e5f5da699132b82","sha256":"534767a5bbae0f18df13a17741a72cbae3845fad108ae4e818460752c7d50ad8","sha512":"14f993add697a4346c5c4e13a2ef9ca45bb247467323f64da6cbe11579e62dfce3ad8a1a2f3fb64708a4322e7f998b949a9a6a06987c78627fbc29e73a7a4b9c","ssdeep":"3072:CLvZxq+0o8JKeBKhELFN3/CBzJ0fA5iRn2JroJqCXRcQ0R+75I7BgUzx1AXLF/7w:CLvZxq+0BKhsFnfA5+P1k45I7BgUz/6+","tlshash":"84b35ba1b587b93c5b7b9489409a0510b62c1f99f00dc8e0f0be6e4627eddd4b1b7f29","size":113801,"data":"","first_seen":"2026-03-10T20:26:03.732678Z","last_seen":"2026-03-10T21:55:15.706308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/entry/index4567d495.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a83f1f917cd404db14035caebeac824","sha1":"9ecbf3578a85b67325ba1f3e42d2a264dbbf7fa9","sha256":"86cd9df2773396e2abe1c40b2e632d5959d0580b97f07884774932142c0726ac","sha512":"732865d8d645ceb483c2408e99ebf63a681809831efabea26549b2a629ceb031fc397e3b4b19268daf7697890144ca5e46e68eb3ea8a80ebf27e68a3eca6b738","ssdeep":"6144:CKg/FRGZC/TbOG9AChTY7mc8dWeLPvbXgAnr:CKg/SOTbOG9AChTUX8LPvbX3","tlshash":"8e445c3b489a1c8c18f3e71af4ce7b1458d81ceabb86d4c51aec493812f2d199657e3d","size":277123,"data":"","first_seen":"2026-03-10T20:26:03.76031Z","last_seen":"2026-03-10T21:57:36.067131Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-13T15:35:24.126049Z","times_seen":41408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-13T15:35:24.126779Z","times_seen":42873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/i18n17a2f836.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0ae0e2edd695fcd61ab48e680f14c160","sha1":"2c7b398c18118b587f1da722ba313b6db327856e","sha256":"e74fe628dd62f0bb2cfa174eeb5efab96ca767210a1d55929653cc029290cfb7","sha512":"2a108426e77a3c37b792054794564d655f4b64cfe5eefeec08736c9b927f64752d2af0afd2d7d8e95d285ede6c472ee6957f409d0ab9260d424d7869d0fc20bb","ssdeep":"768:6PatiW/GyHIhijtIRGySrZyBtnUL8IKoYpvbGlOMugxAlXYCfIEa+48rVBx2YsZV:nFWhUIxUoI+l/4C2","tlshash":"3fe2c7c771e770020b7586e671b321139f2d0b5d386ee8d8f8a9e7872a16c5e43a6f14","size":31828,"data":"","first_seen":"2026-03-10T20:26:03.71776Z","last_seen":"2026-03-10T21:55:15.720238Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/chunk/vendor231cdc29.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cd2e733ffb4652bee0c098a10f6cefd9","sha1":"c4399b6bb65554a5896406f4b30488213414de0e","sha256":"37221d70685ca1169d5ad6f00b810cf4b51d28568458a270b6a8d79c6d26382a","sha512":"26be0c384521718872f15342f18ba7b4d8fcf4098ef60a93d9eb944cc4749c7407648655f8435616f25e6e58f277dfa98f9ee96e31830037e7325f41929039c7","ssdeep":"24576:IkevNsRnA0I5MOQPkDI+01fXvWniVV2eDR3zSS4w8vr/3K:IkevNspA0yMdkDD01fXvWniVV2eDR3zD","tlshash":"be456e94ba55b42847b780e9107f0002b33e269db40d84a4f1bdddea296bd49e277f7c","size":1206897,"data":"","first_seen":"2026-03-10T20:26:03.764869Z","last_seen":"2026-03-10T21:57:36.067826Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.tirveavip.cc/api/company/getCompanyStatus?t=1773174336842","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /api/company/getCompanyStatus?t=1773174336842 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDZVJxOUJeZJNkPVijExCGP7%2F4wGxD0fTGWi0v769LX0nVrr5pikx4UKhy3QWDxHgoedAkJuCZ2ZMfi9Td3u6zih3uYPtsQT8ylyeAwE2%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50cb58c39a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/basicSet/getBasicInfo?t=1773174336846","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /api/basicSet/getBasicInfo?t=1773174336846 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\nset-cookie: trive_session=eyJpdiI6IlhSV0M0SlRSOGhFSmVaVERTRndUUWc9PSIsInZhbHVlIjoiTjluS1l0YWFpQ1E5dFJmTFNpYVgrV2dTb1V0dUV0U3BoaFBTR0k3bDV1d0FyOEs1d3RHTGlib2JLd0ROM1BNMmNmOUdtdzl0OE9lT3FiV1JIYkFaTkI1TndwU3ZXUmg0a0RoTUdcL1ZlODRNNzhxdGpBaDVpZ01UaFwvVnZPczFqdiIsIm1hYyI6IjA3NGJlNGVlZWI3NmIwYTZmM2FjNTBiZjYzYzEzMzRiZmExNzY0Zjk1MTlkZmMzZTE5NjBmZjMwMjk5MmIwOTgifQ%3D%3D; expires=Wed, 11-Mar-2026 06:25:37 GMT; Max-Age=36000; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pT8I8Eo5sS4WE1TLO6ZDZW6KUFpemO5dlV3hxKI2O5MGuGrJHwDgfBr2%2FFFiPoiz4rPIsay3SPXcgCfKmMrUA7ocFLt9CtQTmyXKWUlZXBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb85b6fa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0bfe4c5bc7ed9511457c9d19cf4ccb98","sha1":"e821b7ed72ba60e5ba895e0ba51f675b917d3374","sha256":"ff6fa13a48b5db579b7af22af850a49a43a002726362d694819b4b42bba2ee47","sha512":"18ccabbc9db66808f1d927a2587ec91ec48b3e9e4167e71238a032322b7e680d0018a811215cc63c88597a33e0306b32727431e78767093d31062e29e37cb113","ssdeep":"","tlshash":"cbf02be071fd51a1d2771192acee6507705f644d8c84af63dbf40618a186c5e264f41b","first_seen":"2026-03-10T20:26:03.610425Z","last_seen":"2026-03-10T21:57:36.05124Z","times_seen":5,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/user/info?t=1773174336849","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /api/user/info?t=1773174336849 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\nset-cookie: trive_session=eyJpdiI6IkpkR1M0S2hYU3A5SkgrdkZjWGVaV2c9PSIsInZhbHVlIjoidHVhQ3ZtbGRrYVFqRmMzOTFJMHBmQk8wQStNTXFYQ1RcL0JqN2ZIdnkzNTRlbTVQdU9GS1hxaEhwUWdZVDIxbnV4V1dpdmQ0eXY5S0wzWEUxd2VjN1pjbUpBQnUzMzZYc3Z1anFRQnAweFwvQ3ErWmIxeHI3Z1JzbUpVNU5OUEZ1MyIsIm1hYyI6IjU4NzljYTE0ZTIyNzUyOWJjOGNjYTFiNzZiYzVkNWI5YTE1Mzk3ZDgyMTA1NzUxNDEzOTYyNmFlYTQ1YWU0NmYifQ%3D%3D; expires=Wed, 11-Mar-2026 06:25:37 GMT; Max-Age=36000; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDaWSv%2BXlrL0AoRbQzjwkggOYURaC7Mi%2ByO%2B1QYQZQ9PRPv7NFRxT0Kr1HPA3cMELvlZd3umOmYZ5hohxZYQXkTXHyGR%2BokRY6vCP3ZcgeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb89be2a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7f1766c7a443d23ce403a825e98e969","sha1":"652183edee25a8d330833c6b4e001d636f183aef","sha256":"b88ebc64268dbebbafc19609aa684a323e676b48d8ef97cc8c032721819c1e23","sha512":"8b9f468f8b52e3944be138b4536d0b4719c9beac0351f25797bd9bd90c6e4e4e65a989f163d733f286da2a9d6b4036e6184b3e85a1959a61a4fbb965242a77a4","ssdeep":"","tlshash":"2880044f000c140311070055540c11100f54145001c1d3151d1d053410fdc4c17c1035","first_seen":"2025-06-01T05:36:04.794467Z","last_seen":"2026-07-23T14:17:29.058278Z","times_seen":194,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/forex/trade_list?t=1773174336847","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /v2/api/forex/trade_list?t=1773174336847 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZAPA%2Fy8lFn%2B6X50tbMckDZ%2Fzs98%2FUozDQO%2FHtXN3%2F90n6hm3MGHXe%2FIkquMT3f1mK5EPJd26Xr8IwpqBufHKtpKtcfDd%2BQnBlqNA%2F8YLuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9da50cb58c44a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/user/info?t=1773174338556","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /api/user/info?t=1773174338556 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQ4VrKa9daVfm8sPsP9xUGU%2FzFkZrmjuhBxwzx%2BGsbaJITP1Uqn7ra6Hw%2BEWswSroNjV%2B7qhr0jIxbMVAAZA6iO85clHJXHA%2Fxq2fkUKGG4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50cc9fcf1a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/router2125594d.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/router2125594d.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:16 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d024-63a4\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKCtdWVejQ1EdLK0e1%2BGECyf74%2FI5RIe75%2BbayUPWWIenc%2BM1zO9hOQt9z2SdukWZPh8kdQdRER4tfe6%2FboTSi7uP8PpUQQ%2Bhv41Ur10\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c8943a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25508,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21592)","md5":"19bcfaf36354732c28665e63ceb451d2","sha1":"1c62ff74019f166f020757723512560b6ea09ac5","sha256":"d37c0eacc21aa548d826ed64bb61f992b5897eafa17bde256169f16e31f9ff32","sha512":"de989b38eb47928b725976353173c1295404dee84eedb63371ae63b855038ba763996bc67ae34dc2156906ef8a50c9c2465bebaf635be6c7ac203b67ee21d407","ssdeep":"768:BEglS0zTfCrCoKKCun9Y5L2wdloaM5TpNK3ums0YIwQ2O/knU41t5eQ4Kp5+g5FE:JlRCO5H7IpYuz6Pl","tlshash":"1eb2f8e63382706597fa1ae5517e1201f2764986344e84d0f22cad933c37da9c2bfe6d","first_seen":"2026-03-10T20:26:03.616729Z","last_seen":"2026-03-10T21:55:15.719735Z","times_seen":4,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.tirveavip.cc/v2/ws","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /v2/ws HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pc.tirveavip.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hyJPdrwIe/6q0GIEM1JxEg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 10 Mar 2026 20:25:37 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: XqckG4YjqohWyoYA4BhRPP/QSIo=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1Tki0L7ulgG2rTRvM6B9SXFsAhzHnPeikpSjiRkM7%2BWntUH4%2FHGR2XlugmMJJNsaw%2BHo50Gxl262rCutdLWNdEvywjWXXk6mG5Be6DV30ZjaWa8O4I32FNzHJUoe8Jzqnfya\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9da50cb59f984651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7804\u0026min_rtt=7601\u0026rtt_var=1912\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3187\u0026recv_bytes=1288\u0026delivery_rate=527568\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=4fed35002131bc1f\u0026ts=217\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":205,"receive":9,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/chunk/home134bfa78.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/home134bfa78.js HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.tirveavip.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-5a038\"\r\nexpires: Wed, 11 Mar 2026 08:25:37 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eesssNXsazRGRvcid%2Fx8mo5CaZy%2FbtXjE9qYfI3sYwmUZV0P5as3%2F39pNxVtSgHC3PEFCW%2BhZmlZUirIKcQJorwNHHWUFjjb1yAdS%2B0ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb58c35a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368696,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"26b73c3c250e6bb2772176e6f1815be7","sha1":"26fb166bf7ecf8a7814ca61604a5b2ba22f7f9c7","sha256":"f1b91a574bc5ce9493acfeacfced6696111baccb713996eb674e650a9fd3da54","sha512":"d66406d7d5e05794616511a6dc59af1911af62f1094b4e91173d4a1c3b61af4534f36a8ff0d40dc10358b50a5260aa96fb9e1ef44c7da56b30c630cf2b65386f","ssdeep":"3072:FNRDfLlvivTRPPAxU5jrAaXpRawFljd2nPWqfsjP4fjyn5hWZBx/n2Y6K2lOL+2v:FNRfLlSgf42eMf9KlJo52a","tlshash":"d2743941b266d7f9e6b3159da059b000b1143feef681c8e1f0fd8e271aa2ce0569df25","first_seen":"2026-03-10T20:26:03.621024Z","last_seen":"2026-03-10T21:57:36.05813Z","times_seen":5,"resource_available":true,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":545,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/user/info?t=1773174338556","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /api/user/info?t=1773174338556 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\nset-cookie: trive_session=eyJpdiI6IlBvU01VUDVNNEhnZFZWT09HcllSdHc9PSIsInZhbHVlIjoiNFliN0lwXC8raXRaUFwvSmtrRGt1VkdyTEhwaHkybm82RENMREdGOXBCQUd1N0RTMjRNeHZnWVYxQXNkNDEwQWVGOW1CQkhuREVcL2NHVEQwUE9mZ2ljeTUwSVZBc1FOcGFjcFRPaEtKQ3VGMGZXR3dFOW51VnhzNU11Y2pcLzNDaHpLIiwibWFjIjoiMmZjYjE1NTZhMjY5YTkyNzlkN2JhMDVjYzc3ZmJlNGFiODBmMTM2YjBhNmUzZmRhZTcwODg3NDkwYmZmNzk2NCJ9; expires=Wed, 11-Mar-2026 06:25:40 GMT; Max-Age=36000; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWjipBJLPzXWzi8OvMShgin7gIF9Bv6o4o4VDHyq7IaeNj44PeiRUzhf%2B%2BaK5p7rzX9UGZE62Qpi4WcoClrRqeJU5RlDwFyjAycgyIySt%2Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ccb78bea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7f1766c7a443d23ce403a825e98e969","sha1":"652183edee25a8d330833c6b4e001d636f183aef","sha256":"b88ebc64268dbebbafc19609aa684a323e676b48d8ef97cc8c032721819c1e23","sha512":"8b9f468f8b52e3944be138b4536d0b4719c9beac0351f25797bd9bd90c6e4e4e65a989f163d733f286da2a9d6b4036e6184b3e85a1959a61a4fbb965242a77a4","ssdeep":"","tlshash":"2880044f000c140311070055540c11100f54145001c1d3151d1d053410fdc4c17c1035","first_seen":"2025-06-01T05:36:04.794467Z","last_seen":"2026-07-23T14:17:29.058278Z","times_seen":194,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/home529e5c0b.css","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/home529e5c0b.css HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-cb0\"\r\nexpires: Wed, 11 Mar 2026 08:25:37 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pNxCk7K9PX4PYKqdYS5KaFtCbzChbk%2BNzDkg64KRv1yEBiCCokR%2B%2B%2FWF4L1UdxjX1fDJEVcaJ%2BS8tj80pTrVFEX7H%2FvsTHRwvnqi3fCCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb58c34a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3247)","md5":"1854a420bb2e0a51b92ed26bcf86b446","sha1":"490d195af6d39f3f45fce1d1e14028bbd26288a1","sha256":"529e5c0b412daae389b7c967713f389f96fa8fd0fd23b8ea8d92c88d15403702","sha512":"8ed15babe21b8083401c4be0646a33ae57f9a2707a0507466505ec883f398f2e5915822a9ad30f808f20420a6cb5fc5152b6eed389fb09805c4b54f2bd632e0f","ssdeep":"","tlshash":"736152b1e795063e740bd979b1e21adca72ae633e2010735f6442338d2c71a615b2b6e","first_seen":"2026-03-10T20:26:03.625576Z","last_seen":"2026-03-10T21:57:36.057506Z","times_seen":5,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/chunk/home134bfa78.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/home134bfa78.js HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/assets/entry/index4567d495.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-5a038\"\r\nexpires: Wed, 11 Mar 2026 08:25:37 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFDa07EClDjjX%2FKex24zXhST2%2FQSixsAEoE%2BcvMyk%2FdfpZFNa67%2FM4SBnpG0x47rwCFGH77eYsX6%2Fkht0JKaDFxn6ZtUmufncm4oaTwx6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb7fa54a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368696,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"26b73c3c250e6bb2772176e6f1815be7","sha1":"26fb166bf7ecf8a7814ca61604a5b2ba22f7f9c7","sha256":"f1b91a574bc5ce9493acfeacfced6696111baccb713996eb674e650a9fd3da54","sha512":"d66406d7d5e05794616511a6dc59af1911af62f1094b4e91173d4a1c3b61af4534f36a8ff0d40dc10358b50a5260aa96fb9e1ef44c7da56b30c630cf2b65386f","ssdeep":"3072:FNRDfLlvivTRPPAxU5jrAaXpRawFljd2nPWqfsjP4fjyn5hWZBx/n2Y6K2lOL+2v:FNRfLlSgf42eMf9KlJo52a","tlshash":"d2743941b266d7f9e6b3159da059b000b1143feef681c8e1f0fd8e271aa2ce0569df25","first_seen":"2026-03-10T20:26:03.621024Z","last_seen":"2026-03-10T21:57:36.05813Z","times_seen":5,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":517,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/viewse149ac88.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/viewse149ac88.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:17 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d025-8b427\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1a43OQlMTJgZQ2Tkw1GpQ0rqTghSqTWMvql0AnXKeZv%2BFynq2UiGu2%2BXVhvAPY56YmOxYYWF7Z63yPACrdWUkRXfzl6%2FEKeru8xcpANT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c8931a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":570407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50728), with no line terminators","md5":"43dc35007863cc8e32d38bcb0c2e72d2","sha1":"5e56430c5bd866b8e2759466eb95d0e8270dcde6","sha256":"420bce648f627c314de8c2d798562698bafc4492409a23552b5e03b09fa4d98b","sha512":"2ca2fccdc0e099c3df51513dec116c652bafb822991276dcae3665671e5344199b1c011af7eb7661cac5862643957987decf38a8586fb1e36bb81ab0fb54ac25","ssdeep":"12288:shFGGhACVL8Vc5bHvjW/Dx7V2pl46AnPczSAJsLAfPFXI6s:BV6Hby7V2T46AnPczSAJsLAfPFXI6s","tlshash":"ccc46c44a4a5bb6859f7b51db88d2b7062981ffec202c4c862fcc9e622d3c74639573d","first_seen":"2026-03-10T20:26:03.637598Z","last_seen":"2026-03-10T20:26:03.637598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":723,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/i18n17a2f836.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:34.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/i18n17a2f836.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.tirveavip.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/requesteec687f7.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:34.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/requesteec687f7.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.tirveavip.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T20:25:34.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SR5mMaxh2MvlXNl9XZxt7ZAT4AQCf%2FBBp5%2F25%2Fbq0DfmxtSSlTBMbCSnT2TqIPsD%2Bkcd0ucemxSIqIYiUKKQFYyMssRkyS%2FcOPxPcHDiHA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9da50ca49c7fa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1645b4600f68659e56cea8f90e5aa182","sha1":"968a009dd6c3449dc7bd7476504d446207de2c40","sha256":"c859b05a45afe136e8e138b7812123a1aa8c5a1bd25fbf7a25ec22bb73e89199","sha512":"d4804e2dbb9dd1fce04c771375f371f05105dff8a8e91970c7f7b62d09d6ba835915fac5eddb3c0d93503f535f1e8ac43722cebca71be05738516486ba21b2af","ssdeep":"","tlshash":"3851bb484793495591a3e1444f9a982563b3d01b920ebc42bfdfa098dfe6b7da8c7780","first_seen":"2026-03-10T20:26:03.640118Z","last_seen":"2026-03-10T21:57:36.063176Z","times_seen":3,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/basicSet/getBasicInfo?t=1773174336846","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /api/basicSet/getBasicInfo?t=1773174336846 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y59FEiY0UiRimAjzKAknuXnAxgv0dGRb7IiSEzbFj%2BZ1tBS9RyRTEssPPCZBdnWxyAxibi6UZJ3Y9IQGh4l9AoWDGrBlZ4fI3ECJ3vGv%2Fkc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50cb58c3ea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/company/getCompanyStatus?t=1773174336842","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /api/company/getCompanyStatus?t=1773174336842 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: trive_session=eyJpdiI6IjlVcFl4Yk9reCtjcjE2SkZVUXBrclE9PSIsInZhbHVlIjoibWJlQkFMUHFFN3VpSmMybmFUNjkxalwvb0dpQmRxbVBsblluNmtKS1lcL2t1bmpzNG1mTjByVm9Xb1RSUUkzeGFoZ202U2szWEt5TDhcLyt0RURlQVY1ZmVvb1d5MjVDamJLXC9ZRFUwOGdFdFEzeWE2Q0M2aVN1dlBydVVwQzJWaXNwIiwibWFjIjoiZWFjZjExZTQyYWRmZGQ2MWQ0NjI3NzI5Y2U3Y2Q1N2FhZGU0ZDY5MGJlMjAxNzIzN2Q3YTNmOGJhMjM2ZDc3MiJ9; expires=Wed, 11-Mar-2026 06:25:13 GMT; Max-Age=36000; path=/; httponly\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BU5Y9ThZ1JEb5ri4%2F5JybA3wSukiEiQqhubOBWaQby0doqFi24PTky4Rgx%2FIw8%2BdAuiQNGQbZ261QVbnWPPa6niCyDNqxlHiai5lMXn7%2FaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb88bd7a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2890fe4b70e8f3b41fb4268dc6042fc8","sha1":"a95c97b381c5fe4cb056c99a1e1ff9d20aa201ad","sha256":"8d23ec74cff6cf945eea5f9e60a896c81f83937b8d1a6845ee17b405d73cfa5a","sha512":"6901c87fe89af42fb018d9fb5d8f40e26db01edb324ec90f37939025be702b9ef33e33a31759cf37887e528c7e4b3ca80b565f01cf39166ce9f0696eba52eb2c","ssdeep":"","tlshash":"d4b09b9474694147696221c4458835539375624349105745565d967440dc0ee6005577","first_seen":"2026-03-10T20:26:03.643278Z","last_seen":"2026-03-16T14:17:38.057625Z","times_seen":7,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/spa84479ee4.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/spa84479ee4.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-20c2\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDCcqIonWIRRxGL%2BNUlXPx6so0QdyECCpkGmd0Irn8JH7%2Fqr2OfeaZhBMjVB58xQGhwT4MyU1tqk5mpi9qEDw8gn%2F43YjjubKtAJF%2BYWCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc4c8ea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1458 x 972, 8-bit/color RGBA, non-interlaced","md5":"e6245ac0f8da16662b1f8da60730027c","sha1":"0f1560e6bc08b0e94bc258fbfca0c7210bfa448d","sha256":"84479ee4cd16a169c8fe1ed2e9dc4603a181a4167d2b6f68ba8eda2d86e452f0","sha512":"18099200046d11315551bd0a2c2619f99e926bcb7c9ac1cec1f019101b447376bf5a97bedf74ece82e3ea6c6ce7bf3b09f943dcf50ff871d38c2e55f477f2087","ssdeep":"24:LJeuhVu/KeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeU:LNhVuGacVOIhxEBei4yMPMJtJZ","tlshash":"8d0257fda316a061fc4230b77823e130a67a31eb451fab5be519b0874a0f5ff91a0548","first_seen":"2023-11-22T06:43:07Z","last_seen":"2026-08-01T23:22:20.399937Z","times_seen":253,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/viewse149ac88.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:34.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/viewse149ac88.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.tirveavip.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/forex/getCategories?t=1773174338558","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /v2/api/forex/getCategories?t=1773174338558 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9Oo%2Flok1xAsqKRCQngyo8GIemwOZ4yTLDtOxZTP2IQ9D%2FEWBTx5E2L7vyrZldDwWXVd5y6sn3WhkqWvUmJPxLf5glorfVpm%2BDNPVo8C7GM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9da50cc9fcf8a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/en140ceb36.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/en140ceb36.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-b18a\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ri%2F9Qla2lAqxLYpHj9S%2BmNw7rtOQsD0hqIgSizmvyKOPqqKvLfFM0ZqA1LUjljfL7pI%2B3jfC0fxWhls36lHM%2BFDRCMmzxJK268TW3oWLcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc2c56a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 674, 8-bit/color RGB, non-interlaced","md5":"bbe24ecfd14ccaf03c3d2e129dda43f6","sha1":"d94634c905fc9f686c9cac6d34b28d7b6bfccb6b","sha256":"140ceb367bbf5b758adeca9edde1a0997636beb738f25e8c58aa8ad4fc0a8b67","sha512":"f429befdc35dfb252955c62c0c7d34f8328ecf78cb30046e7c3805b6321c8d0f1b562a7fb1f7f499f22f149318f7af96f60b3917e6a48289e77515b6cd3f38ba","ssdeep":"768:LDHOMVkhoc/xNEdxnencUk3ybpRL6zuiptHAV3YmYFTukO:LDB0oc/oGncP3ybfxirClJl","tlshash":"8813c03cf8d2b791d11c8937a0d62367dd325e5d2058cba30b09bd256ec0d668beed19","first_seen":"2023-11-22T06:43:07Z","last_seen":"2026-08-01T23:22:20.403556Z","times_seen":225,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":385,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/kr65c1cb50.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/kr65c1cb50.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-3fce\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttM9S0z5DnjjbU8aUgoiUSxiz4Q%2Fv75HK2ctoGmVOp8ksPOtT2Np2T8YtRNH1aXT6H2DHNRLfF9w6iM8dtAtwlnsacSZKUWetEYeBMhcpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc3c61a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 88, 8-bit/color RGBA, non-interlaced","md5":"12026204fd51a2f30b900c805c3ad0ea","sha1":"26ab28adc010c55f84ce5ba2987d60056d5f4c27","sha256":"65c1cb5071f0c761928cd14f5e0aebaace90c854f3e07e7724be1bdde5c033b4","sha512":"f5b3863743e3798cc97c5c04c75e56c4893f86115b65d6819b6e95d5e658f19791a0c6e8b10196a17d38f61976660558c26e17aeeac1b72a46eea8d7f1444a60","ssdeep":"384:c9n6C1FidkNl9G5i+UeFJvftAhm/NG9SzC99DlI:c9nYWv+xf+hm/Nd89i","tlshash":"5072d04b9345cbf8d2c9c2682a7e1d163352dbc51e8992449bb034eca7b104f598eab3","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-01T23:22:20.431378Z","times_seen":272,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/ar7c042e25.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/ar7c042e25.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-1430\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFgh2b1UCZc8N95tgrGc5pWyccGi4LZBcuAbpxkVIxiIP4hyqwjFCCNd0mHMOh7fXmResItFijH1NPKzkykPzrmSouXRN4AbPUZUoPCUWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc5caaa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5168,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee Ultimate 10, datetime=2020:09:16 19:35:15], baseline, precision 8, 626x313, components 3","md5":"97fc54e98bbebb9ca3a2251b69850f8d","sha1":"5c8030bdf9ea111df689e8fee05f69fb32f85ed9","sha256":"7c042e25b586e816050a329d1e603db9213736a1ba744a4776989a5d28848b7a","sha512":"aeacf2ac57581175a29fffac20070020633a915327c0fd8b4622656b6f69545946ef6c3b21d0bfd67d71850a67c7dd301f5ea5fd0a5b035f31fb43145dc1a44e","ssdeep":"96:H3qotXBoEwwVOIIIXd6xziiiiiiiiiiiiiiiiiiiiiiiiiiiiz:HbYSOIIIXwxziiiiiiiiiiiiiiiiiiia","tlshash":"7ab124bc1f1e083ec5293a3850639579696b4fdb9b320c5c9e4d6608b1c31f69ac5963","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.397191Z","times_seen":219,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/entry/index2631f6a5.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/entry/index2631f6a5.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:18 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d026-6280\"\r\nexpires: Wed, 11 Mar 2026 08:25:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkVAN4hCW2AjtN1MLWYfShfw0hRv0t7%2BS3kMNVCgcpC%2FP2DHDK%2FCXMSpC2T8GGQkxr%2B0LTjQUhu0FYjaAonXkBeOhEa%2FArh6h3I%2B7iwq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c98e88fa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25215)","md5":"e596addec970dec02dfc1a32435543d2","sha1":"8124384723b9237a0c4d115ba8d2f7d5ee01285d","sha256":"10a59660f5dbd79f59ae27abf95e1e5c71095f51b96e332d9b7b9e5d44baf619","sha512":"6197bb143e9a55570ca181bbeb8cf9d5459c8275f8cb1c1eae697eac1614082613e56002e9703341c6c68dc81e41bf2c0ee4a8be8a9e8f12fc6766fa32894259","ssdeep":"384:I9qHKAxCIOKWbTr9AtEtJ7RsNe/LYXDGuVow8QwdNK18hEG918pg7:qqHKAxCX1XgIhqUjSVow8XK1tZpg7","tlshash":"93b23bf91b6884fc91d74baebf2102846f1f64bb76e585d0e1af8f649287d84e107e40","first_seen":"2026-03-10T20:26:03.657964Z","last_seen":"2026-03-10T21:55:15.707585Z","times_seen":4,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/file/viewsec96c2ab.css","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/viewsec96c2ab.css HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:21 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d029-1b02\"\r\nexpires: Wed, 11 Mar 2026 07:50:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2075\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNrHiGFeeDWhgLPwEp3Jv35kfP4VuzrYWtoZpqZPnXUlmFmyR%2BF1FA%2FydQehrz87K8EeandDBTWp8c9VMmnpRumMuP0SE0H2WzlCKG4t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c98e897a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6913)","md5":"effcb553898e6dd6a96d32d0159efeaa","sha1":"fc4b76816bdbb76103c2b2faaff4beee35f48363","sha256":"ec96c2abc571a880a18404a238dc7a051764fe4d4485ec8a23802206dd87a79b","sha512":"2bc160de5182f9865ec6a57884d449ef0887ec709aeb3a5f60175068a60a607506ee069d3161582307e90c2abd4e7ebc06bbf39250b970370a7e918817a8a102","ssdeep":"96:vCg9fQhQHQ/qv6gGYLZMOMpYnmHiekb09m4OX1Vm9WdebDs:qgJQhQHQm6gGPjimCF4shaHA","tlshash":"77e14071bb2d013ca47be61bb8e1eac855aee512f2424e66f71538334dc72e725b120d","first_seen":"2026-03-10T20:26:03.663395Z","last_seen":"2026-03-10T21:55:15.698215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/file/indexc7fc0fa6.css","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/indexc7fc0fa6.css HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:20 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d028-5a64\"\r\nexpires: Wed, 11 Mar 2026 07:50:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2075\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPM4DUeFHLGeVNVNEgokTo0I8i7uzKqx3v7WBkXdTUxaqSVwASuBA%2FH9PgcwcxCiO2JbDV5B1%2BVGy86njfYkLI%2BpX3%2BF3wrJ79r7j4h3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c98e89ba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23140,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23139)","md5":"1c35b6de79eac2733dd2f23fd71f5253","sha1":"96b57af23a7677ad7e97bdf6718b7e5aa39c3905","sha256":"c7fc0fa6d86bcac88e7ca20bff8e9ba035b1c3314ec44145b97ef7854fce8fb8","sha512":"95c6ce970e69832ca894a14a774e25e553111d9225d9e1b1d1294b1624a14dae0c9520bc300d42c1b8086f845ddcf7a30b863dfb9346b39b161cfaa8e628e360","ssdeep":"192:O9JyW9Jyyxwy9qiri7sfRsfFsfPsfsgsfksflpkdmkhN3iUTxZmgaz:kwm+2ETxcv","tlshash":"94a2fde7f7cd20296c1681eae595bb7cfc3f94c1ab1a9de6e941733143902eb989101c","first_seen":"2026-03-10T20:26:03.667803Z","last_seen":"2026-03-10T21:55:15.700069Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/vendorc0ed0362.css","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:34.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/vendorc0ed0362.css HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:34 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-37a2c\"\r\nexpires: Wed, 11 Mar 2026 08:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXidrKLAA%2BEhtV%2B9fh6XwcUuMSVsJeClOxO0GYGFw0jXZ%2FoyHyhgCXHXbfpwM0mZn39NVNVnpspqOoEv%2B8ZKgn8j5G01WJQEe%2F72UMRELw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ca73ae7a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227884,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65010), with no line terminators","md5":"6daf51dbb40f33c1f73554168489eb56","sha1":"7cc4a668fb547bb793d99931db27cfcf1a1b46f6","sha256":"bdd13daa88baf22dee39f593526c385691490043bcc69c8d54ad8892935f2e7e","sha512":"430b7ad0c6b0345fa0c3c2c6717c5b9168b2da1cf4549073bda2519a87a911cf11a237bcd4ac6ae067de4896b7c62be55058e3103babb569ea943b4bd4defceb","ssdeep":"1536:98C7zBkIcoMtIyNBi3MFYaQj7FCwsBlDOFIxuVox9yVOdmMJ2E067cjcviYJkrnH:9MnNIClDsIxuVSUfDVN1","tlshash":"e924e7a6e793657f2a1bd63d5bc4d9d96f14de91c80247b1f240a00c86c7ab103a7e3e","first_seen":"2026-03-10T20:26:03.672485Z","last_seen":"2026-03-10T21:57:36.064678Z","times_seen":5,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/Poppins-Regular707fdc5c.ttf","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/Poppins-Regular707fdc5c.ttf HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/assets/file/index6fd201eb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 158240\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6974e1d6-26a20\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUXLMHl%2BOoVkZ69AIV5yTji%2FT1PBvBp%2BF2kxsP5gCSupLqdp0alG2NBI4ONDEErLhjafCFFtvWzybgWGxU%2BrHetG0Y6b9REmLOwe29rr3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cc9ac49a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158240,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"GDEF\", 17 names, Microsoft, language 0x409","md5":"093ee89be9ede30383f39a899c485a82","sha1":"fdd3002e7d814ee47c1c1b8487c72c6bbb3a2d00","sha256":"707fdc5c8bab57a90061c6a8ed7b70d5ffb82fc810e994e79f90bace890c255a","sha512":"4be480df0b639750483eb09229b4edcfdcd16141eb95d92a3f28a13bf737146d7cc5db6ad03a5cde258f71b589e5310b6d9bc1563ac7b1d40408eea236d96f4b","ssdeep":"1536:iBLCaPkPJr9Q0T+GNqUESJ/8w/lF703hmTWH6lrGcRAbf9EpthYp0wf0IDh1jlG4:6LCY8zQjGfJ/AaHjxlzOk7gb3Va4J","tlshash":"50f3091bf6e7ceaee7672a78ea72636614dce8362d7f454b23016913e8da441cdd0301","first_seen":"2023-04-10T19:18:16Z","last_seen":"2026-08-13T13:12:15.980638Z","times_seen":7067,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":551,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/micro/get_seconds?t=1773174338559","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /v2/api/micro/get_seconds?t=1773174338559 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRgN9yqcaZu93ZGmjPe9O5Jj0%2FrWvAA0IQBZlc%2BDEHrmhIslrDHQ5TQ5Iub%2Blm2shCxMpL%2FzcDsxsCLEoSnX5vKsvmXbfm7HHk7cZk9tUCE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9da50cc9fd03a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/forex/kline?forex_id=2\u0026period=1min\u0026from=1773144300000\u0026to=1773174300000\u0026t=1773174338548","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /v2/api/forex/kline?forex_id=2\u0026period=1min\u0026from=1773144300000\u0026to=1773174300000\u0026t=1773174338548 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\ntraceparent: 00-fbc732dc6048f8c38a684607cbfd4ab2-b97a38582a65979f-00\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJemsTXcdDKC9CUDb%2BYV2NnbKx970KeTDWQz2uvmYe3ttjMmnWXRsqDRM%2FJNKp16OeafRjiv%2F63ZD629%2FytU%2B1swWjgft87gJRpNqdv7%2FWo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ccb2ff4a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40669,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff338c363e92ef0c6640e45589c53fbb","sha1":"ad1060a222a78389ddb187eaa68e759cfc14e07e","sha256":"6829551e73c4f3c117c93d9e024da07916f11c9a850ec50cb454f26f633f2748","sha512":"4cc5cd49fb7d0eec108a50570d316121d52c0eea278741e48cccf94e3fd2df472b261a1f6f8df3db9258e967e147018997cf7fdd94f8dba16698ce010481ba83","ssdeep":"384:iEtxaNAB43DXSB8CGrV0btDezY51cgKELMZvepuCge81E5A3FkKteIzYxI+:iEtxaNAYIUgKELMZG/geiE5E2Kt+i+","tlshash":"6603284167595191c0b6b8edb533fce8eb5e33ea4ff0dfeea5eb9a1300ac014510894a","first_seen":"2026-03-10T20:26:03.679281Z","last_seen":"2026-03-10T20:26:03.679281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/default/setting?key=is_show_mobile\u0026t=1773174338560","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /api/default/setting?key=is_show_mobile\u0026t=1773174338560 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: trive_session=eyJpdiI6InVJUGNoeHozWXlZS3lTZkZEdjROc3c9PSIsInZhbHVlIjoiMjhhWDJ2WjYwY01PVHkwdXVQVlVpSDM4alhpbmJCb0RKWVhMcWF1YTc1b3pUSDA0WXppTk52UlJFVXRsVTNVTTBMczBoM2hxWEtoa3FTTXBVOEFSVEJcLzZoU0V1XC9zTVNiYlV4bWpQMDZuTnpJV2ZZcDQ3ejFlMXRMTzAxSmZcL1AiLCJtYWMiOiJkZTE2YjFhOGU0NzhjZGQ3MWFiNGVmZmQwZjZiY2ZiOTJlNmEzODA2Y2UxNGYwNDI4NWUxMGU4MTRiNzkxZTQ3In0%3D; expires=Wed, 11-Mar-2026 06:25:16 GMT; Max-Age=36000; path=/; httponly\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUOEJjENjwV0cbkM9SpYAzXbUoAdZSIXbCfJIYGxNs%2FLXBNH6NAU%2BXIvB4fui798p092TyJphSlQbl%2FToMxyVhKpOg43eV2q%2FLgtuk473xc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cccab78a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6534c78ffb9e42f39dc0bbc859f44b7e","sha1":"fb3c8e00c2e320a22a06e664786553953d857a57","sha256":"486c40010d8ad851ec6ffe4a5f46b136cc9e17ea3eb7a339a2fad239b99e07b8","sha512":"9038f3850c5e3b788dbc8d5cca94d09a3391f756159d28b69021c68be3969c7938aebc9fe79f122c4a5e54c1d2b689e11f029b1704da92921b02031d1e682ce5","ssdeep":"","tlshash":"13900282641b00828606104894088f09106461821400432a5d8e91218e5d1552142430","first_seen":"2025-10-13T13:56:45.871823Z","last_seen":"2026-03-16T14:59:17.445914Z","times_seen":21,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/entry/index4567d495.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:34.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/entry/index4567d495.js HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-43a83\"\r\nexpires: Wed, 11 Mar 2026 08:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJ%2Biv8uchmy8cBFFip9vVZSvt84FNPdEjfn%2FCHbmKZaD6CYQhBNcCmQOIbxjDw4rKZZUduZRJFH07QVUQHQGhGecf9UE66FNC7Xjs7%2BX5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ca73ae5a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277123,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49244), with no line terminators","md5":"e40fe9c9efed6f3a85b8e114e860f1b1","sha1":"8808058e84cb1a61b5f5b096c3751ca288cf9599","sha256":"04905bf2f41edaba5e9d26e020c02277af2e8cfd6526fc98707cc569b0830106","sha512":"cff425f9158c1b44859779aa18353cf3da58677e676c40fb284b35cc6935bcee2a3b6f50115c78a883d580a944aafe663ffe5e12ed418e5150a0e576d81f17bd","ssdeep":"3072:CKg9z7p8yRsdZCpXR0/Lyis3RuWEGDk8dIZOpLPqwbXdvpxfHyzI6BNgjrXnrH8a:CKg/FRGZCA7mc8dWeLPvbXgAnr","tlshash":"eb545b24c4a65b4c09e3b259fccb3b1957d40dfbdbca844c1efcc52812d78a9a25693e","first_seen":"2026-03-10T20:26:03.685436Z","last_seen":"2026-03-10T20:26:03.685436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/file/uidf3f1acd.css","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/uidf3f1acd.css HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:21 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d029-1b957\"\r\nexpires: Wed, 11 Mar 2026 07:50:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2075\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSbqAb1AbukXkXN4mHfRyvBHCh1W5mACUUzSFA1C3KFpgpYtY%2FlnfdhuLTbt4hbg9T%2FZwbcGcZA5VQ6LLd53VwTg4JNDzVw4rc%2F%2B1ggd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c98e893a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112983,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"31b33be890b6778d0303d7d01195fb32","sha1":"8de798becf4e3b44558cb5d7d8b3d4b227dc38ea","sha256":"df3f1acd73fbf163c515a93959004a43c7258f475ada5b445e2d35f11d0da83d","sha512":"78b12156f82d499c8121445287922e34fffa9589088aebc5af40bc0c220c691859afc47d310501414fbeab571d9b267a3065e80173f347d3bdb958269d536e16","ssdeep":"1536:aWIyNBi3MFYaQj7FCwsBlDOFIxuVoxeXouH:a6NIClDsIxuVSepH","tlshash":"13b3e7a5aac090fc7f26f265ab8766d8f13cf630dd41ca95f105515d0ecbbf50223a2a","first_seen":"2026-03-10T20:26:03.688633Z","last_seen":"2026-03-10T21:55:15.712327Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/bx0de1ecf8.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/bx0de1ecf8.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-33ca\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2F%2BmJxlZrryVRY3Qgl08WIh0IH1PNSZUTdzt0uNZAqohScpd7txp1nvbeBBXKgEplRkhVoOuLKUBO25Ai5xnhIefLSQGp9ZWbmv0TrGdTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc4ca1a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13258,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1143x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3192d21bf556769830c2a0ebff969cc","sha1":"991b4f9d3b1c219e096200b74df89f42f134ae03","sha256":"0de1ecf80a0fb25ed431758d0ba3927f894bb4a4c5562cf3b6bf2f7a9655eec7","sha512":"eb9e1cffef9a7a5fed2714d481d6a2b5890adfc2adec4f43592ffec602b6b55ab4b72b73e343fadfcef71d3e6f9fc79629da1a9aae544fa6fced425a1c1422a7","ssdeep":"192:UCK3pgkhtPQvKtf27/G73wXyq9T1b39rmmS4FJcc79D72vzdgS4jyPY:M+PvGA+7gX5v5B4c79DMX1","tlshash":"8d529e66e548be7c899378904ef3151ec4f4d6471bd7bca58e80273f42706abe31284e","first_seen":"2026-03-10T20:26:03.691793Z","last_seen":"2026-03-10T21:57:36.061157Z","times_seen":5,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/vendor5f54cb35.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/vendor5f54cb35.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:17 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d025-3202e\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCwq27LiD6z2DljWcCe%2FAIPIvrlW6RdlY5QMLwUotMHC9wW25eTvOfPJtcJS%2BXuhcxNDGz96sZZ7BnMBzcufKcc%2FAFeK1IlRZ%2BL74Xw8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c7923a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45681)","md5":"74f38ec2b335e7e138439f4b39de82f3","sha1":"5d2d773a4bb5438b375dca5ebfa90fedec9cbe4b","sha256":"1f3084d9bfd720e35004e1ad1860e266dbe4f89c568fa574e28fca153e88cc5a","sha512":"9fd58e44b2f23bc2c9460a466868d455c3ec34e62a6daafb69924535c1c81a8a0f6d28bebaead14a901b4d6f37b73a18610fc6020747e93c1ff7911bd919508e","ssdeep":"3072:f501zkOJbgC1LWDQ07O5mTfHvhozxDT7woeC3AI71tmYJq:h01zk6bfV0CmjZoR7woPw","tlshash":"0a142ae93182b46253ba19f640771006f3792819380dc894f2adecdb7d7b84a91b7f6d","first_seen":"2026-03-10T20:26:03.695565Z","last_seen":"2026-03-10T21:55:15.718415Z","times_seen":4,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/pla73094cc.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/pla73094cc.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-5363\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpcKqtxSz%2FEQZCOzEmxamActAF9vRL9gjqaB4B0hK6Qp2z%2FDQTVkk9OrcMcE1SdLjTgtIYIzFzZR2RfdKXyXLzr6AWL1QEOexyYSPzCKLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc5cbaa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2557 x 1704, 8-bit/color RGBA, non-interlaced","md5":"51251cd0579fc3fa49f0928e55c9bb64","sha1":"29654955e03cb2691ed60148f841d97c80fa9764","sha256":"a73094cc65c2947c8e1502600b20c9c9828371ab5f28029feea5e016b57fb8df","sha512":"fa6f2c30e6de9f93df495a7868cd67c5eb1c3c32a354e606326bc7eb761ee147690c9b5217d7ecb116d94da8ee67349121003a08b41ba464f35de8d2770bdc04","ssdeep":"48:iDyPEEEEEu/EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEV:8yZs+uc","tlshash":"78a2233a31f0ba44f47ca636955179db56f22e440e365b2f07210acf585f5c71232e45","first_seen":"2025-10-13T13:56:45.896219Z","last_seen":"2026-03-16T14:59:17.462973Z","times_seen":13,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/tra980693d.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/tra980693d.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-a5a2\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mb5P7fMDQO6a%2FPFUchZOnVJEiPR1MpntlfEtj3m9D%2FkfGP9oSr44RR2mKfnTYMvPgNJGv4fEedQ8b7qAgTfJAZLuVl%2BYZShs%2Bek2bkWtrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc5cb1a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1458 x 972, 8-bit/color RGBA, non-interlaced","md5":"ea9a979dafd4239b8688f64510dd26e9","sha1":"178dafa36af6b166800e22895b27265223a9e1f8","sha256":"a980693d226cb177662d6d1a9f3dbad754d3d13fc1aa042dc5d6eb31c6bb1c3a","sha512":"fc85e2f963c8cc6a81099d2bbf29103323d5e21fd3e7123f06c745af070a9611621111b9a376625a7bb84d3d0447578aaa90b74d1ccbd9e6ce71212bcb2269ed","ssdeep":"768:u7cqCtyQKjwJVuqpVtTrUQW0anKcn/mpt391+XxrQdU1F:u7cqCtyQK8sqpVtTkPnJn/mvaGdSF","tlshash":"ff139e1f873e5185f782107f6c372b18813effd86a46770f854da42e2e293ce52a6168","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-08-01T23:22:20.415415Z","times_seen":234,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/logo.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-106fb\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jQDsWfhTFXcstPvqqB8QAZNY8cIFqqU967LLf8FkBriOIPs6RpoKFv9KxETzAoDhhN0JcKbptj9%2FUcfczzoRbOU9tD3hdYG9j6H%2FTGKwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbbdb8da9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 756 x 202, 8-bit/color RGBA, non-interlaced","md5":"7fc0d38910bc55db2febf7ec9af05806","sha1":"dce59b078fc00d784fd8e9b63bb27bf82e2ea7db","sha256":"91a47b84cc42b28c606f7b5cd3af60630f612d2d48fe789e6ebfca8d0222c50e","sha512":"5035a7c8d73c830b5806eca70f345802c0e168f718175f3ee14ee4dc4c829fa0e671f082f785d00cdba8d7c0ad0ceafe60e178e30d10ab66a4f405f4489563ed","ssdeep":"1536:H5bB3V3mW3CFHpt0+16PUb5kG0i0iOveir+:H5bBjyFHptA8k00H2iy","tlshash":"2c6302edded08431e7489a9aee378c03be7ee4cc5504c2a0855fbdad42cf2951ec4685","first_seen":"2026-03-10T20:26:03.701594Z","last_seen":"2026-03-10T21:57:36.05287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/forex/getCategories?t=1773174338558","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /v2/api/forex/getCategories?t=1773174338558 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\ntraceparent: 00-58ae78627aff908aaa928c03bad77b5c-05e7c8a3dc3ad96b-00\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCFkl4uMpweW6coFqoZwo3P33SGgvHidpnM5%2F4Jc0jEaMNM2VEyslHjZC3fggMYxOodaZ1B%2BNi%2Bv5JbhMMp1ubSLICDpb4W6bVnBkUljU6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ccb4835a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3594,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e104691bfe36fc1cba95cae882a82da6","sha1":"ad8bb87057a41a57a7214d559ddc551b2a9e0197","sha256":"d126fe9b385a874b76a357710da29bf394625a3128eeee4bbc0c16a5143bad4d","sha512":"667bbed3dfc23747c39d5d86e3551bb5ba9930b5dc5092e113e6090ca1c5d24360f8659b6af012b8428018b0bcc0949e12127fcc20a3eb71f3fc957a9015187d","ssdeep":"","tlshash":"fb71ad872ea4ea4fd0409c5499756c7e70054ad5cece06359bffccaf61d793b02222a1","first_seen":"2026-03-10T20:26:03.703984Z","last_seen":"2026-03-10T21:57:36.06366Z","times_seen":5,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/index6fd201eb.css","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:34.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/index6fd201eb.css HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:34 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-de57\"\r\nexpires: Wed, 11 Mar 2026 08:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Hs3xkcuBUuA92kqjxnNgdTy227IwtR8%2BL9vVm7ROAHqMiBE3fXlk8Cf6CFOJqf6gekLnHdJrggyRXE8HzHRatMSrkJODeFqhZAp89VYiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ca73aeba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56919,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (56910)","md5":"598d21a2d5f3b6b0fbbe1db227ebe280","sha1":"63e2e344088497fc8351a20cbfa10f1358dbb1e3","sha256":"6fd201ebe63026eae589c7d43dc4925d64eadbdd70c2ac0bfdd86ddbac19e981","sha512":"aad8800414c9d7cb5ee130ec211c745842d2086c37f0aaf7b4c926829bc348b01b592019fd15089c53cdcf6557bd753da2f472765e96954abb1c46bf2546e465","ssdeep":"1536:w2zsGKztM3ztM3F96/biZym8+o/lUf8fn:w2zsXz6za9bZdA","tlshash":"ee43c5b3f2e51465fc378ae6d0917b7d3d2ee0d38b264a9af645733482c62e30a1251d","first_seen":"2026-03-10T20:26:03.709309Z","last_seen":"2026-03-10T21:57:36.048307Z","times_seen":5,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/logo.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-106fb\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KD4OT2om7b67KFHrSoJ7dNwqnvGWpTPK%2FG2xyWWF2mQFU4BpSSmwtwPtUi%2BOKecrSYv4tMH%2Fcmg6ksC%2BKA4KiTo%2BPkyTbCIYJbU89NP2sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cc9cc93a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 756 x 202, 8-bit/color RGBA, non-interlaced","md5":"7fc0d38910bc55db2febf7ec9af05806","sha1":"dce59b078fc00d784fd8e9b63bb27bf82e2ea7db","sha256":"91a47b84cc42b28c606f7b5cd3af60630f612d2d48fe789e6ebfca8d0222c50e","sha512":"5035a7c8d73c830b5806eca70f345802c0e168f718175f3ee14ee4dc4c829fa0e671f082f785d00cdba8d7c0ad0ceafe60e178e30d10ab66a4f405f4489563ed","ssdeep":"1536:H5bB3V3mW3CFHpt0+16PUb5kG0i0iOveir+:H5bBjyFHptA8k00H2iy","tlshash":"2c6302edded08431e7489a9aee378c03be7ee4cc5504c2a0855fbdad42cf2951ec4685","first_seen":"2026-03-10T20:26:03.701594Z","last_seen":"2026-03-10T21:57:36.05287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/default/setting?key=is_show_mobile\u0026t=1773174338560","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /api/default/setting?key=is_show_mobile\u0026t=1773174338560 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlrksXftD934LbDhxQxLoWhJSup%2F%2BVDtAjPePzycAEqcWBvVTGdqpRICD5eRHVcf0c5yddgkf1FQp9qsxZeeNXda%2BAM0HdvAP1sv2LAiR3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50cc9fd08a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/user/info?t=1773174338555","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /api/user/info?t=1773174338555 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\nset-cookie: trive_session=eyJpdiI6IkxYWWM0UnVGRnoxUTh3T3dtcXBUZXc9PSIsInZhbHVlIjoiNmFmXC9HTWZISkZ5U1FVRG9KNDBHYnJLT2Zla2p1S3B3SEljZUFqTkg1V3ZBaThLWkltc3lEa3I2ZDlPbExjTUc0VCtqXC9XYzhNelp4WjkyTnRhXC9sK0dzRldxMDdKT2hFQzRsOWhTSitnVCtXWHJ0TGhcLzBiS2JzbVlrYTVSb1NLIiwibWFjIjoiZjM5OTdlODAxODg1NWRjY2FkOWM2MzAwM2MxMjYxMmJhZmI1NmQ5YTkyNTg0YWUxNDdmYjBkOTQxY2MxZGQwMyJ9; expires=Wed, 11-Mar-2026 06:25:40 GMT; Max-Age=36000; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28wzdYuDKuZW%2FhlMX4Okuu8YTCcD%2FPTFEZ9usD%2BzJftsrqYRE1ITKF6hU7t8TTrAdq5glRpdc%2FZc%2BqZWWdKViLIKnJl1dz4qqXbBjSW%2FuM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50ccb88c8a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7f1766c7a443d23ce403a825e98e969","sha1":"652183edee25a8d330833c6b4e001d636f183aef","sha256":"b88ebc64268dbebbafc19609aa684a323e676b48d8ef97cc8c032721819c1e23","sha512":"8b9f468f8b52e3944be138b4536d0b4719c9beac0351f25797bd9bd90c6e4e4e65a989f163d733f286da2a9d6b4036e6184b3e85a1959a61a4fbb965242a77a4","ssdeep":"","tlshash":"2880044f000c140311070055540c11100f54145001c1d3151d1d053410fdc4c17c1035","first_seen":"2025-06-01T05:36:04.794467Z","last_seen":"2026-07-23T14:17:29.058278Z","times_seen":194,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T20:25:31.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2; path=/; Expires=Fri, 31-Dec-9999 23:59:59 GMT\r\ncache-control: no-cache, no-store\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AONsPqbJ3f5wWWTPvjyqvVRZaJdw67cIH%2BQAv0ea7oj8fv4dziiJ%2BTL77s6K%2Forl%2BKFF7YeycJcuM%2FZVvI%2BYtG24o60oHQPQyVpPApT\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9da50c95be32c124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4580,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (433), with CRLF, LF line terminators","md5":"253507daa15216893860014f77458b42","sha1":"21831670553e42a710b53101a4cc25486f350ef6","sha256":"18e3d6fc024953da4c0c012d6c8b400788a7622003bffd65abf6ef64ba614311","sha512":"195ef9e85fd9d5bf41d366e0168e1fdea264ecdf984cc88000e04346e11f547e45bb7e1292050c201a906ad2df7031e988bd9444297b11a6fc0a99d9c2601f15","ssdeep":"96:vDJJLc+ytJQwJVJickTr6zCZydHRH/eyQuB1XiHliHzH/8:vdJLc+ytKwLcckdZCxftQuB1XiFiTf8","tlshash":"b891865457e3885641636a02aeaaf41432e3d217810efc01b9efa0e88f51fbd8dd3990","first_seen":"2026-03-10T20:26:03.714208Z","last_seen":"2026-03-10T21:55:15.699246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":54,"dns":17,"connect":8,"send":0,"wait":383,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/i18n17a2f836.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/i18n17a2f836.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:15 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d023-7c54\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUW1RbiMhnsiJNMs5diAok0JSnFNaEsYnLZ5OktfqbBiQc6hFDZfMeKvFavduptOPLxLu6wEme0KP91r7NgeVbES4QytivDLeSXwWn8Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c8938a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31828,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (31653)","md5":"0ae0e2edd695fcd61ab48e680f14c160","sha1":"2c7b398c18118b587f1da722ba313b6db327856e","sha256":"e74fe628dd62f0bb2cfa174eeb5efab96ca767210a1d55929653cc029290cfb7","sha512":"2a108426e77a3c37b792054794564d655f4b64cfe5eefeec08736c9b927f64752d2af0afd2d7d8e95d285ede6c472ee6957f409d0ab9260d424d7869d0fc20bb","ssdeep":"768:6PatiW/GyHIhijtIRGySrZyBtnUL8IKoYpvbGlOMugxAlXYCfIEa+48rVBx2YsZV:nFWhUIxUoI+l/4C2","tlshash":"3fe2c7c771e770020b7586e671b321139f2d0b5d386ee8d8f8a9e7872a16c5e43a6f14","first_seen":"2026-03-10T20:26:03.71776Z","last_seen":"2026-03-10T21:55:15.720238Z","times_seen":4,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/chunk/vendor231cdc29.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:35.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/vendor231cdc29.js HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/assets/entry/index4567d495.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-126a71\"\r\nexpires: Wed, 11 Mar 2026 08:25:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DN2ZLl3jIYKGIHSkfixyKSxkPgbsBtAsNN2k5mW6tJBgPb1GWx2tCQ20XAVn9NMLZ73qnD9c2Bqgs%2FvOKV1YZe%2BNWd%2FwD6VTRWw%2Bo6PjIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cad2831a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31520)","md5":"ae830b7df9d6f9b715860f387d5406e1","sha1":"65fd02673a4079b8e81f9293120e2ab0a76bd023","sha256":"04b0966ab904f05987100e912ff58a40959d055791f669f2c561c1c134f692b5","sha512":"3837f6d36a9897fef8bff8418ebb2614211e020614384a3b8752c2076852b355ea1d88e1176a431563edf367512afbd2462a2fbfb92e5aff3ea043d1f061cdeb","ssdeep":"24576:IkevNsRnA0I5MOQPkDI+01fXvWniVV2eDR3zSS4w8vrz:IkevNspA0yMdkDD01fXvWniVV2eDR3z8","tlshash":"fa256e947a45b43c47bb80d9507b0001b33e2b9db40d88a0f1bdddaa296bd55e2a7f7c","first_seen":"2026-03-10T20:26:03.72215Z","last_seen":"2026-03-10T21:57:36.053649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":744,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/chunk/vendor231cdc29.js","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/vendor231cdc29.js HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.tirveavip.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-126a71\"\r\nexpires: Wed, 11 Mar 2026 08:25:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3fiTKggYOXfltcBA%2FOw3%2BKwkkkBG6RW%2BVE%2FxOVpB%2F0WlX46SnZD1%2BdtVUF4qZsI5w4ertfD%2Fys15W61StirCFNc%2B5BgOh5LPB9%2FBNosVPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cb51b63a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31520)","md5":"ae830b7df9d6f9b715860f387d5406e1","sha1":"65fd02673a4079b8e81f9293120e2ab0a76bd023","sha256":"04b0966ab904f05987100e912ff58a40959d055791f669f2c561c1c134f692b5","sha512":"3837f6d36a9897fef8bff8418ebb2614211e020614384a3b8752c2076852b355ea1d88e1176a431563edf367512afbd2462a2fbfb92e5aff3ea043d1f061cdeb","ssdeep":"24576:IkevNsRnA0I5MOQPkDI+01fXvWniVV2eDR3zSS4w8vrz:IkevNspA0yMdkDD01fXvWniVV2eDR3z8","tlshash":"fa256e947a45b43c47bb80d9507b0001b33e2b9db40d88a0f1bdddaa296bd55e2a7f7c","first_seen":"2026-03-10T20:26:03.72215Z","last_seen":"2026-03-10T21:57:36.053649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/logo.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-106fb\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEbbFcwAJAtyCt0usnZR375mGd8E1AP%2FPwmTRNd%2Bq4E8Hdwq2e2mYMiFIZV7IvCbWlKl1sWrrpP33PYxWwcOGQ6zaTJaKibVtmzs3aqHMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbb5a70a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 756 x 202, 8-bit/color RGBA, non-interlaced","md5":"7fc0d38910bc55db2febf7ec9af05806","sha1":"dce59b078fc00d784fd8e9b63bb27bf82e2ea7db","sha256":"91a47b84cc42b28c606f7b5cd3af60630f612d2d48fe789e6ebfca8d0222c50e","sha512":"5035a7c8d73c830b5806eca70f345802c0e168f718175f3ee14ee4dc4c829fa0e671f082f785d00cdba8d7c0ad0ceafe60e178e30d10ab66a4f405f4489563ed","ssdeep":"1536:H5bB3V3mW3CFHpt0+16PUb5kG0i0iOveir+:H5bBjyFHptA8k00H2iy","tlshash":"2c6302edded08431e7489a9aee378c03be7ee4cc5504c2a0855fbdad42cf2951ec4685","first_seen":"2026-03-10T20:26:03.701594Z","last_seen":"2026-03-10T21:57:36.05287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/vn1ebb558a.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/vn1ebb558a.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-19af\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIoZg84zfIGLSEarlTJReyENaBg2Ff61GAnY3Ilq4KdC3YO4ploizsnqXB%2Bs1i0B7bsvgTxXPfs90oMHteLkAkP8xDglXbLnmhEj%2BM8sCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc3c67a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 86, 8-bit/color RGBA, non-interlaced","md5":"f8ad79b8e3e7e4985afa5ac18c05a511","sha1":"fd97fa80ffc00ce5e94f239649bd442680ffc219","sha256":"1ebb558ad547d5408153a2ff59021b6de1d65c42dd3253de9124ec3700cee40c","sha512":"f7f79e53722aa1669d0511f318cf2b0bf75eecdf806a3d22a87058f0a99caec7d05c0e197f5d6d21129bef8debd23378c707633970fda7ac6a85943a1f7b79b1","ssdeep":"192:JDV9Cy7Wec2PyJcmpwAQuP4XDBlRBjDbVAumhew:hV9FWz2PyNm8PkpBvZ9mhJ","tlshash":"45d18df7bb8049a1dc6dac737104f3d01567e98fa17890ed87a8408ce22125c8b20ba3","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-01T23:22:20.376175Z","times_seen":282,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/uifcda0fc0.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/uifcda0fc0.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:16 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d024-1bc89\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wX037H%2Fxue%2BqKbGx3ABVcLry23pp9OoLKnyiRi%2BHofOnKaIgRmhkdc1AjNc70%2FvPTFDhp9CqEV5q0B0gNE%2BSJcIg9WwwHgRtL2qVGmB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c792ca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248), with no line terminators","md5":"a7a9dc33413c36af8eca9254aea0735e","sha1":"396bd23ce71d6ef06f5ba2352e5f5da699132b82","sha256":"534767a5bbae0f18df13a17741a72cbae3845fad108ae4e818460752c7d50ad8","sha512":"14f993add697a4346c5c4e13a2ef9ca45bb247467323f64da6cbe11579e62dfce3ad8a1a2f3fb64708a4322e7f998b949a9a6a06987c78627fbc29e73a7a4b9c","ssdeep":"3072:CLvZxq+0o8JKeBKhELFN3/CBzJ0fA5iRn2JroJqCXRcQ0R+75I7BgUzx1AXLF/7w:CLvZxq+0BKhsFnfA5+P1k45I7BgUz/6+","tlshash":"84b35ba1b587b93c5b7b9489409a0510b62c1f99f00dc8e0f0be6e4627eddd4b1b7f29","first_seen":"2026-03-10T20:26:03.732678Z","last_seen":"2026-03-10T21:55:15.706308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/asset-bgd8abb26d.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/asset-bgd8abb26d.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/assets/file/home529e5c0b.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-69f0\"\r\nexpires: Thu, 09 Apr 2026 20:25:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRma345zhmpIBnxZaKaCUd8oaLA4Pb0rb%2Fwoiujw%2BjnpmGk2JqoipZ0Z79r12f8iBqnvCubSDYIIBYYkt5lsBzhTm7CRSwR1DZ6HwE34ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cc9ac44a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 848 x 426, 8-bit/color RGBA, non-interlaced","md5":"b83f66f80e88cc48cce29d2c6d12bf36","sha1":"3ec3e09e7b36444394a2fca0d3bc4f42a497231a","sha256":"d8abb26d3c6af997f5cbd483be84ad82b5a9d4b6d430f2553b64490bf00a3740","sha512":"6cdf3e9c66951c31ee83217b38d5e9d7e262ac74b68c5f13254670b0e5f4b2e1fa246a08a35a82b11238f9c6cc573a9801a45ff18b5fdfb270b3215c9996d8b8","ssdeep":"384:Ca5UNQa8J0fBhq1yQ7Poh10mks7/zmJctmfOkDNZ1fQFVbnKotH0dYdGgKaoSg51:Ca5cQa8Sh2zoPYs7/aSsDNyz0qGgzC1","tlshash":"c2c2cfbbd2fa4443d634a8750a594a8407b85ecda03f3c6156c2be513b3e4fc78769ca","first_seen":"2025-02-05T17:00:50.061758Z","last_seen":"2026-07-23T14:25:40.394101Z","times_seen":108,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/forex/kline?forex_id=2\u0026period=1min\u0026from=1773144300000\u0026to=1773174300000\u0026t=1773174338548","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /v2/api/forex/kline?forex_id=2\u0026period=1min\u0026from=1773144300000\u0026to=1773174300000\u0026t=1773174338548 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjWC%2BSXA8OMbnC9BZLGzPsuak8ZNAJy%2B76C5twPmbckvwcfkyAb8mo21fw7NdK277Am4XWEciJ9FA%2Ff16Fq3a2GqdfOoYzRWGLs%2BBXbZbr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9da50cc9fce9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/v2/api/micro/get_seconds?t=1773174338559","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /v2/api/micro/get_seconds?t=1773174338559 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token,x-auth-token,lang\r\naccess-control-allow-origin: *\r\ntraceparent: 00-aa7472a0282faf246fd94e8cd59c7ef7-0e5910d219900f89-00\r\nvary: Origin\r\nx-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1z%2BtW7P%2FZ8epEh2ZNDs9ZtOKQZIdVhqKKK9XUySL3CWQjTFR8lxPduxIQmr9LVHJm2Jd5pLe4rA5NOrhUzt71MvHFENBq%2BA2VOfmjq1lHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50ccc5aa9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":683,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e0a4b693a0288118433e017df7843a6","sha1":"d08f1743dee41bc38d4feb46177be24581d114ad","sha256":"b4eb158ec51e252a0baf18c9eb4f64a1727153134b82d5fc959242664bd05188","sha512":"fb8b8d39316ca4db3c5db0f1e6aebe2ea1a54cd2a3eebfaec9ea787ebce3916232f62236b9cca844c9b00f04125e668a8bcc4aba1b211d69bf40f6106b9eb14e","ssdeep":"","tlshash":"3001da0a38cc49e661f3bd767da370b486e9b0c48369cf0624a85f6905dd8512917e8e","first_seen":"2026-03-10T20:26:03.740551Z","last_seen":"2026-03-10T21:57:36.056514Z","times_seen":5,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/requesteec687f7.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/requesteec687f7.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:15 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d023-8c6a\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsSaHqYDDy7OvLAuGo8kX6LzmFQ1QEIfofXH00F6ycZib4tvZOnEmD%2FtAK%2BwzHjaqRHWLj0SkXH1miuXLqPp3lCfIal8GpL2C3EV3vc5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c894aa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35945)","md5":"bde7183681130228c176cd888e66815b","sha1":"25a2c98c0080410712caad48ef8ac03c8d4a4a46","sha256":"45093c5a5799804ab4dacf5798417775bd7dd0f33635fdbdebf264d1135f59b0","sha512":"a85f78c54eb46ca785060d09e4071a8b36a090c315c1f31ee05af727efeafd4729799db3c05a7d0617bca23f230f677d87277835777e202c51d4d50e3c7afd29","ssdeep":"768:nlSfITeQKms7ELPs7l299XLRKGeHAZjJ0hbYacqhEnniFbzFOXENfMXyIOIH1jWI:i1NREE9Fyx8+qnF9Y","tlshash":"0df229d576d2b06153aa24f540af0502f3399629b40d84e4f168aceb2cb610f97bbf7d","first_seen":"2026-03-10T20:20:45.850279Z","last_seen":"2026-06-22T17:08:08.087486Z","times_seen":13,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.triveltdus.com/uploads/20250319/9dcb708ad0e2d231cbc0f29d2dac9014.jpg","fqdn":"api.triveltdus.com","domain":"triveltdus.com","tld":"com"},"ip":{"addr":"172.67.129.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:39.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"triveltdus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 19:02:56 GMT","end":"Sat, 18 Apr 2026 20:01:35 GMT"},"fingerprint":{"sha1":"5C:26:08:A2:56:28:D0:1B:26:D3:6B:F9:8A:E0:19:CA:B5:7B:4D:CD","sha256":"59:31:C9:EC:14:E0:9F:7A:BA:28:B6:07:72:64:C4:04:3F:CD:85:76:92:B9:C2:44:A1:5E:3F:73:B2:80:78:F7"}}},"request":{"raw":"GET /uploads/20250319/9dcb708ad0e2d231cbc0f29d2dac9014.jpg HTTP/1.1\r\nHost: api.triveltdus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 996\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Mar 2025 20:20:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67db271d-3e4\"\r\nexpires: Thu, 09 Apr 2026 19:50:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2078\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=od6CXdNg5KRARUaFH5hB1TpB%2FNd%2BZYmFjiMlwA9AIx2Qqjf9ivYamLbzienyxs1OH7ZRGbM3z5OnRkoxiH%2FZKVqPqthBUPMBn9dwVuaPGV1z9A%3D%3D\"}]}\r\ncf-ray: 9da50cc0890f57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3","md5":"6ddfc33e38135819105463ea1f7c7203","sha1":"0fb946d6ba19c6ffc0f2385636bf88132c17e4d2","sha256":"de645c9de4cc6855e3a6ba0ee783ec67ca2e883d3ddeaefdca0059153610f399","sha512":"e9980ed3d026e0802a003a28cbecc92e1bb3b364c65fa19021373eb5bc1e0f110302cd5962cb49ece4e3036c395bf8727a05e8a9fdea8ea14e5aa7c801e1819a","ssdeep":"","tlshash":"021184013f6e176afdf05730132c723933882638662e5b5d22950801e1bba860c9e5a3","first_seen":"2026-03-10T20:26:03.746634Z","last_seen":"2026-04-21T18:18:07.180088Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/pt2d69992c.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/pt2d69992c.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-212c\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syk8zSrJ9dvZxir5ItxmmSd2NpLhHLRT2snF8ne4lid2LcWbfV2RYlqEc9v1KGepvPaacpSbYXRHHUMqHY6S%2FXctfo5PKjuq%2F%2F2c2VNl%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc4c9ba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8492,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x332, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87f1fc44bf8f73da7835c810e4877d75","sha1":"eae24266f4a23df02e9e568ddb2012420abbfc14","sha256":"2d69992c9039b18813d29f5ba4625c197cb22c932c082d974c3eaa7282fc5fff","sha512":"0496cb107f73b3c80ac1ea70d6186cb97612ed5df1ae71af3c05dc5917d44de94e3b6cb4365fcd0ba65e0d8fc28f4495ad617f36b0cf19123d0256ad99d02f00","ssdeep":"192:hTA2gbbSzN3ascve56Fk8JNi2sIkxY7u3OMDBdVqaGijzeZexBp:1W9/rOY7O1ZGiPeZePp","tlshash":"2402b0d20b4b8ab9ccd016feb5859da4b44fa7043f2853507a1c56f9dc51534e3ec9c9","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.414671Z","times_seen":241,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.tirveavip.cc/assets/chunk/chart0328bd34.js","fqdn":"m.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.tirveavip.cc/","date":"2026-03-10T20:25:32.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/chunk/chart0328bd34.js HTTP/1.1\r\nHost: m.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.tirveavip.cc/assets/entry/index2631f6a5.js\r\nCookie: X_CACHE_KEY=6cf3cd789baaaf10bc412b5bb306aac2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 08:11:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6975d022-2e5ad\"\r\nexpires: Wed, 11 Mar 2026 08:25:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWqn3899rOaGpOAx8mDOyRoqiji8kqHxlzH%2Fu3iNUnJfHQnNrXQar9XSLK1Ga7U%2FFa2LxbJFGe5VPIAhoZ4cJrwgqRIgXw9Tyg0i273h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50c9c8947a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8602f9aee688c843654f6a5464ff3407","sha1":"17d28cbaac4fd692cb2a0546df1568c22e9c4aab","sha256":"4a25cddcaae4be5b252c9f7551214552a37d015ce836400d7520d44cf6cbda63","sha512":"2a6f15ac4badff22b425bbe51aec9603848fd53ace3478a5de89a7926e002e18fb1bcf744e1e748148b8d59c7b4be52ffb1f0298527c2acc7024aaa48f2ffe49","ssdeep":"3072:xHAx+wOQrhmgeFVXmMuomdPFNKqJQN2ZPQymBJZTyuG6:CxYgeFVXmMLm9FNKqJQNGPQymBJZTyuD","tlshash":"ef04d8c4f66170155263a1b9423f1907b336369e944b86acb56fc9da2cbc0ca2277f7c","first_seen":"2025-10-09T17:34:39.544386Z","last_seen":"2026-06-22T17:08:40.911409Z","times_seen":30,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/user/info?t=1773174336849","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:36.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /api/user/info?t=1773174336849 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7F3oocSqEHb0Ke9lcUFGS1X5Aod9P066EVtRNTQYNEot04FXVfxnzae%2Ft3yXmbgPpQPVnKbepHZCMYS991eL%2Fll7agRfBQF6Z%2BxprLAYY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50cb58c47a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tirveavip.cc/api/user/info?t=1773174338555","fqdn":"api.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:40.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"OPTIONS /api/user/info?t=1773174338555 HTTP/1.1\r\nHost: api.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.tirveavip.cc/\r\nOrigin: https://pc.tirveavip.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoWmD2BOnpDFSkHt6LaPnci9qoU%2FKCrhoDoz4OBm9h%2FslR0PJvCYWctCpJsq8SkOITqLmmOKwJJGGlLVc7qlOc%2BaKJ4nzT5oi2poew6s%2BsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9da50cc9fceca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.tirveavip.cc/assets/file/ru9776c19e.png","fqdn":"pc.tirveavip.cc","domain":"tirveavip.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.tirveavip.cc/","date":"2026-03-10T20:25:37.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tirveavip.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 18:49:49 GMT","end":"Mon, 04 May 2026 19:48:30 GMT"},"fingerprint":{"sha1":"D4:96:B9:61:D6:79:1D:A0:88:E6:F5:7A:F5:44:27:7B:41:97:26:FE","sha256":"D5:3B:07:E4:2A:9C:74:FD:CE:C2:8F:20:12:8E:9A:76:AA:33:41:66:DA:4A:EB:9E:3C:DE:E4:B3:6F:8C:AA:04"}}},"request":{"raw":"GET /assets/file/ru9776c19e.png HTTP/1.1\r\nHost: pc.tirveavip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.tirveavip.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Mar 2026 20:25:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 15:14:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6974e1d6-1421\"\r\nexpires: Thu, 09 Apr 2026 20:25:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fuAXnJFajVfj4ruWpPyy2swPKPyZV3DEugIUzXdzLZMf4%2Bs8AjwFFEJC1%2FR%2FTKFgeMsOu206ONFg2xf1h5dBRRQhRkDF2DLSADVBvi7FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da50cbc4c80a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 853, 8-bit/color RGB, non-interlaced","md5":"25037156513edecc307b7df26ce86da3","sha1":"2bcb7ca963fb0deb1616ecba74b0dff336ad9f10","sha256":"9776c19e1cb70b592cd49f533f90e7cbeb42e9f413e8e4d3255d6a5e39da4d44","sha512":"762c9cc6a236c33bf02400d9b3b7cc0fbab8258e9389a13cbb276894cff160d2a3e83dd772fd0a56f58b2c69ca92376f9fc21f2a01cc19464b852d0da44ed1b4","ssdeep":"96:6kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk8kkkkkkkkkkkkkkkkkkkkkkkkkkkB:A","tlshash":"5cb122aa9fa108adca25133cb7cf833e34735e9cb006871723c91c34ce8d10e1b5206a","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-08-01T23:22:20.427918Z","times_seen":239,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.tirveavip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}