{"report_id":"e87cb155-cd4f-4530-83c7-9a04eba5b2b7","version":6,"status":"done","tags":[],"date":"2026-01-27T13:26:51Z","url":{"schema":"http","addr":"user847.trustvirtual.org","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"172.67.143.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"title":"Trust | Your Private Crypto Card","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-07T23:20:53.096631Z","times_seen":1036059,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"user847.trustvirtual.org","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"172.67.143.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T13:26:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"id2328.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"id2328.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"id2328.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"id2328.trustvirtual.org","ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":1,"received_data":1027,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-01-22T00:09:00.530608Z","alert_count":0,"request_count":1,"received_data":763,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":13550,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":1,"received_data":202063,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"user847.trustvirtual.org","ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-01-27T13:26:54.1271Z","last_seen":"2026-01-27T13:26:54.1271Z","alert_count":96,"request_count":32,"received_data":3793583,"sent_data":15078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":4,"received_data":102684,"sent_data":2176,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/342-63e6943cc35b3672.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c4915ea72ad2a7777bdaa63054d8d8","sha1":"ddd352b1b226037b6d850622453b0945ade8c067","sha256":"6401fa77d7ceb2f356051077a51205828a6bb2feb114b31c8e475e7aae355a25","sha512":"a40de6ba94d4a8a2bcf1f5982fc7fae3b5dd6bae13523ccf11cab5798192a4cfc1f21560ae06f0db6e7091b08994da062186800e249ebc7b80dce0e873aab4d4","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+SKQw0ymqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5KQwZyty3VZCRJjVsB","tlshash":"25253a997752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","size":967514,"data":"","first_seen":"2026-01-22T00:09:05.834486Z","last_seen":"2026-01-27T13:26:58.87567Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1253535cb790f5cace01c49c50c930f0","sha1":"8ed2024482011249f794da15ebc4cb3a3807bcb0","sha256":"91e2add6a3a0476be1930af98932fc56cdab46cabeece9c84a45bb8634ad1e36","sha512":"678821cb934a4f02e2adbea846a347417abf37962c1248f49fb0c4a5ff418d9261aad46eec914fa21cbd126693858a9b6799d1a9e9ea6ea67f5a9562820a771a","ssdeep":"","tlshash":"e4f05c9f2c03a05233fa223dc32ba66b3762030324c2d804ba0dc4103fd4a821c829ce","size":597,"data":"","first_seen":"2026-01-22T00:09:05.879788Z","last_seen":"2026-02-03T02:42:27.195815Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-07T23:22:33.172068Z","times_seen":217212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/webpack-30e6a7124fed3c34.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c136c12f640bd5c0654d069ae042a8e4","sha1":"89259c710bc69ba34c4a95671c8a4f04e9736263","sha256":"3919f0e6732a9754f9d195f1cde4a044f01cedd40e3acc7cd5256e9b31f9753e","sha512":"d0037322325ee9476dc5bdc698d651f424ae683217fecea84e7d2020f37f462c538a573ad46e7ab4bf6dcac50dc5d3b86a6fd46beeeadc1ddcf2b33ba1e4b6d2","ssdeep":"","tlshash":"4371c4a53665eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","size":3587,"data":"","first_seen":"2026-01-27T11:05:27.45443Z","last_seen":"2026-02-14T16:42:11.273256Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325456,"data":"","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7190cf3ece46d2caae606396a6a6b964","sha1":"e16fecd6d4084fa331c4ab8178ca275d62b24b68","sha256":"cb9cbdc8761f97e9fdf6aca3fb2067816f0ce329452a0a0629f7761e59a95fa5","sha512":"5e3d867da1ae1332bb698b341d58967983055fa5ca9b5c37a0716da0f1f897a22041ce39333598fe605c0d8ccce36ae8c0e7a3049a58b506616469cc6e859b87","ssdeep":"","tlshash":"4041181f3080f9917df3ce5382360eb2858dd83a51bce27daa4eda2a546453f476c961","size":2256,"data":"","first_seen":"2026-01-24T01:16:32.146083Z","last_seen":"2026-01-27T13:26:58.905501Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40733f87ab53a699e2311bc9aaac16b5","sha1":"3019a4a4d7b9114bc79967bfc5e66bae406cebcf","sha256":"b85a42545485d057b1cb2b70b9b709bc8c0e37765976851a284362b7626da8e0","sha512":"6c4a165bd0eaada71d0af07e3f22654b7722c643ad462e0d46f088b4d6d5b74bed5da5534664c674470b322d5ef419f2ec86a41053632da25027a1bffcfe7638","ssdeep":"3072:+bd8oe6niBow0SB//Treu1+I6n3/ejLkNYvaSgT9oBUlmVMSxT:ZrvzG3/+LkKS9oBgmVL","tlshash":"6e1428cdb7da706683a36578503f010bb17a7992f84cc8d0e192d9d42e74aaa0277f7d","size":201414,"data":"","first_seen":"2026-01-27T13:26:58.90144Z","last_seen":"2026-01-27T13:26:58.90144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/app/layout-aa34c25dfd1d596e.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f763e241495d62a08f80be264e425ccd","sha1":"0b6cb0119a883b668abe30af3357759b51643211","sha256":"42e17010cda0ab20c7f6b415f6e2a6819e2ae9e71f5da45cc5d37abc63397b29","sha512":"8e2dbd71f5151c1648e9fbd19a950793103a29d2fae3058370f2cb7e591d6249ee458294eb75d2971d6324b4001aad1cdc0747ba7ee1dfc688e9817bb7e6d135","ssdeep":"192:q3A4n+5ELTiQjTiYdK8xWYUQJ/JcxpfaigAepLIecEEn6gyxyrn86:q3TRTiWTiYdrVUSJcJVVCM","tlshash":"ba22d9d2f281fd68a53909c4d42b491c321a1f61d62f8c60bab9fc9b2195dc8b5b1fcd","size":10547,"data":"","first_seen":"2026-01-24T01:16:32.102954Z","last_seen":"2026-01-27T13:26:58.864005Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/app/page-37f369c2edf3950d.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee105a5d2b36aa04f015a02ccfcbb969","sha1":"89df708b20d8d9c58ead34ffa2dc552006988996","sha256":"3198586eed018e27971dd10f2486fe1c4ae3f68f53c23015f0ca6f06ddd1ca76","sha512":"d3723c54606ab039cc9e992a95ae90924c09f11f7eee829a28dd6e575a4a5c2951989c78d53a16789847628b93d7d4c6bed3a649e86c33bc00ad1575a736444e","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urc4:wLHGHq3XAq/","tlshash":"ba422955e494ebfdf92b19c459af504c722aaf84cb0a48f078bd78240b054f57627bcb","size":12823,"data":"","first_seen":"2026-01-24T01:16:32.127185Z","last_seen":"2026-01-27T13:26:58.900257Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173024,"data":"","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/29-24b8452b1e7ad86c.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16f00acf83df4682009294614691a0ba","sha1":"0a295061841fac8c9ffae539f621519b975462fc","sha256":"c64963bfab4e2513573ccfd6964476752a58260777a5c041d174042e175679af","sha512":"3add1f68e2d6fe238ce66c9caccc0350c2625bfe7e17f171d81a1a24433d092694afb9e3922922b51dca1569a692943595a8af3a2041783e6578b8ad8ecd9227","ssdeep":"6144:YclbuCQVUJ1dUNp7zF34OIPkjt02/fS6vI+MYdbPSzJDQTb2RDbt1IRtOj85jz/9:YclZQVU96hf/fuYdbqdQmRDbt1IRtFNj","tlshash":"6be40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","size":659283,"data":"","first_seen":"2026-01-22T00:09:05.829174Z","last_seen":"2026-01-27T13:26:58.898126Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42b9b574a43c6c3a4a2d3bb134478fc5","sha1":"a41dc28bbcff59a31e19b0ad7bad8a5251fb47d0","sha256":"cd96434fa65bed8e41d6deef38df916a296fc0ac07d1f63f2d5926ec5ff4fc1b","sha512":"1c0d9e40a7cd0116515ca70420879ea931fa7edf47649a0cb22267f8ab5ec947ddcfc42e5dc9b81cf57650995e12f286670206dc3e15597f0a2d216d19323b29","ssdeep":"","tlshash":"93d0129cd649e8559534445b107f0e19e0ccc96d43d9c4dc73e8cdd7c211d7c0384c82","size":272,"data":"","first_seen":"2026-01-22T00:09:05.874187Z","last_seen":"2026-02-14T16:42:11.28313Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d9f5be96ec528b1ddaf955ff8c880ce","sha1":"1bb1a9d86cbf9440edefbe0b0aa7deee4b8b8449","sha256":"f1479d83b4f511fb4bfee822cdb89efda5a339a92e0143dd85ba8099f6d7fc04","sha512":"e484d8858a472df126b5d91a80c7ad50c8f101875e3ff2a8718152d58c6292f8630562515d10e5bc720d6e8340129e9b32485bf4f324d86516ad08687273346a","ssdeep":"96:LTX9ZhddrBGB57mWte7cg1xqzc/xmW4Ytap3EZz9C:vXThdRmsWhgnqzcpm/YtaF","tlshash":"5ca1dc6e6409dd5becad3d69027e9d3a20cd456b43d1eeb8baccce050b4247a3796dc0","size":5018,"data":"","first_seen":"2026-01-24T01:16:32.153671Z","last_seen":"2026-01-27T13:26:58.907578Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/main-app-144ce9e79544f778.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24ba5b4806ffccf6f02b9c37258f32a3","sha1":"cc1017a8385022f0572918cdee92a835a0c7cd58","sha256":"21a7c94e1d78fde18335c02fedec112821d0be1d9cde1cbfbded16270138a88f","sha512":"57d88965092246449946832fd918ff2c987235faff6ef3dc443480a40e71635f6fce1f7bf3947a24825ba715aab0ef8b807460f73d7e956e976c18db162f6f0c","ssdeep":"","tlshash":"f9f0fb5b4f0cf92f5c26ae65fe97ace2245f4175202b4e606901deb13c23b6dd270408","size":569,"data":"","first_seen":"2026-01-24T01:16:32.123963Z","last_seen":"2026-01-27T13:26:58.862787Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b48774e437759df326f39d78dbf586f","sha1":"c32ef9d73e91386342b6c9a3a95ce1bd848abf8f","sha256":"ce9b92a6127c9032b4d18359c01619ceaba6b3ded056d4911e621933cfff8a3e","sha512":"b5df156213267203e907c5657d50e8aa86a39e35d49927dd1791a42d35013347f59127c1c1b0968f7301418ea9f8a7f4b476894b61fdf11d8418af2400db724d","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNS9EFxSyHI/3p1gy61Q:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1c3F2","tlshash":"06f31c014bcd29ba034b6387a849ad5e31a986f9778543f14ded987f10e2dacd13b70e","size":168266,"data":"","first_seen":"2026-01-24T01:16:32.151329Z","last_seen":"2026-02-14T16:42:11.263547Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","size":695053,"data":"","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48aee6a15db79ea057d4e341c6ed5d91","sha1":"8e753d144d760caea03cf3f4ae7bfa7cff833f24","sha256":"514be39206a8c450e93957489b3dcbdcc3a8ced46c4dbaccb6191fdda399c535","sha512":"caa4394bf7f3414770c005c191d01fd062bc39a75eabb6480d40c463d888f963e7916405ef7fb9e80df5e03dd2c5ba31b8012b40c1581ba30d8ccca4b043a8ed","ssdeep":"","tlshash":"b2d04c88211b4c7156a72a454f6fb604b056621294919b217d1e63485f21e17d754854","size":224,"data":"","first_seen":"2026-01-10T14:02:29.698224Z","last_seen":"2026-08-05T11:33:34.350947Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8afcb6eddb3445bd548549b72ff844","sha1":"b8d618412912d76e21b58a10804a3c732f2bde4d","sha256":"3d6f3712674ae3b1aed160e028b177d34de2edca1a4b2bf2762581573ef84e4e","sha512":"f0e9109310d17a58e2847f9605f29ff6f5aa18a36c159b3e00418cadcc3dbb04040174169ba3a190df441c8d6418111e8a329e646c02ddff2011a93e2d0f5e57","ssdeep":"","tlshash":"ceb01278e011fea114b620726139f0c6325f504d196410601223a28c02443182703fc0","size":91,"data":"","first_seen":"2025-08-19T15:40:34.902526Z","last_seen":"2026-07-29T11:23:51.506106Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"067dab6ee593961c65e21ea30fa21d07","sha1":"80f6d01b4694eba2af6efe0e08d033cfd2ad2646","sha256":"fa68f9b6e048af728edb6e4dce32cf7fa952f9c11c66d67f4f8f25a67e77ffc1","sha512":"6aae4a1ed05e001bb9005c22a3be287ea23582fc768bdf9d72888f9d3c23885ee7b8a25bd9ce1c003126aa162d7f08f4b5ef2d67807db0c3ba6978494f92f844","ssdeep":"","tlshash":"38c0c090dc02cc1cc3b74f321c3b0c3921ccc5a503054146dcc9cd2819c1b3005b0dc9","size":186,"data":"","first_seen":"2025-07-22T07:14:20.941197Z","last_seen":"2026-08-06T12:32:48.397977Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d32f2f7249a03993ae19d14801b1aac","sha1":"382aa428c9dbc271f2779ac4123211d0301521c2","sha256":"1b63cf766747e68985a6f2813ec779a17a0d2a1432b2153df87874c538a11def","sha512":"d51b80591aaa2c041c33ddfc3ccd1f6d617d7ee247e7bdae35b382a0c754385faa3f55663b78f3f2e4250f4ebbe8204a35361b018463e70b6332360345d1e536","ssdeep":"","tlshash":"4b01dd416c7acc26ca26ecb68e7d7cf240cdca4d4b859d7605c0cc8a0672df0aea2f11","size":674,"data":"","first_seen":"2026-01-24T01:16:32.159401Z","last_seen":"2026-02-14T16:42:11.287675Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92e3c29b811c82a9398a1c5cbb11b45b","sha1":"06b9d2c78aa0b354339526441f3ed4d52e7e2eda","sha256":"4a31581ccb05a298032e11db82fb6e0fb3c7af500a71fbcd2b01058d9881de4b","sha512":"0d52863c373a91782be664dc100f3d30bd096272d70ea7415fcdcb130de289a0828a07ba3186a760147c7c37d21c76ca3f5597a1021d5d6db434ad81e90a343a","ssdeep":"","tlshash":"49900470d0410c575133001317fc7501555cd04c04413d401f75544f5451155f715d45","size":46,"data":"","first_seen":"2025-07-22T07:14:20.944135Z","last_seen":"2026-08-06T12:32:48.39996Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/276-23cb3927a726e810.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f2afcee3ef73c99f199090dab19abb2","sha1":"a8633aab599e0fa3c7e8d1b24ac878eb5c738ade","sha256":"4560bb46518a58bed76dc8fe170118d4c623a455d0825ab032865a5a80211f68","sha512":"b6b4a2391256d7ef8e780cd6a6f3c8c3b1d59a0a5fae86ba31b9086480a20e34fd37900ababa267534d61350a06a65a49aae5f73fc3f8f65411fe8b260d50ca0","ssdeep":"1536:05eZ8HFH1pYWmyPvrb8ZMNE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxDt9x0xx:05zFDP30ILfGWfDju8JO","tlshash":"a8a33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","size":107304,"data":"","first_seen":"2026-01-24T01:16:32.109069Z","last_seen":"2026-01-27T13:26:58.888991Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/255-dc5f45a243dc3a80.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30fabcea97e444991d6d6208ba42581","sha1":"ee6f0d44cceee3473da95b4cd1daea35ed21e427","sha256":"0ce304948789a2e44b3b9f3493ea62a36ffb4bec8cc6dcd6086a45f51587e5d8","sha512":"1ef36632bb55d1dc6a2a7ae96fdf14d419b65467631b29e6e64a9f8259116b766bcdcff6722eace8a6e270fb1b00aa3b39754e0018d270cc6c4c6656027441f1","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXr7yIzPr6Q04ToTlTx1p7eChTVOocZXxreXRNIrjg/Sz:e79LmA+Hy4r904Aj44RN0E/Sz","tlshash":"61f3dab636d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975645dea1b3faa","size":172818,"data":"","first_seen":"2025-12-29T12:15:56.386555Z","last_seen":"2026-08-01T15:00:23.409382Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/css/734e034a887ccfbc.css","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/734e034a887ccfbc.css HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-13b8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlMgx9DcpnGYEGdTZo1%2FnSn%2Ba2B4E8YM0dB08kvamR641%2FZZpH8JX%2FV9LyZ6bEAJ8wNxapHX4RR1rPaHc7%2B71nl2i4EH4lpGa3pealzc5LSYSFDAPoA%2Fnw%3D%3D\"}]}\r\ncf-ray: 9c4895047d968deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048), with no line terminators","md5":"ba3bdb50993068ec6da8f4018cffc0f4","sha1":"1350ec59a4fe0067e5effadde1fe480d412963c4","sha256":"612e61f371c1748529f786db52db2576aeb57106751725784014912271ac45bc","sha512":"3fea457273c2c8e523ae5935b56c97099bd2335c109065a9f41f0587519a6444c73240a9b90ce58a60c0ef97b28383fd7efaee0d389d39839a9a2c6b2b866421","ssdeep":"96:KKkZPJrxXZWp2KuoP283LkBRh7rKvQEISPhqLtfiQM3hqn:yPJXsDr7LktXKvK8heop3An","tlshash":"a5a1332361083118b127da51f8a15e9e3228b603d2639a9dff86713fc9c73758775e8d","first_seen":"2026-01-10T14:02:29.659232Z","last_seen":"2026-02-20T08:01:05.530055Z","times_seen":797,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/benefit3.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit3.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"1225-19be3b5e8cd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0BOJspgzKOHh94oClHMKiDG5ooHwgjtwEPWuDIA4Qoc8xW8zLdo2N5rEvF6iQ92BwA6hVHKIvy3p44zD%2BGFV1ho6p7Fj91F9KHo7HisyQFYd%2B5FU3VBTw%3D%3D\"}]}\r\ncf-ray: 9c4895047d918deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c210d79d224dc0acca1c3beeb029195b","sha1":"75894cf8e5d238f788bd1d0fb258dac88c5b0126","sha256":"d1207a3591df9b2c69e8f08c29200283571c5744774d8e008aa3835957652a58","sha512":"d82594ace6a3cc531d7430a0d55cde548f4273f2ff170b51a93fa1c980baf3cce40bac295cdbfa444827666d7f8276860b854eaa4dd91bcbab07b277be2af6bd","ssdeep":"48:HRryHV/3wZy0xVsTtmv4jb3bU9UN6Zjamv4jbo6H9kMndH9XHO8laGH9XHO8eH9T:HdOAZrVsTsv2brHM1jv2bx1PL09EXud","tlshash":"86a176eafb2c9cbfe82787bccb48e1f5504d61d664c08368c2799f1e51046cb591aec0","first_seen":"2024-12-07T17:47:59.744392Z","last_seen":"2026-08-06T11:27:12.901682Z","times_seen":928,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/benefit6.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit6.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"1b23-19be3b852e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00RDkZ%2FipCfvHX%2FzjrgeWhMgxfKuwWlRL7p0WTvalU6UBr86LZ63FS0QHRjuF5orfKDyA%2B3jZz8L1Xqcuicl7woq1UFn8vN75%2Fl55GdQBVSF7kiOFCN%2B7g%3D%3D\"}]}\r\ncf-ray: 9c4895047d948deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda874259b72818dd657fdc8e026f343","sha1":"dff7963c2b7cc0a95b65d777bae56e7cf8a762f1","sha256":"00d4932ea31ede39a2d7348985c6dd5416b54e19fda923b866b5fc435e2d6c82","sha512":"3002edc71781a68f7b90c19806eb740e4708436510896f74f7e225fc851f87e111776a99fba399e6b1142862b02713e8c763398668f591267451b2ce5afe5276","ssdeep":"96:ArdFO+fLClvKoyTjtgI95CfDMd/kPpxPL:ArLOIyioAJ95CrM1Ovz","tlshash":"a0e11ece37440cfe7e26079aef2a72b9102255fb2d886200c53b1a79158165ead3fec4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.756999Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/main-app-144ce9e79544f778.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/main-app-144ce9e79544f778.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-239\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8dt3bQCNtX8%2BjbMACAs8CjuqJN4ylvHU5AkpnvLEmFlWGa%2FKc9kar0TK7l3Pk0jaOCRF3zVJW9P8S5CevW0AmL3oESL1z6SJNwK2%2FkYUIz8Z8UCRKchOA%3D%3D\"}]}\r\ncf-ray: 9c4895048d9d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"24ba5b4806ffccf6f02b9c37258f32a3","sha1":"cc1017a8385022f0572918cdee92a835a0c7cd58","sha256":"21a7c94e1d78fde18335c02fedec112821d0be1d9cde1cbfbded16270138a88f","sha512":"57d88965092246449946832fd918ff2c987235faff6ef3dc443480a40e71635f6fce1f7bf3947a24825ba715aab0ef8b807460f73d7e956e976c18db162f6f0c","ssdeep":"","tlshash":"f9f0fb5b4f0cf92f5c26ae65fe97ace2245f4175202b4e606901deb13c23b6dd270408","first_seen":"2026-01-24T01:16:32.123963Z","last_seen":"2026-01-27T13:26:58.862787Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/app/layout-aa34c25dfd1d596e.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-aa34c25dfd1d596e.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-2933\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTdNCzF1wh%2Br8G72AQhSAf%2Fk2%2FJLjAfMtIMtBK4xmquOU6rZlw17UvbjYyliLc1tl7hpVnzMP3IgNkUbeUxGVPfG%2BhKln76E1yVuyAu%2FoWF9ff6ApDxzzg%3D%3D\"}]}\r\ncf-ray: 9c4895049da48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10547,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10485), with no line terminators","md5":"f763e241495d62a08f80be264e425ccd","sha1":"0b6cb0119a883b668abe30af3357759b51643211","sha256":"42e17010cda0ab20c7f6b415f6e2a6819e2ae9e71f5da45cc5d37abc63397b29","sha512":"8e2dbd71f5151c1648e9fbd19a950793103a29d2fae3058370f2cb7e591d6249ee458294eb75d2971d6324b4001aad1cdc0747ba7ee1dfc688e9817bb7e6d135","ssdeep":"192:q3A4n+5ELTiQjTiYdK8xWYUQJ/JcxpfaigAepLIecEEn6gyxyrn86:q3TRTiWTiYdrVUSJcJVVCM","tlshash":"ba22d9d2f281fd68a53909c4d42b491c321a1f61d62f8c60bab9fc9b2195dc8b5b1fcd","first_seen":"2026-01-24T01:16:32.102954Z","last_seen":"2026-01-27T13:26:58.864005Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/cta-banner.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/cta-banner.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:05 GMT\r\netag: W/\"280a-19be3b850b0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpVZva42wq9OamBt1qginhD4Wn7OT7E4pBlJimETD1FHQCATFnMQGidDB5ewKQkNKx3yUs8h%2BqEUvqjmPFd6r445hjQYmN%2FBlNxubGx6egNMIwB1HXZM0A%3D%3D\"}]}\r\ncf-ray: 9c4895049da68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94df810c2ed1a1fbb3d89f767b243411","sha1":"fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a","sha256":"1a07b51df7cce62e8d728ca85759d6a735fff8f54144660fc2b7206b9cf194a2","sha512":"231fb23bbe4cd8a1754f265ff7a4af7444cba4c6a3680fdeb7f49520a3822ca8e779e155373305aa192b35fac82a2c08930d1d4396dda2865cb5b191b686644e","ssdeep":"192:KAcdLt0TAR3pxOVpjWjZiO4NgCAtZ6wzvRx:3cdJ0UR3TgjWjZizqZV","tlshash":"8a220dce3b145dbcf93287a6db02b3b9202b49b707e56310ce361a79640195ea93fdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.776945Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/css/ca091db432343524.css","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/ca091db432343524.css HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-1827\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LS%2BTrFvcmhALjOLcru7ZUxQX8sacXGQI8vYkZQLTe8WXKfCDsa4pN42xoqqzg6zE0%2Fue8I7LQtx9vn0QX9JDKlSIx2AuswuwlqRuGOsFx%2Fxx4lSHgqLTqw%3D%3D\"}]}\r\ncf-ray: 9c4895048d978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5060)","md5":"b7c8861d6ffeede8605c3e2e798a8953","sha1":"6aef66590704d99e0526d3998171dc4f6ae2b639","sha256":"63c155939d0e7e2367172ae4f2abbe606a8fb5e3287b166d0a88ab697e780988","sha512":"b1926d50f33d920cdd204cd44f6f4696ea10114927e4f79f7877480889ce3dbc03e70e3d3fa14cfefeb4e311110ee944bd85ab38a03d66ec35b3086a188f3d32","ssdeep":"192:n7gqzOi1+WT6RkwwDe/9ERSItcHJLVoWD:8k9SIM","tlshash":"7bd10021f657cebbedc4c8d6fb60351aa60a2194ae7915c2ff43270378db160059ed29","first_seen":"2026-01-22T00:09:05.836619Z","last_seen":"2026-02-20T08:01:05.524623Z","times_seen":796,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/css/6e48048022a69e58.css","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/6e48048022a69e58.css HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-510d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itWhYN4VzIXXnO9fxUuwObliqla%2FtplegKMZDYzxlp0yhmBdqSs5yCu2yPugSb2W6VgpPER%2B9pQKWPSAMBUnshH2JRFGpeUnkwGUTioEmv1VRX2%2Fx4jFcA%3D%3D\"}]}\r\ncf-ray: 9c4895048d988deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20749), with no line terminators","md5":"456bb6b0b391ddb448da0fd85f056e07","sha1":"fea7a171b6a892b3b88e4eb5f6e4d0cca980dd2b","sha256":"b82b060e7aad9907b587be5ba86cc635c2b3091363a832f28a12a99b6882401f","sha512":"457e5d5e9fa811a2461244a88f56a01817363dfb250430b717f79c8c91cc9a8c8f91875d58439bca5329066ddc743b74ee63f182757262e3c26fa326e979b878","ssdeep":"192:BwEVP358B9ogLzmh2QaCUjQquMkZ7xrdWMxc7bTgowKpXXXWNMQylG0PlwRR3cQz:Bwg35ZgsHk+dVB1RMedkm","tlshash":"9f92752339001125f12feca4b9d2af99b160f811d29b96fae545b939cacf0970772b0d","first_seen":"2026-01-10T14:02:29.664502Z","last_seen":"2026-02-20T08:01:05.534948Z","times_seen":797,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:06:13 GMT\r\nexpires: Sat, 23 Jan 2027 13:06:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 346817\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T23:00:43.017177Z","times_seen":37222,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":137,"dns":4,"connect":47,"send":0,"wait":26,"receive":3,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id2328.trustvirtual.org/wc-bridge","fqdn":"id2328.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /wc-bridge HTTP/1.1\r\nHost: id2328.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BnXHZjpkr4XyrWEXBQVuPJ3Dw31xguW5Eed9I9Qv2dP01hO7%2BDnENuAj1iXuy1jWnAm44y%2FxQSYoeUWTDaKkGa%2B1%2F62LfUwyxlCfFRfPx5PpfukUS9A\"}]}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors https://trustvirtual.org\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4895097e318deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T23:24:31.532418Z","times_seen":17769129,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"id2328.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"id2328.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"id2328.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/css/4fbad9deea1ef1fa.css","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/css/4fbad9deea1ef1fa.css HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-411b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ill80OgPB1pW%2BBwuefLlgihJFiemYIjAcPtVtp7qOyrfef6%2BV%2FAsFzdtnQKAY9KwTZRJW%2Bi8EC2DrsW8rA365D3qhA5WTIjx%2F4NnCq7BDrSIwZSJtKnKug%3D%3D\"}]}\r\ncf-ray: 9c4895047d958deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16667), with no line terminators","md5":"2d0a2143aac6f815b607554ca2564f79","sha1":"c3ff9f22d08bdda8afa7233200826c212a187e31","sha256":"d53f0e2f90709acdbe6d9020caf805ad64e93dc1f0f63ce044b9b0f9cbef5408","sha512":"1112a55842c9d516c75b69c6ec0e60cbfb09a9209b33a5a78e27d376e4fd1dbda7a846b81e4fbea3ccebd1b1c26bb7f2a26765a13247663fdc7c63d77eec6d44","ssdeep":"192:k0c9Jo5X5lWQ9lTIIH2XqMskR/KKaad6P6bHRMosDgfr5sKC/Yp6zSaBsYh:ke5nIIwQhVDQ5Tol","tlshash":"7f7242319599113df01bdac3b4c2aece7158c903f1a70abeabd921afcec15da4635349","first_seen":"2026-01-10T14:02:29.686104Z","last_seen":"2026-02-19T05:47:37.1221Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/benefit2.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit2.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"29ee-19be3b85404\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMvjxp58g0E1Pzw5tGh8nBDKGUeNjSDb2dKCHXQI160zQwYfXYjHp5H97iciHy1RhqygWbgvLzk2BwtoRhRhHjb94F8sakXbHgsJiR%2F%2BaQlVL%2FAmieGCHw%3D%3D\"}]}\r\ncf-ray: 9c4895047d908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbda6fe9682d63433ce25aec010fb362","sha1":"90e234e481359853e1a3d40644dff49ce20f5934","sha256":"c6a0aa994362014ebe33193d0e9a16ec866d3787a32300c030f47fc45e2f4724","sha512":"a65f2964308672761d0c1d04eb449206231cbb1e9fa220937a89fcdf6f50339c037b42f56a7643d91edc2d7397bd5beef20ba1ef613cd9afa25f2a741b9d7f83","ssdeep":"192:SW2pQeCBWg8geYl7ByksxaThcuDNoMmNquwn6J9c3D32WMVwnNNqRSB:+oPsYVPZDmY2kju4Y8B","tlshash":"4122c7caf32869fdf6d34f59db1072b4260a303a0e66536c813d8d3c1a8560ee51fd90","first_seen":"2024-10-12T13:56:58.711689Z","last_seen":"2026-08-06T11:27:12.8992Z","times_seen":921,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/benefit4.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit4.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"16ba-19be3b851c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPU%2FURWbj1lbm4YoAvjIEzmS1dVQH%2B1s12gQ0E9Jed8MF1pje%2FNugB1Y4zz1FErRKdAm2RJ8%2B8nW4iBmDpmCdcMMS2V4tOi0Wrubsf5zJ4i%2F%2Bhltj1dIOw%3D%3D\"}]}\r\ncf-ray: 9c4895047d928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e6944c95750e2f20dd0902e8065b2c","sha1":"31540228a6b9ddc6cd4701720fb9b53210cb1e4f","sha256":"018c0cea41d585a7b4190176e7a18128a89e1aee685ab9e763741f376081b995","sha512":"e88c0f52743f841767e457a627248ddba418dab011ad59ef302b67a2da15908c8cc5045112348acd125fbbd83f236d4681fc64f54834d29ba6525718657d2699","ssdeep":"96:y2dqoNJZEMhiFeGnITA2dqoNorYvjfLVOgnXpv5pwYHBrhwYpWUoqZB2n+jOdFRf:hdqY38Z0dqJsj5v5iYZhv1Cr","tlshash":"3ac1c8d57734b9bcf0e70be9df10f9a4304e70761a559388c3a1ca3541969ce992bce0","first_seen":"2024-10-12T13:56:58.696978Z","last_seen":"2026-08-06T11:27:12.916499Z","times_seen":891,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/550ed063-ff1761c4cedc8066.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-a9b0d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcOrJ9XpmDt9CXc3VHH51vYARER%2FclwJwBQfiCMvza9Jr8U4q6vk%2BN8cEdSH6eAqn8lGguG4OWCatsLMuYuPSZ2c5HlQ%2BYo5sD0MpAYKv8hphLIWGX4ovg%3D%3D\"}]}\r\ncf-ray: 9c4895048d9e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/342-63e6943cc35b3672.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/342-63e6943cc35b3672.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-ec35a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WX7J%2BXmLOQTmWHVD8S%2FKcA4HZ6MkO37VLheoU3%2FP4i44KrpYQL0nEJvFfPIsIp7XNy8cFjXYANTJW%2F%2F24RyteIjEZTcVH1MSy12GjZe8brUPV3pKITnJoQ%3D%3D\"}]}\r\ncf-ray: 9c4895048da18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4c4915ea72ad2a7777bdaa63054d8d8","sha1":"ddd352b1b226037b6d850622453b0945ade8c067","sha256":"6401fa77d7ceb2f356051077a51205828a6bb2feb114b31c8e475e7aae355a25","sha512":"a40de6ba94d4a8a2bcf1f5982fc7fae3b5dd6bae13523ccf11cab5798192a4cfc1f21560ae06f0db6e7091b08994da062186800e249ebc7b80dce0e873aab4d4","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+SKQw0ymqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5KQwZyty3VZCRJjVsB","tlshash":"25253a997752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","first_seen":"2026-01-22T00:09:05.834486Z","last_seen":"2026-01-27T13:26:58.87567Z","times_seen":9,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:06:13 GMT\r\nexpires: Sat, 23 Jan 2027 13:06:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 346817\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T23:00:43.017177Z","times_seen":37222,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":151,"dns":3,"connect":13,"send":0,"wait":16,"receive":7,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:06:13 GMT\r\nexpires: Sat, 23 Jan 2027 13:06:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 346817\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T23:00:43.017177Z","times_seen":37222,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":135,"dns":6,"connect":19,"send":0,"wait":23,"receive":3,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/logo.png","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5903\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"170f-19be3b85174\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWtFvFj2zk30ZXQ%2BpLD8XODP7nVeCLLPkOZ%2FGrmOGdLCol9KbZKFmWUbVo0OpRhTA8svHDzDu0ld8pIAJS33WKgVkHBiKDoxsAV7rFCYCufxlCGgHQ%2FOGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c4895046d8b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 80, 8-bit/color RGBA, non-interlaced","md5":"e46d5731a7cc58448e0a45dd21153660","sha1":"647655a2eb69253c3ecaf2c0bb0fc2fb1ed1365f","sha256":"18a1e6c63d170b5a7ab8c36c347dca14238bb0bf428f42353324c439206fc146","sha512":"238ea78c6c1d1c9342d65e64047c8972029ff1b9fc7558b74fd3f8350fb1596d78d412d412e1e15be92ca47f7a151d75a12bda58e53f7cf63aa9a3c2a9c7c9e7","ssdeep":"96:BSxKB/OKn9O2RznPFIHQKa2peCppDAK10drUho06sMze5xhaaHekx1Zr7ccG:BSAtOYJIHM2pemp710pMo06sMzfGx1x4","tlshash":"6ac19fe22a24b7f83c96a379c360593c50dd363228464f2f6a60516df81e8fb875951b","first_seen":"2026-01-10T14:02:29.677703Z","last_seen":"2026-04-28T13:46:00.717468Z","times_seen":816,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/intro-image.avif","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/intro-image.avif HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncontent-type: image/avif\r\ncontent-length: 159172\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:29 GMT\r\netag: W/\"26dc4-19be3b5eba1\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMkjkDJ4qLCHDT3mhqaZpLoJ%2FVcHo7giaMxWuSiK0fwYivMBaQis8sbeERIr6wvORy6n7sQrPji%2FuyfGigKrPrsssVAAWTW6rxm1sr4qGDfurmgFkCuavA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c4895047d8d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159172,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"77e3c9b2f057c85598255546be9321cb","sha1":"fd799462adae9dbd39365b167ce15e391d1f0297","sha256":"efc10220b84b9e87313c50326e21df82f1c61ca6287b7a362624b3cdf87b666c","sha512":"f34e2ba69f6fb78c7804d5c5ec736a67f8f78a70436f08dbab887acb7df14359d3d584b46669d5cc56963e7fe795e4666061fd214f4b3836612c77bb1a1abfe8","ssdeep":"3072:3I4OafgtarybFxqcH+wnsTuNxZe2rYoP3u/Ql5d5CGLbCTnsKOfq:1SVZHdnPPzYo2Yl5ddAGq","tlshash":"38f312bad602cf85f993be3c310948b18e83d63a797f03735a8ca47d54b9e6e0d01695","first_seen":"2025-06-21T11:37:37.70886Z","last_seen":"2026-07-31T14:13:47.049742Z","times_seen":855,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-2a3e0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eeAWUzYZkc1jlsz%2FSDBVMFHvHKzESYyzJOCne4FboZbRnnarnoOyUN9d%2FphHRjL5HJZaeciVywfFWTpm3NOSIZiH9DPv0aIVSidKYjx%2FFIqxnYahhMdFw%3D%3D\"}]}\r\ncf-ray: 9c4895048d9a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:08:03 GMT","end":"Tue, 10 Mar 2026 17:08:02 GMT"},"fingerprint":{"sha1":"73:C7:4E:56:88:E5:CF:72:0E:94:F3:06:6D:8A:AF:FC:88:8A:F9:CD","sha256":"B6:54:2C:1C:36:F9:45:9B:A3:52:B9:CE:D7:F8:5D:38:C1:E3:7D:B8:C4:02:10:DD:4F:FE:6B:9C:3B:ED:4F:2A"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user847.trustvirtual.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 27 Jan 2026 13:26:30 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://user847.trustvirtual.org\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-31\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c5ddce8696f4e8d5bbb0ef5b49f4dce2","sha1":"00810d77416736bc8f1c45ab0c5a49e037f7094d","sha256":"0e19fb21eb6cbe960d46805ecdff43343f06a6d78cc654478f6500ca16ce8ca0","sha512":"1890e1f44ee18d444dbaab8a636921bc0c79cf652334dbf4079c85965092a7f33edc4fa36a027acc4d5e3e29fe8eb0262323c7347a29f7ed77d4600f5500bf67","ssdeep":"","tlshash":"38c09b48ccddb0595356aa577cc1f1f2c0054415df414315f0409d5e9dd90ad58dd551","first_seen":"2026-01-27T13:26:58.879738Z","last_seen":"2026-01-27T13:26:58.879738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":109,"dns":21,"connect":18,"send":0,"wait":34,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/api/retrieve_id","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"POST /api/retrieve_id HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nContent-Type: application/json\r\nContent-Length: 162\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":162,"data":"{\"action\":\"retrieve_id\",\"domain\":\"user847.trustvirtual.org\",\"user_id\":null,\"message_ts\":1769520390507,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkPs6ivlsLhVbZak1tEdhK2x848lntIudweCQJhTb2%2BL9XOcuVfRtrXZjpX2ur%2BEcnA6sp3dAk1YMMIWAr1mZXqDeFjipchZaI0mVDuODZ4AjzyejEe84Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"18-aqka6m1PIhhggnuxGuUX94+cuBM\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c489508de1c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2fc2768b4719951b21d8d42adf80cc78","sha1":"6aa91aea6d4f221860827bb11ae517f78f9cb813","sha256":"b8b3ea982656c6fc875934a15e0aec730a1a1f3b876f0dcb099559b582e1311e","sha512":"1e4ac4d4f9740bfb39aa8c1b0a3c06ebca7cd284982455cf88ce45b8007ef330c50c2c51c8e2352e9ad73bf9fc90380f550877b1606fa64f15f8d6168baf4f2c","ssdeep":"","tlshash":"ad700000280280220c88088000008020abb03a80002e0080008ea82088802a0a88b820","first_seen":"2025-11-29T10:39:40.314123Z","last_seen":"2026-02-19T00:53:21.376666Z","times_seen":28,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/flags/us.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /flags/us.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwRScNqV%2F1AxFzo%2FuAtrFgL2MZy7nN3QbW3iyA5cxtiqiv8KYpCB9M4gRq%2BgQZEtos7NS58%2Bn1HjafUeXTE9D602bfXB0rhtD1Jhye%2BnpFUPpPGkU3V70g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:30 GMT\r\netag: W/\"288-19be3b5efcd\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4895046d8c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-07T16:30:11.872714Z","times_seen":4359,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/banner.png","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/banner.png HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 148744\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:21:06 GMT\r\netag: W/\"24508-19be3b85398\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aF9fPKYpHHIGPkPxJ6K8MqrsQyCT32hpARb7ukx0B1v7SqqNNlRM45QRGbQ%2FuwWs%2BuuU%2FB55BYfja7kJEG0Y9lVvgT2gMLRmyjiO3Uxc7qssQxaPszrr8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c4895047d8e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 763 x 518, 8-bit/color RGBA, non-interlaced","md5":"d9b41e719f1a670928067723380d3039","sha1":"548cd5df56cbbe772234630ba82718bc48edeb60","sha256":"49982d38a3213a9e764c67f5376adfd185748f011f149083b1ba4ad643b7bc25","sha512":"49ab26332083cfd498aab0d7fa0cebbf770c02b0092f9d6905018679dc8a5ebe066fa59ee6a4937599a6dfe94ba793e31b1b608b698b01655c3439927f4a2ca9","ssdeep":"3072:tdzqbVITOtA+AIG7IsOIwbTCvdRN/WU3Nu0pU2I1vdFlcD:b0iOm+S7IC+GvlpuCU2I1xq","tlshash":"0be312da4759e35425ade3f23f19dca3e977a8c3d1b336ec525002b07c703a8c8665a6","first_seen":"2026-01-10T14:02:29.67497Z","last_seen":"2026-04-28T13:46:00.709922Z","times_seen":821,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/webpack-30e6a7124fed3c34.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/webpack-30e6a7124fed3c34.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-e03\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2tZLZplDSDwJB4lfdJcHG4znlXeomdj5zyskixEAl8DB7NUfucqDW2F0IA3Cx9F6NyFEy7YCzGtUI2ITeSeKm5ZU%2F%2Ff7b4KWQ5BPNQtycg2MV2KeBLsjQ%3D%3D\"}]}\r\ncf-ray: 9c4895048d998deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3587), with no line terminators","md5":"c136c12f640bd5c0654d069ae042a8e4","sha1":"89259c710bc69ba34c4a95671c8a4f04e9736263","sha256":"3919f0e6732a9754f9d195f1cde4a044f01cedd40e3acc7cd5256e9b31f9753e","sha512":"d0037322325ee9476dc5bdc698d651f424ae683217fecea84e7d2020f37f462c538a573ad46e7ab4bf6dcac50dc5d3b86a6fd46beeeadc1ddcf2b33ba1e4b6d2","ssdeep":"","tlshash":"4371c4a53665eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","first_seen":"2026-01-27T11:05:27.45443Z","last_seen":"2026-02-14T16:42:11.273256Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/aaea2bcf-5976f34e031a4e16.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-4f750\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVnDWdA71vIjJ9FFpPIyGrsjHLKw39HnItmYk8Snx5%2BYVYcmaWlbdyHs1bxIiEYarftddokQLNW%2F0nB2Fb3IatZWzgIOeVlH6ligXiBansOFlZa%2Bhl217Q%3D%3D\"}]}\r\ncf-ray: 9c4895048d9f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/276-23cb3927a726e810.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/276-23cb3927a726e810.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719803-1a328\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jztPg7Msu5poJQIJP6o9wxCg2WgaxHsqMjmsI9qq3MBXpEF4VFYpMYgUmlh3QCHuBYq8Wd%2FlrI%2BfTfwXkOn%2F%2FvPRqb90Unjhc2yubg%2BRvWBd0MraFtYOqA%3D%3D\"}]}\r\ncf-ray: 9c4895048da38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63951), with no line terminators","md5":"7f2afcee3ef73c99f199090dab19abb2","sha1":"a8633aab599e0fa3c7e8d1b24ac878eb5c738ade","sha256":"4560bb46518a58bed76dc8fe170118d4c623a455d0825ab032865a5a80211f68","sha512":"b6b4a2391256d7ef8e780cd6a6f3c8c3b1d59a0a5fae86ba31b9086480a20e34fd37900ababa267534d61350a06a65a49aae5f73fc3f8f65411fe8b260d50ca0","ssdeep":"1536:05eZ8HFH1pYWmyPvrb8ZMNE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxDt9x0xx:05zFDP30ILfGWfDju8JO","tlshash":"a8a33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","first_seen":"2026-01-24T01:16:32.109069Z","last_seen":"2026-01-27T13:26:58.888991Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/favicon.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9c5dAkyNmGLcmslqla0U4E9SrbBqBjKBgLJ0SMQFEpawvWirZUfvEydkQxY7lntol2PsXTFIuRXJnGRdks6ThwgmoFvV1fFxkR7TS74gtD%2BJ2dBG7%2BYOA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:29 GMT\r\netag: W/\"2fa-19be3b5eeb9\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48950a1e438deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T13:26:29.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyBYwVEaKBEmQBFTQ4SjdANi0QONT%2F5qtalrvqXDYF3tJTMo3a9lej6WamjJg98c1YzFNzgYlIoKms79q7JcZq6l%2F%2Fxtv1y36Y3hj7ZzOpEeOxL4Wzo%3D\"}]}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c48950139565688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25578,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25555), with no line terminators","md5":"1d95eb4399462618412be6e8bc61d7ec","sha1":"0ab09b10e5f3cce48bad6acb062b0a1c85b119ad","sha256":"1da77d430c4faf09b4ed870c741a2941596a277f40f28aa87a425f9f42b1db91","sha512":"6389335d68ebe94d93185bddb41dfbc2a84f14fbcc7cb6d6129496647dccc55e73624be5bf2b8bb85d2eddb6072ef221dc5a30aec59ef3880ecb8b1dc7f5159a","ssdeep":"768:prMsvzOfqJmGnQIIdFwqX7XhXtXhXoXVodIETXDX1RbtqMH5Bl:FmQnQIIdFwqX7XhXtXhXoXVodtTzFOMF","tlshash":"ecb2da37b804f923d6635ed9a17aaf7a20c6c119c65a807877dcca6807d2d75ab32c43","first_seen":"2026-01-24T01:16:32.132117Z","last_seen":"2026-01-27T13:26:58.891251Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":36,"dns":9,"connect":1,"send":0,"wait":128,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/benefit1.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit1.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"56ff-19be3b5ea99\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1s72w9le6QmII07PftH%2BKpKphAkOu8ryDEVMYnv9P0sPxJi6LXdXS4I7cvBUy%2BqYnSlbAFpcyAgM9sKnoMxocnyB3Dkor3uVPkBqK90zPkkmMTXMAu3qNw%3D%3D\"}]}\r\ncf-ray: 9c4895047d8f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1645fe9e4e50c926db510f45d2670378","sha1":"325294dfe8267c63104646d60cdce3e201f6d7a0","sha256":"89f90f697ecb81bc6558e7a4df1abee65c3e45238e818631b14960c55e6b5ab9","sha512":"c569f384e77c296765cd60c630d8ac05d09e006b057e01f1a6940359d9b76cb3c62f613996be763b7fbd365c9496253ac985d1c2777e5977bbacb7e1775ff9f3","ssdeep":"384:jz7cy1KpXqwovhEqTjOyf731s1uhjNo8JNoXuhGYZe9YZ6iSqHmC/k6O+VgaCqG:jz8AVTjOyB3teC/kZ+yH","tlshash":"32a2b7ca6b385dbcf1c74fbadf2479e8200960ba0e2917d4813ea07d1657dcdd61ac94","first_seen":"2023-12-20T05:41:29Z","last_seen":"2026-08-06T11:27:12.922952Z","times_seen":903,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user847.trustvirtual.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 27 Jan 2026 13:26:30 GMT\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47cabbdecadc902ac84a6d9cee4e5644","sha1":"0cf23e67bb68a8701df2523b103c8614255d50c5","sha256":"6cb6c9324cab91ab024247e2e9d10ec371642dde873cf44af4d7eb455ea3a9a9","sha512":"457609607e66e5747a29792df54244a9b3591770466e4b3f7e03336d705ba78ac1d9fb0d7a4885be1c117a6ffc66e1ac0c4f34283850ef79a1b6a1cb75f0a5c1","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:UmkwU+ME02EQJ","tlshash":"0842a9900027e804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-11T15:36:38.535296Z","last_seen":"2026-08-07T19:31:30.320679Z","times_seen":1475,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":113,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:06:13 GMT\r\nexpires: Sat, 23 Jan 2027 13:06:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 346817\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T23:00:43.017177Z","times_seen":37222,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":145,"dns":0,"connect":9,"send":0,"wait":15,"receive":3,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/api/retrieve_config","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"POST /api/retrieve_config HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nContent-Type: application/json\r\nContent-Length: 165\r\nOrigin: https://user847.trustvirtual.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":165,"data":"{\"action\":\"retrieve_config\",\"domain\":\"user847.trustvirtual.org\",\"user_id\":\"5\",\"message_ts\":1769520390752,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fC0ls2wPH2z4fMR7EoVQmwBIE3%2BG27hEAEHhifD8c1EJ%2BRToJwUEnktJo2D7TmRPSTwp8KSu%2Fc2ivXdQu57cFiiGeVICMmPF4rWuhmukZRsM724uc%2FtWKQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"1f92-1xbuRdKCuVa1WW3cFPBMAiEolGA\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48950a3e498deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8082,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f5c91518e3d748db45d335272ac917b","sha1":"d716ee45d282b956b5596ddc14f04c0221289460","sha256":"6c725e7d9ba079bdd5fd99ed8257d88cb952420f050583bafca2d3ec479b1c36","sha512":"37333c5758a824764a155ef14a953c6c6540be5aae44ca66b7d16c54b0a7aba307c9b2bebfab74e35d8ec78d83702b441852d5f6c6c8839140fbfb8ce2179a51","ssdeep":"192:ILfJD2qIpqBq0c3jvi+7eLvw5vwhzvwfvwovwlvwKvwsvwUvwZvwCvwmwxvYT:3RpqBq0c3jvi+7eLvw5vwhzvwfvwovwm","tlshash":"0cf1fda2bdddd359c1ecec717c9f6ae204eca35d4e4c8323035a541a4cea9ae6787407","first_seen":"2026-01-26T00:46:39.648548Z","last_seen":"2026-02-19T00:53:21.367647Z","times_seen":22,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/benefit5.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/benefit5.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:28 GMT\r\netag: W/\"2765-19be3b5e979\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQTKwrnQnsu0vThFW6RuUbxXQGPNePm8gyyHoqsaDXw34h2X7nexMbT2J7YZzwNgDQjAJA3BpcdiuO5O3zLpxhsI6deNhTElLAxT4NXoe660ntDvxHW5xA%3D%3D\"}]}\r\ncf-ray: 9c4895047d938deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83986156dd8df49f40175538d33639af","sha1":"b67eb4b5fea974adb55977c6cfc42c3ce8b224d4","sha256":"be5bc71658387110e1776fe9d3a6eb1936d747edbeccef35bca7ef14719e0f3c","sha512":"819cfecc001cd9353ed5ccc8a0dca9848531bc26b61194581e29bd4b782e293a54dc55698e1ba5cdac29fcc7ceae9f6e4803796990be6fba397b7554266e0237","ssdeep":"96:9bEPGTGbE2GIywkC2nkDKk97uu6wW1J88PVyzXUtt00I/bCsQ5ZnQFZnS11FQqk7:pEPGTYEAGkD1hhWH8WOEq5gMn0+qkQCF","tlshash":"c022c8c677385d7dfa934facdf04b7e4302ea07a565e5398d2268a38114268ef91bcc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.73818Z","times_seen":1202,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/255-dc5f45a243dc3a80.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/255-dc5f45a243dc3a80.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-2a312\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsGi3Uya6ZNKTKtniood7vLTTyQCZq39pwxgIkayjGrcJHSd8zjKUNZlNBDkzIt1DAUcynWmYwbflW7OAsemQzSW8CBmNMgCzZwv1jFOfIsxF%2FxG7jwfZQ%3D%3D\"}]}\r\ncf-ray: 9c4895048d9b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f30fabcea97e444991d6d6208ba42581","sha1":"ee6f0d44cceee3473da95b4cd1daea35ed21e427","sha256":"0ce304948789a2e44b3b9f3493ea62a36ffb4bec8cc6dcd6086a45f51587e5d8","sha512":"1ef36632bb55d1dc6a2a7ae96fdf14d419b65467631b29e6e64a9f8259116b766bcdcff6722eace8a6e270fb1b00aa3b39754e0018d270cc6c4c6656027441f1","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXr7yIzPr6Q04ToTlTx1p7eChTVOocZXxreXRNIrjg/Sz:e79LmA+Hy4r904Aj44RN0E/Sz","tlshash":"61f3dab636d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975645dea1b3faa","first_seen":"2025-12-29T12:15:56.386555Z","last_seen":"2026-08-01T15:00:23.409382Z","times_seen":119,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/29-24b8452b1e7ad86c.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/29-24b8452b1e7ad86c.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-a0f53\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQdPpZIAf0uf0IG7KBFFqjoQFA5Z9J4L3UaecWV2vBnOfnQs1QYLW2ypsURlhNL73WyhOPe6bxHCVkNjdWZVRo%2BzpEkT7oGJAJNRxl8Kwl4g2jVpfMweng%3D%3D\"}]}\r\ncf-ray: 9c4895048da08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16f00acf83df4682009294614691a0ba","sha1":"0a295061841fac8c9ffae539f621519b975462fc","sha256":"c64963bfab4e2513573ccfd6964476752a58260777a5c041d174042e175679af","sha512":"3add1f68e2d6fe238ce66c9caccc0350c2625bfe7e17f171d81a1a24433d092694afb9e3922922b51dca1569a692943595a8af3a2041783e6578b8ad8ecd9227","ssdeep":"6144:YclbuCQVUJ1dUNp7zF34OIPkjt02/fS6vI+MYdbPSzJDQTb2RDbt1IRtOj85jz/9:YclZQVU96hf/fuYdbqdQmRDbt1IRtFNj","tlshash":"6be40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","first_seen":"2026-01-22T00:09:05.829174Z","last_seen":"2026-01-27T13:26:58.898126Z","times_seen":9,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/159-f9058d3a7fc08582.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-2914a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3S%2F%2BjMrddovkH7ySUAtv4EyJ8S46RinGbepje0%2FyqaWRiP15aibwK7mY7FU95oWFT7cJTpyQEynCpJDTCh6hr%2FId%2BsMoTfZAAL4EtfTPC3ETXBs8LOnDvw%3D%3D\"}]}\r\ncf-ray: 9c4895048da28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55784), with no line terminators","md5":"9b48774e437759df326f39d78dbf586f","sha1":"c32ef9d73e91386342b6c9a3a95ce1bd848abf8f","sha256":"ce9b92a6127c9032b4d18359c01619ceaba6b3ded056d4911e621933cfff8a3e","sha512":"b5df156213267203e907c5657d50e8aa86a39e35d49927dd1791a42d35013347f59127c1c1b0968f7301418ea9f8a7f4b476894b61fdf11d8418af2400db724d","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNS9EFxSyHI/3p1gy61Q:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1c3F2","tlshash":"06f31c014bcd29ba034b6387a849ad5e31a986f9778543f14ded987f10e2dacd13b70e","first_seen":"2026-01-24T01:16:32.151329Z","last_seen":"2026-02-14T16:42:11.263547Z","times_seen":16,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/_next/static/chunks/app/page-37f369c2edf3950d.js","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /_next/static/chunks/app/page-37f369c2edf3950d.js HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 03:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 Jan 2027 11:04:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 8490\r\ncf-cache-status: HIT\r\netag: W/\"69719784-3217\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdNKIUymUz2b9qZkS%2BbBdHuFjpWQUFkW07djoUOTD7fGTjN%2FCB6fUnb3RVv7P3K4hmF4qky8Vi6gQ7oSF8JTfUIOMi8UVBok1JIf6Iz2nJHXjwPCmEHmVw%3D%3D\"}]}\r\ncf-ray: 9c4895049da58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12823,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12786), with no line terminators","md5":"ee105a5d2b36aa04f015a02ccfcbb969","sha1":"89df708b20d8d9c58ead34ffa2dc552006988996","sha256":"3198586eed018e27971dd10f2486fe1c4ae3f68f53c23015f0ca6f06ddd1ca76","sha512":"d3723c54606ab039cc9e992a95ae90924c09f11f7eee829a28dd6e575a4a5c2951989c78d53a16789847628b93d7d4c6bed3a649e86c33bc00ad1575a736444e","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urc4:wLHGHq3XAq/","tlshash":"ba422955e494ebfdf92b19c459af504c722aaf84cb0a48f078bd78240b054f57627bcb","first_seen":"2026-01-24T01:16:32.127185Z","last_seen":"2026-01-27T13:26:58.900257Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user847.trustvirtual.org/icons/favicon.svg","fqdn":"user847.trustvirtual.org","domain":"trustvirtual.org","tld":"org"},"ip":{"addr":"104.21.54.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:30.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustvirtual.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 12:02:30 GMT","end":"Tue, 14 Apr 2026 13:00:54 GMT"},"fingerprint":{"sha1":"CF:5E:DB:4C:96:DE:9A:82:95:C0:36:4D:6B:80:D9:10:51:71:AB:3C","sha256":"EC:53:3F:82:83:CC:0B:71:6B:A4:D9:A1:70:CE:6C:F7:CE:F5:BE:95:54:64:99:C0:00:45:F9:12:22:C9:F9:7F"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user847.trustvirtual.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user847.trustvirtual.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwXPOziFnIxoQzQGWHulh4zgcDFXzg%2BlcamlyNoDp5HCutGZYwCbihmF9OfRUrdCECh%2Fi8Lwgr8vPG5xqkSqGArU5Uk5WRzSSv%2B3nPdkjoeLzgmLmopF9w%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 22 Jan 2026 03:18:29 GMT\r\netag: W/\"2fa-19be3b5eeb9\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48950a1e448deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"user847.trustvirtual.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"user847.trustvirtual.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user847.trustvirtual.org/","date":"2026-01-27T13:26:29.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=test HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user847.trustvirtual.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 27 Jan 2026 13:26:30 GMT\r\nexpires: Tue, 27 Jan 2026 13:26:30 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 27 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75108\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201414,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4159)","md5":"40733f87ab53a699e2311bc9aaac16b5","sha1":"3019a4a4d7b9114bc79967bfc5e66bae406cebcf","sha256":"b85a42545485d057b1cb2b70b9b709bc8c0e37765976851a284362b7626da8e0","sha512":"6c4a165bd0eaada71d0af07e3f22654b7722c643ad462e0d46f088b4d6d5b74bed5da5534664c674470b322d5ef419f2ec86a41053632da25027a1bffcfe7638","ssdeep":"3072:+bd8oe6niBow0SB//Treu1+I6n3/ejLkNYvaSgT9oBUlmVMSxT:ZrvzG3/+LkKS9oBgmVL","tlshash":"6e1428cdb7da706683a36578503f010bb17a7992f84cc8d0e192d9d42e74aaa0277f7d","first_seen":"2026-01-27T13:26:58.90144Z","last_seen":"2026-01-27T13:26:58.90144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":130,"dns":1,"connect":21,"send":0,"wait":36,"receive":39,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}