{"report_id":"e9807d7c-09c3-487d-97d8-5d5ffe474b09","version":0,"status":"done","tags":[],"date":"2026-09-22T19:06:35Z","url":{"schema":"http","addr":"trilbota.site/","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trilbota.site/","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"title":"Trilbota | Eksperckie finanse dla polskich sklepów online","dom":{"size":22300,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (405)","md5":"0baffd10014f377f66c46da0c50f1a21","sha1":"5cd7ea940d4f22a4ac5f5ad6d802574cbeac7c6e","sha256":"7fd50ab70de6ebdf39b278b82223999df9bd300de167adb54b7c0cbbf5c8bd4d","sha512":"15d814cd5499c5968083f082e92eec2cdc1100472a0c075b5eab2c80684e3cc09068f14008ac21d66f9ae3b82153aa3b7ed6609d11865c7326cd5ee85ea4ebfa","ssdeep":"384:EraaGz6A3FrLl1CttbdQmMmtoWvbw0sfkQ9Zg9Ch:RUkrLl8jG6oCw0ogAh","tlshash":"fda2412160f8653b9153d5c6eba87b3baec2d103d64d1504b2bc8ba84fc2e4add3764d","dom_hash":"domhash1e7356f5d190d0cb41721f1e83b054dc","first_seen":"2026-09-22T18:52:02.209432Z","last_seen":"2026-09-22T19:06:40.735552Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trilbota.site/","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T19:06:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trilbota.site","ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":9,"received_data":800973,"sent_data":4389,"comment":"","tags":null,"fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-09-21T08:25:47.484712Z","alert_count":0,"request_count":2,"received_data":443817,"sent_data":925,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":11462,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":8,"received_data":342160,"sent_data":4564,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trilbota.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-22T20:49:00.361062Z","times_seen":437714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5029514f3265286eef429194918e0d20","sha1":"e86e832f6617bdb41b6c91065d026a2dcf4a1536","sha256":"c3291ea757ff3da0fc45a41d3ff60d61da9b257314962c5cdded94ca0df05d7a","sha512":"e33b5772e1a071644c0bfef82ce5fca5b89f59f4726f05bcc91f130cf8bd8c6c203505bbb267995bf3c21e76a0265377eb903cb1016c27298c68c0a697e8bdc7","ssdeep":"3072:/KLW/5+qYtBtHx0RDqxzwovF1o5AwPO4LrXeHnjsjo6PPPgXwMSuJSnXwM0vawgl:Cah54zwMHWPPPzMSuUn/0Cwgncyp","tlshash":"129463af8fcc269f4d56e7881a4bb0511fed93bd332a8d12768e913bc252416dcb3611","size":442433,"data":"","first_seen":"2026-09-17T08:14:04.143958Z","last_seen":"2026-09-22T19:06:40.740082Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/script.js","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43580b0a646fb1bf8535db4ca96e18b","sha1":"1c2d803be6dd9dfcfb51bfe5f9f824a3baee81d6","sha256":"e5bc07d49e26b1f9e8515712d15c3205e6b41d4910e5da7c947b376927f3b2f2","sha512":"ca3a9e0ecf25a7a37dbb954aa2849d18fb5f85d8addab4e7e596f7a678726603068b487534c5946fecf334cffeec25232c47fd34168033617f1567d21e13c8eb","ssdeep":"","tlshash":"c9811f3b37b71079067ba1b657df8b893121804b3845ce593c2d8a161fd1e942cf1aeb","size":3883,"data":"","first_seen":"2026-08-14T22:45:16.928917Z","last_seen":"2026-09-22T19:06:40.745435Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.895Z","timestamp":1790103963895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:54 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 97929\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-09-22T20:13:25.816938Z","times_seen":72868,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":52,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T19:06:02.821Z","timestamp":1790103962821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2L7Hcl4%2BxjaXXCjkJUHqWpdIPWOXY%2B0u2WHtQ19hBE57bbN1VxRkR%2Fih2nKFcy6b1RWaQKPmOfy3Td3uLTCYn5Wwc%2Fkidss1TK%2FObx4%2FCfdmG2xlZTzpTnSZHvqCmPme\"}]}\r\npriority: u=0,i\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f395a82ba42c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19873,"size_decoded":6142,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6160098fbf0de990867af7e08d09ab12","sha1":"e7de9f4c241dd6844be8fdb16c5055e6bbddffb0","sha256":"cb7ee05d6f730b3c5f05b8e2d0c343d4ecf118fe7213f7dd48adea98f8aeb574","sha512":"fef4a06513eb9d0b84cdca4e20de84b1cb09763bc9d5d2e923864137b227930c430f121853cbea7e3eb0c76e82b177490dca38d053211d8f47a547665be71c92","ssdeep":"384:IramAz613lrYxNcZbom/N2jKbk0sfgQRzFxZDOq0Ctiu:9aLrYxyZUk2gk0WLP","tlshash":"7a92512174f965778193d4c6aaa86b6bbec2d103d65a190173fc8b984fd2e47ce2320d","first_seen":"2026-09-22T19:06:40.736917Z","last_seen":"2026-09-22T19:06:40.736917Z","times_seen":1,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":31,"connect":60,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.738Z","timestamp":1790103963738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 52\r\nlocation: /lucide@1.47.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3f395ad78a556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T20:48:35.301897Z","times_seen":18605994,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/img/case1_bC7bQs8nFS.jpg","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.746Z","timestamp":1790103963746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /img/case1_bC7bQs8nFS.jpg HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\netag: \"6a84596a-4965e\"\r\nexpires: Mon, 28 Sep 2026 15:10:08 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpvNLAEiMMsfGjTyARKk7O6nMppMYJhRlKc1490Vb9jnuYYsmUj2ExuORKTKKbjeXEhcdT0LPx6zoLUFm%2FJIuljVGnpK%2B%2Ba0krDdgTAHfKDoJnClHvsodiVqxR18Z5Ak\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f395ad7c102c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 300638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300638,"size_decoded":301364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"a50756ed5968bbd8681dfc1abde54771","sha1":"663ef0e96982a2cf9fab03e8aae1b76927125d49","sha256":"990e696eb8cb389da5960668f852f3a96dc1d4e12c9afbfe2079f168a8853303","sha512":"45caa9aa54beb6bc4165fbe7767d5ec9fe3e64dfa48f9621f1c9821a3da6c348a32a2fff281cdc5193f01c6d7351a8644c3b1fa3e733cdefb5e4dfa3a588e92f","ssdeep":"6144:0Lcq8aZuxEl6Rguv7CjJpCgrEk1b6TsVpoMDdRUt7JvAaaJtPs1d5u:0LBQxEluguvCCg44wk/+vAZUE","tlshash":"4e542332611a5119da2668bbf0f7084d7799eb11332f29912076a27dc70e9e7677fcc0","first_seen":"2026-09-22T18:52:02.217217Z","last_seen":"2026-09-22T19:06:40.738472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/img/dir1_RA15WKI2yk.jpg","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.748Z","timestamp":1790103963748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /img/dir1_RA15WKI2yk.jpg HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\netag: \"6a84596a-326c2\"\r\nexpires: Mon, 28 Sep 2026 15:10:08 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCvc7Oxjn9zdBnG9dCypwRrIVK17KLOYx7r1w%2B9rW1k3cuJbU9GliVecuVEN%2BioeaN2yPDC9z4GV8Wv5VxTYJPPrLLqxHrKD%2BbO7HdpKVuYVhcslHMc1M2X9xiPvSh16\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f395ad7c112c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 206530\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206530,"size_decoded":207256,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x854, components 3","md5":"4eab4e984394e8dce85c0818575be621","sha1":"f9358fb0c970a5635719fcbfb75caf2538d6faf9","sha256":"0ea20034420335cfb8b56006a75771ce20828e2c69efa42f54346bd7581083bf","sha512":"5625134fea8d5c03e759b9a0f438963fbb747b7f2f6ba2a28d3c55a5a2d398a2fea83786a67949766af7a351065318a24078b9035f9766f08829afc624eb35a1","ssdeep":"3072:FA0VoTMPmYgrxYAIp9duNSNK73pmOthNGyi7b3esY0MpftVHRuBSnBUntWIfJk6l:FAhTMOG4+cp9ncj7ysY0M9k0B0tXnwG","tlshash":"951412064b6510d3ae85b339e40528e0a415c2f553772df2a7f4b9e8b23f188bd4f686","first_seen":"2026-09-22T18:52:02.212085Z","last_seen":"2026-09-22T19:06:40.739402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@1.47.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.842Z","timestamp":1790103963842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /lucide@1.47.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a3f395ae095c56be-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 473575\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 22 Sep 2027 19:06:03 GMT\r\nlast-modified: Thu, 17 Sep 2026 07:33:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:wykep1f/PaD8RaQdP/YNYdqbJXMUlixc3e2Uyg3wXXo=:\r\nfly-request-id: 01M2Q4FMWH3ZSR83ATP441EXT1-ams\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442433,"size_decoded":104715,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65369)","md5":"5029514f3265286eef429194918e0d20","sha1":"e86e832f6617bdb41b6c91065d026a2dcf4a1536","sha256":"c3291ea757ff3da0fc45a41d3ff60d61da9b257314962c5cdded94ca0df05d7a","sha512":"e33b5772e1a071644c0bfef82ce5fca5b89f59f4726f05bcc91f130cf8bd8c6c203505bbb267995bf3c21e76a0265377eb903cb1016c27298c68c0a697e8bdc7","ssdeep":"3072:/KLW/5+qYtBtHx0RDqxzwovF1o5AwPO4LrXeHnjsjo6PPPgXwMSuJSnXwM0vawgl:Cah54zwMHWPPPzMSuUn/0Cwgncyp","tlshash":"129463af8fcc269f4d56e7881a4bb0511fed93bd332a8d12768e913bc252416dcb3611","first_seen":"2026-09-17T08:14:04.143958Z","last_seen":"2026-09-22T19:06:40.740082Z","times_seen":27,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/img/favicon.svg","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:04.148Z","timestamp":1790103964148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /img/favicon.svg HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhcnca4zX7XWeTRl94iuw5ULi59RQ62dFX7c%2FyaMd77w%2FR%2B4nigSDnBdMkq2FtxzwdIMuyAc%2BKViJNDpJO7xHJUAg1pzM4EJEwSjHTSn%2B8OqsbCYz2gMmXdIqZUgrzbQ\"}]}\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 26 Sep 2026 08:00:22 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a84596a-12c\"\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f395affc672c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":929,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4e01c82ce165a40de6750a9c8c69ee4","sha1":"a16f16e3db301d653d2cd34ec38427947ce5fac5","sha256":"2bbaa07d9b3b64a8d48ddcd10999901e77d739157535cfb8e03ca222941395e9","sha512":"ea44b32cb2152a9a2e861a98f2579d3e0e5736402fd6f1f45145200e4e39552f813e7aa6ea67bceb8c428b81c4c075059e46663ecfdda700d0570fad9c59bcb2","ssdeep":"","tlshash":"d8e0ebe0e08cca44e32c8f0e6715751d620ea443e6d18185f6cc731c0fc8cd6358438c","first_seen":"2026-09-22T18:52:02.223694Z","last_seen":"2026-09-22T19:06:40.740613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;600\u0026family=Playfair+Display:ital,wght@0,400;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.733Z","timestamp":1790103963733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;600\u0026family=Playfair+Display:ital,wght@0,400;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 19:06:03 GMT\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10778,"size_decoded":1491,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8f18af784e8982b5ce36b2b4e6f48696","sha1":"0699a569ab24d0a0f509a6172488718309ad9fcf","sha256":"c5a2cf8ca60b7b44f88b75a8553483386772a4ae72648bc199402f8fa6426f49","sha512":"d85bc32b1e99b7ad3324fe6ad3251d353d03a4c5e7ab2b8e6f0ac225c30a277902374949d84d0eb66145816c2174c159befbb19b66094917755511b0ed6245a3","ssdeep":"192:FRV7y6OfuXRo7TbOmupRS719OcuUJOK29lMOK29qOK29OXOK299Hr2om/Ur2vrrc:zRPQ4aNJ129lM129q129m1299L2R/W2s","tlshash":"7d220fa10157a600eb431cc623cf7f269d5e71617094c63d6ffe2ca8ac9bc269364b2d","first_seen":"2026-01-20T11:06:04.114179Z","last_seen":"2026-09-22T19:06:40.741276Z","times_seen":16,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/style.css","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.735Z","timestamp":1790103963735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oupsho89Hpxj4sc%2BSgpI041zKNv7ygR%2B7jhax1GJIK02AZ%2BfW%2FRSFX7CoN3ULsaNjm9K2LlXfWRuOdofrUoVOoA11iU9Zv3V1Fzd9yIrdKZYGkLvpbwaM9Ro7i6esII7\"}]}\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 27 Sep 2026 20:54:01 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a84596a-4c2d\"\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f395ad6c062c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19501,"size_decoded":5130,"mime_type":"text/css","magic":"ASCII text","md5":"7dc350dcfd3b31d652600afabbf6ae27","sha1":"cefb8250ec82008ccc75b2cc08c603568eaa49ef","sha256":"35fa55aae4971f6acd8049c2262255554bec1bdc420ee9fd2b5ca33e6cf24973","sha512":"5a394bc1b170303cda95556894c5040e6f3276ad1e14222e71456fc4f5c9938359a7841cd2ce2e5a05efdd84a355d642cd0d049654413cacee0ceb7aa483e646","ssdeep":"384:KWQNBjvD1bzMXFaCvzFx+ktFMLYVcheXFMpfhpFZuLKoG9z8c2c:kvNsXFdFvFVcwFIvFpoG9z8c2c","tlshash":"5d924095777445a0a92bf5a9baabeb59724ce041880dc9f8bfd4000cddc43fa9593f4c","first_seen":"2026-08-14T22:45:16.937263Z","last_seen":"2026-09-22T19:06:40.741749Z","times_seen":6,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.897Z","timestamp":1790103963897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:23 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 97960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-22T20:52:38.908063Z","times_seen":562986,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":47,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.901Z","timestamp":1790103963901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:30 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:50:16 GMT\r\ncontent-type: font/woff2\r\nage: 97353\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21140,"size_decoded":21952,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21140, version 1.0","md5":"319e6b2aad48bec980d22efb27163e79","sha1":"99a7c18e5b3d2969af30be24c2b180e9d0aec548","sha256":"42898ad49a6b23f32b109243e1df596edf831015ed685f429e4dafbb181d599d","sha512":"6fc7d4323f0c9f20c70912d6cf28ce77534fcd4ef459bc290a54e2aa5d431b8df4201a9d7fed92e1018390cc9f81ba89303b096cb2f132fba7a43bf6fcd9c8ef","ssdeep":"384:C4L2Peg+2AvuSkfvMacY3RHOCKk9yg8TwuEgAXdoFCl8/Q3U7:4G2Eax3Rubk9yg8cgcVCf7","tlshash":"ec92d08f84abd1e2b38e1d359da53a997fdf3436a246b7c0d28420179ee2417011f012","first_seen":"2025-09-12T15:33:44.21019Z","last_seen":"2026-09-22T19:06:40.742893Z","times_seen":4593,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":40,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.887Z","timestamp":1790103963887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:54 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 97929\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-09-22T20:13:25.816938Z","times_seen":72868,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":34,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.888Z","timestamp":1790103963888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:23 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 97960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-22T20:52:38.908063Z","times_seen":562986,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":29,"dns":1,"connect":0,"send":0,"wait":27,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.891Z","timestamp":1790103963891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:06:58 GMT\r\nexpires: Tue, 21 Sep 2027 16:06:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nage: 97145\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":71344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-09-22T20:52:38.876464Z","times_seen":13809,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":50,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.737Z","timestamp":1790103963737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 24 Sep 2026 19:06:03 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJcVVPZt8efjaUppn7EiQRmZ9PKOZ%2F5Eg5JRhtKwkuKBNr5hxpgpBnuRtRsWS%2FsAFexLG%2Ft2m%2FKmOXZyjNvZTY64u%2FlSNeGjAzmihlaDPLndNHGNxB73f%2B%2BVF5TrAe%2F5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\nserver: cloudflare\r\ncf-ray: a3f395ad6c082c33-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-22T20:49:00.361062Z","times_seen":437714,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/img/logo.svg","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.743Z","timestamp":1790103963743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFhwuEZBRVB76nXebCNFovr0v7nlzHTYBqCpX9o2FFzGNfhho%2FkRcoa0mVkZ5dIRPfH7FTW4uRIS2Mr1Nb%2BWrejiRkUS%2B8hPLA9wKNFrqW%2FvLx1DJXjhyNsZkjhZyJLG\"}]}\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 04:47:25 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a84596a-1a9\"\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f395ad7c0d2c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecc06d0bd95141a7f5d0c0d7691d99cd","sha1":"f7e7046c6bf543512f16ccd264f779945c1c9d27","sha256":"116d9631ffd5f0aa98cc13e4826d46b3df7e90bd8067c5077ac9c42e97307620","sha512":"62baf87b82e93764c80513b119cbdcb539466a7ea8b7e99278d750edcf7a2628cbe5584d8c1b36c2bb736d7dcfc172c19290d80f2bd77e6b26e2a192309704ba","ssdeep":"","tlshash":"dbe0302882084869d2548608af2874a8376fa094570d31a86c452a75d5249af6cfb1ec","first_seen":"2026-08-14T22:45:16.930984Z","last_seen":"2026-09-22T19:06:40.744361Z","times_seen":6,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/img/case2_IO3pbowEix.jpg","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.747Z","timestamp":1790103963747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /img/case2_IO3pbowEix.jpg HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\netag: \"6a84596a-3b26e\"\r\nexpires: Sun, 27 Sep 2026 08:27:45 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FB2FxkqMuaRIYWfEZSmbPw2zeDA7u6pP8e7iVVethvCl6ffbUGNtZbBxlEAiTYexgXO7mMQsz2eRK70%2BaaccSlWSGxdmot1BwVnpUDLqV27mH%2FNs%2B0JyP8aVu2xJxf0h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f395ad7c122c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 242286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242286,"size_decoded":243014,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1280, components 3","md5":"bc83dbacb5a61fda8ab3863d09dfaf12","sha1":"21445da719339b34c24054a90a811964de5bcdeb","sha256":"f4d002b9420315a01c94e21adb32ef2f8fe3d00aed6976bb2fa61197c6bb1e01","sha512":"f6b340c610b9b940ec8b636c0fc3c8e21d5ddd13263c0850a3d1321d1c57eb17a8e2567a292f600f2b196d6edb9f3388bc4ad3b8e79cbc6275d06a4969be3d81","ssdeep":"6144:Wcsm4xxr3eFk1u1Q8i+Ji7TZA5yH8EVz28Prwrlhw5H:/kxROk8i+uTZcy28Dwrlhw","tlshash":"9d3423146b15bb18b8a0785e18e34f3074c8e70bbb9be5d564d12fac47ce92c27467e8","first_seen":"2026-09-22T18:52:02.222285Z","last_seen":"2026-09-22T19:06:40.744807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.898Z","timestamp":1790103963898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:06:58 GMT\r\nexpires: Tue, 21 Sep 2027 16:06:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nage: 97145\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":71344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-09-22T20:52:38.876464Z","times_seen":13809,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":56,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.900Z","timestamp":1790103963900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trilbota.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:30 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:50:16 GMT\r\ncontent-type: font/woff2\r\nage: 97353\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21140,"size_decoded":21952,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21140, version 1.0","md5":"319e6b2aad48bec980d22efb27163e79","sha1":"99a7c18e5b3d2969af30be24c2b180e9d0aec548","sha256":"42898ad49a6b23f32b109243e1df596edf831015ed685f429e4dafbb181d599d","sha512":"6fc7d4323f0c9f20c70912d6cf28ce77534fcd4ef459bc290a54e2aa5d431b8df4201a9d7fed92e1018390cc9f81ba89303b096cb2f132fba7a43bf6fcd9c8ef","ssdeep":"384:C4L2Peg+2AvuSkfvMacY3RHOCKk9yg8TwuEgAXdoFCl8/Q3U7:4G2Eax3Rubk9yg8cgcVCf7","tlshash":"ec92d08f84abd1e2b38e1d359da53a997fdf3436a246b7c0d28420179ee2417011f012","first_seen":"2025-09-12T15:33:44.21019Z","last_seen":"2026-09-22T19:06:40.742893Z","times_seen":4593,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":20,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trilbota.site/script.js","fqdn":"trilbota.site","domain":"trilbota.site","tld":"site"},"ip":{"addr":"172.67.204.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trilbota.site/","date":"2026-09-22T19:06:03.739Z","timestamp":1790103963739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trilbota.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 03:47:43 GMT","end":"Mon, 16 Nov 2026 04:46:12 GMT"},"fingerprint":{"sha1":"16:A4:A8:6B:8A:D3:CA:57:94:B9:81:07:64:6B:4C:CA:30:8B:7F:F0","sha256":"62:A7:14:E7:21:82:A8:65:1D:B3:8B:90:9B:06:42:5C:0A:02:58:6F:A0:8B:CF:44:23:6B:54:6C:B3:DE:48:EF"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: trilbota.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trilbota.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 19:06:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWu0Qnoece9zZ2otfafHNI9Z81KIqno1FRLYRJ%2BmtKSpJNiYM89pNqf73iF5sR7wywO2JhMgimpALLuxAk9neKxP1BTE6rTQj%2BhSOV2Z6Nxggs9TbjSdOb4MzwXOfwYm\"}]}\r\nlast-modified: Tue, 18 Aug 2026 13:08:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 15:10:08 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6a84596a-f2b\"\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f395ad6c0a2c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3883,"size_decoded":2096,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e43580b0a646fb1bf8535db4ca96e18b","sha1":"1c2d803be6dd9dfcfb51bfe5f9f824a3baee81d6","sha256":"e5bc07d49e26b1f9e8515712d15c3205e6b41d4910e5da7c947b376927f3b2f2","sha512":"ca3a9e0ecf25a7a37dbb954aa2849d18fb5f85d8addab4e7e596f7a678726603068b487534c5946fecf334cffeec25232c47fd34168033617f1567d21e13c8eb","ssdeep":"","tlshash":"c9811f3b37b71079067ba1b657df8b893121804b3845ce593c2d8a161fd1e942cf1aeb","first_seen":"2026-08-14T22:45:16.928917Z","last_seen":"2026-09-22T19:06:40.745435Z","times_seen":6,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"trilbota.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"trilbota.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}