{"report_id":"f6e68d7a-cb36-453e-bc3a-2a1703d3265e","version":0,"status":"done","tags":[],"date":"2026-09-22T18:33:48Z","url":{"schema":"http","addr":"truliesboutique.com/","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":0,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"truliesboutique.com/","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"title":"Welcome to Trulie's Boutique","dom":{"size":45709,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44689)","md5":"b9d5540749f79987772a68874bdd5d1e","sha1":"79bf4a72ed9ac259ccb8c5be32366798d2d1b26b","sha256":"b6c1bce2e173945942421e130468310d8646938ec8a4c6387bc8fe3b55c85d4b","sha512":"0e4e88bd3339e4375e8dfcb4c1f0ddf0745003d96e05309db20149c9c2f0b27834c801eb1c32b4a676d80475dce91b3bea19c7748985b2240c780324b0a90829","ssdeep":"768:mgbNLuqbwTnvfyWrdqdbSZSnkf8S5GFWLS0M96/ch:mgbNLJbanvaWrdqdbSZSnsg","tlshash":"1f23fa33e064223b8b8703e566b1639d705b425ece86691c11fd8bf40bd2d98ce9ddda","dom_hash":"domhash08453defaa176c797e73682c4f70f2a6","first_seen":"2026-09-22T18:33:54.004108Z","last_seen":"2026-09-22T18:33:54.004108Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"truliesboutique.com/","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":0,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T18:33:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":8342,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"truliesboutique.co.uk","ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":553769,"sent_data":4102,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"truliesboutique.com","ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-09-22T18:33:09.84191Z","last_seen":"2026-09-22T18:33:09.84191Z","alert_count":35,"request_count":7,"received_data":954655,"sent_data":3638,"comment":"","tags":null,"fingerprints":[{"name":"CubeCart","description":"CubeCart is a free ecommerce platform that businesses can use to build, manage, and market their online stores.","website":"https://www.cubecart.com","common_platform_enumeration":"cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*","icon":"CubeCart.png","categories":["Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":3,"received_data":100848,"sent_data":1713,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"truliesboutique.com/cache/js_head.trulies7_20260804222816.js","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ecdf2d66ceac94bc195164adf3c9814","sha1":"edeaba14695e9dc8c1db56fccd075dec4b671546","sha256":"202894c32832c9030df61cd2ef918a2899a450233b9f113dea050bf0e00d1fb1","sha512":"6c732cebffc585cdc0dc4392d0766732c2ebaf54c2a1e53145d0a1e3b4814bbd0e6a823435bfcd0d7abd670e62b293fe282adeda62c843332b8af15a763099ec","ssdeep":"3072:9EF07ENmjoWQfvwvenl63o652LBQFfmj0th1Uig9:9EF07Eqo1LGFfmj0o9","tlshash":"02e30aedb645303e93fb20bbb07b0b1eb53b965658089041e16848e87db8d44d0abf7d","size":152590,"data":"","first_seen":"2025-10-22T19:46:38.733714Z","last_seen":"2026-09-22T18:33:54.016146Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"49428bbce1ccabe40df6bcd493844b5f","sha1":"e649a82a72b80789fee21566c0837e2da1a4c259","sha256":"8cd4e573b4254db4f09593df7018703e0a19a44876075c78c5fa059567a1782d","sha512":"3a156e38aa877242451bd4814ff9fa1eca25a19994817ccd41ed70ec5486db2244659c38a78003c0e240be8ca7e0c2af343d3e53f210dfc6644148d5e0cd34f9","ssdeep":"","tlshash":"8db012601604dc50d8915a0431d293be3c50508894c2634cc12dac700df1cc758f8358","size":106,"data":"","first_seen":"2026-09-22T18:33:15.405812Z","last_seen":"2026-09-22T18:33:54.018526Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"92634dbf5448a18fd9b7c505a2235d8e","sha1":"b39a3c02756a8361dcc3b24b78ecb084d895964a","sha256":"56753547076053784a666b7548cba701f68a9eeb1101e688c99f8d93f784b311","sha512":"441feb2c2548d90492543cde99d49c93c8e02d2fc0c00b90d966a3adf79e3d6f02cae41262e50da8b464af6eebbc13a90328b5ac716e60238946a4987538a104","ssdeep":"","tlshash":"46c080d521d501b5c5fa11751f3ef4a1db77cfb8150ad924c44f711484b4e441113c4b","size":174,"data":"","first_seen":"2025-10-22T19:46:40.104465Z","last_seen":"2026-09-22T18:33:54.019407Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/cache/js_foot.trulies7_20260804222816.js","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"064aa8ff294a8cb838b209d11c8bb969","sha1":"dfe24829849d77b8d967a78363ff0223ba4c726a","sha256":"79a33468d89d965668a825d3eb3238c20b2a53ae9b2d762a72c3dde808866d1c","sha512":"a4c1d6d2d1ee15801f2c6aa70c5938b7b25d7aadbbcb7a0bd1f7a19c46f45c2ba53a5850fcc0a0b67a228f9052a909fd8d691b623117fdbac8f50b5d4f2938d1","ssdeep":"6144:RYGqwoBcI7SX3v7Wx3WppJhKMtdYDYSEYx6lw:2+8SX3TWx3WppJhKMtdYDYSEYx6lw","tlshash":"be442a05b360217946fb21baa05f9705f23395458809e43cfaf885c5aef4d4aa06bffd","size":261246,"data":"","first_seen":"2026-09-22T18:33:15.369352Z","last_seen":"2026-09-22T18:33:54.008616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"truliesboutique.co.uk/skins/trulies7/images/trulies/cat-tops.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.081Z","timestamp":1790101990081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/cat-tops.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63277\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:49 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:43 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63277,"size_decoded":63664,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x552, components 3","md5":"e39963b95c6374c0ded40f26928f7418","sha1":"e0f89362a22b385baee3b90182cd09659bde516d","sha256":"a329f6d4a65895b282611cc35eef3aefb4dc02fcd4ccc7ace719a8a8fb58ac6d","sha512":"8e734770923c176fd1831e4032a2a4273d342aedb9624e56c7f660d1999d7b6a1242996ced202fc360576750162c5a0bebd8118adb860a0c5c6c9dcbaceb31c7","ssdeep":"1536:MG6bXAg/cAL/HvfDIJWIMrN6FJc/no4KpVfGJ0VgsxWUw0RpyP:KzAcbzfEqrNAcwtff5iX0RpyP","tlshash":"e25302739c818af89843ab3010673d976d5895e8fa8e7c9462ff5f13d2b2d1f909842d","first_seen":"2026-09-22T18:33:15.358363Z","last_seen":"2026-09-22T18:33:54.00545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.co.uk/skins/trulies7/images/trulies/cat-knitwear.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.085Z","timestamp":1790101990085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/cat-knitwear.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88124\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:49 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:43 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88124,"size_decoded":88511,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x552, components 3","md5":"78dc40aca49d78d63627ee91ae4d565f","sha1":"03ab16eca65318ad7a74c5225cb1f311e2546656","sha256":"6bcf3decc81dafd5c148905fd574dbd10cd2d8c0beab6e047d9497ebed22869f","sha512":"f093938a0b511a22a6cf88f29f7883d7fffbe162d147170d499a7815a960e5be8e423c32f0123c3fc8d8a7ade0c4031e5a74cef90168afcef3389a2d24a068b2","ssdeep":"1536:MKQe603cwrX+ycDQCJXSQ/puxJ+cJY3wk03c4bXmlcmLkB:3603VuycDQCpSh9FbXnmLK","tlshash":"1583022167571a77f97c7efb66a16ebf2ca80b917741045183b08718f0c4d682fa48eb","first_seen":"2026-09-22T18:33:15.389235Z","last_seen":"2026-09-22T18:33:54.00625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T18:33:09.193Z","timestamp":1790101989193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nset-cookie: cc_language=en-US;Expires=Wednesday, 22-Sep-2027 18:33:08 UTC;Domain=.truliesboutique.co.uk;Path=/;SameSite=None;Secure\ncc_currency=GBP;Expires=Wednesday, 22-Sep-2027 18:33:08 UTC;Domain=.truliesboutique.co.uk;Path=/;SameSite=None;Secure\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=0\r\nexpires: Tue, 22 Sep 2026 18:33:08 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cc_language","value":"en-US","quoted":false,"path":"/","domain":".truliesboutique.co.uk","raw_expires":"Wednesday, 22-Sep-2027 18:33:08 UTC","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"cc_language=en-US;Expires=Wednesday, 22-Sep-2027 18:33:08 UTC;Domain=.truliesboutique.co.uk;Path=/;SameSite=None;Secure"},{"name":"cc_currency","value":"GBP","quoted":false,"path":"/","domain":".truliesboutique.co.uk","raw_expires":"Wednesday, 22-Sep-2027 18:33:08 UTC","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"cc_currency=GBP;Expires=Wednesday, 22-Sep-2027 18:33:08 UTC;Domain=.truliesboutique.co.uk;Path=/;SameSite=None;Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"CubeCart","description":"CubeCart is a free ecommerce platform that businesses can use to build, manage, and market their online stores.","website":"https://www.cubecart.com","common_platform_enumeration":"cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*","icon":"CubeCart.png","categories":["Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]}],"data":{"size":44390,"size_decoded":12884,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43370)","md5":"926a0533401c5d3eb071af088f7c097c","sha1":"ec3a6d41ecfc02967f3d440205fc1e2c5c010915","sha256":"f7aaaeee1280fce3e63e9474431e8d82d652a2749e26f43b7232d0bb2bef146b","sha512":"2d45aef0faf8978b616e82eb94cb3a03d0bb0ed5b5ab4e0cd0d4c770d039563f3f20981ad7d56ff3c9defd468742ef5758d4016fe3841af8381e8faf60195db1","ssdeep":"768:Oxzupbw5TvfTArdqdbSZ8+NwY5aGUHLL4KtKDXyh:OxzybITvLArdqdbSZ8+bXy","tlshash":"7f130a37e064223b8b8342f57571678d705b425e8d86a92c11fc8bf40bd2e98de9ddca","first_seen":"2026-09-22T18:33:54.007648Z","last_seen":"2026-09-22T18:33:54.007648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":34,"connect":33,"send":0,"wait":93,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/cache/js_foot.trulies7_20260804222816.js","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:09.819Z","timestamp":1790101989819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /cache/js_foot.trulies7_20260804222816.js HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 14 Sep 2026 03:29:22 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:41 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261246,"size_decoded":58667,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5327)","md5":"064aa8ff294a8cb838b209d11c8bb969","sha1":"dfe24829849d77b8d967a78363ff0223ba4c726a","sha256":"79a33468d89d965668a825d3eb3238c20b2a53ae9b2d762a72c3dde808866d1c","sha512":"a4c1d6d2d1ee15801f2c6aa70c5938b7b25d7aadbbcb7a0bd1f7a19c46f45c2ba53a5850fcc0a0b67a228f9052a909fd8d691b623117fdbac8f50b5d4f2938d1","ssdeep":"6144:RYGqwoBcI7SX3v7Wx3WppJhKMtdYDYSEYx6lw:2+8SX3TWx3WppJhKMtdYDYSEYx6lw","tlshash":"be442a05b360217946fb21baa05f9705f23395458809e43cfaf885c5aef4d4aa06bffd","first_seen":"2026-09-22T18:33:15.369352Z","last_seen":"2026-09-22T18:33:54.008616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.072Z","timestamp":1790101990072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://truliesboutique.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:35 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nage: 95375\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37744,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-09-23T06:14:56.967261Z","times_seen":37056,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":21,"dns":2,"connect":0,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/skins/trulies7/images/trulies/marble-brand-banner.jpg","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.074Z","timestamp":1790101990074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/marble-brand-banner.jpg HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/cache/css.trulies7default_20260913083622.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94545\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 14:40:32 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:42 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94545,"size_decoded":94932,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2048x215, components 3","md5":"de4aa6ee740e3642659259cf0fbacd9a","sha1":"ae9737e4a38627469de46bad6badef3cd9bdd4e1","sha256":"ae380f1cc268ee6002c2d3c3df8468314b61c3c978c3e4b8da60275cde52fe63","sha512":"66a7f299b53dc8b9e70676e8d7800f2ace125c57013089777f843ada907fcb2374e5fe82202c92676ad45b7b171f7159b62dc2c2fa83d88f3d5221dc37484804","ssdeep":"1536:Xcf9Mx3EkEcBLFoTqYphamYo/eg9b30MgY1zYjQ14Ziae6hqV3sCohgsRrhZrt:a2x0LrrphaNHKoMgY1zjmiaesqV3sJf9","tlshash":"339302b9126911ffc364acb7fa4682f504bd134f64fe0ec557d2888accadad41e9017a","first_seen":"2026-09-22T18:33:15.386917Z","last_seen":"2026-09-22T18:33:54.009739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/favicon.ico","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.357Z","timestamp":1790101990357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 13\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13,"size_decoded":277,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text, with no line terminators","md5":"c83301425b2ad1d496473a5ff3d9ecca","sha1":"941efb7368e46b27b937d34b07fc4d41da01b002","sha256":"b633a587c652d02386c4f16f8c6f6aab7352d97f16367c3c40576214372dd628","sha512":"83bafe4c888008afdd1b72c028c7f50dee651ca9e7d8e1b332e0bf3aa1315884155a1458a304f6e5c5627e714bf5a855a8b8d7db3f4eb2bb2789fe2f8f6a1d83","ssdeep":"","tlshash":"db6000cc3000000000000c000cc00300030c00c00000c00030c00c3c000030c0c00000","first_seen":"2023-03-10T03:13:12Z","last_seen":"2026-09-22T19:36:09.609796Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.co.uk/skins/trulies7/images/trulies/cat-jeans.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.082Z","timestamp":1790101990082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/cat-jeans.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71438\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:49 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:43 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71438,"size_decoded":71825,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x552, components 3","md5":"29d5131c4e6d2287dc7a97bbff5be299","sha1":"ab040673ef3b7a38c59ebf3d14635371213da195","sha256":"880ed6e3873f5b1fec5e6478cd86635f83a33e28f446cd6e6aad93974593ad7a","sha512":"50449cefe8b05ae2272e77e708ca2b9996d89618a8bf7c872584eab434a6c1ac26f6c531ca2cec72af73e1d7b69104b22118cd48ffb984d444944cc0fe096cd7","ssdeep":"768:MPM58Eba2ScIE8WVXUogxKlsDXCE4Yb/yBE2IKwdck3PL2lH6NqPQ9hCQKADtp6e:M0rXxg8YzMENdf8aNqYDYUWb/DbmneY","tlshash":"e363014479e026f8ec018479da81f2e15bf37006319eb8eb769912514d8f2fe485e9ea","first_seen":"2026-09-22T18:33:15.360418Z","last_seen":"2026-09-22T18:33:54.010851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.co.uk/images/cache/5d8fffe3-04e0-4d15-9420-a5c48d95814d.700.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:09.824Z","timestamp":1790101989824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /images/cache/5d8fffe3-04e0-4d15-9420-a5c48d95814d.700.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 124678\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 21:22:28 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:43 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124678,"size_decoded":125066,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 92\", progressive, precision 8, 700x606, components 3","md5":"cc482acfabd0987d6b147aea17e3ffd1","sha1":"efe65192807c6bda3af54d789f34b57c68c631e4","sha256":"a1efcd32e34f4f7dd170e14a7467e3ca39be9588cfe31129e98f17bfb23d5627","sha512":"d1cb7794ad24815333b3a904773163961f8e1268a0cfc5eb83dcb93e9e1952b31cfbb310fd5dc18cd7796627a70a8bf1b5c9e39f8c44c9c0ee4cd84760374fca","ssdeep":"3072:YvdLQiKbD1BVu8Q1MvRPT/P0lJZlvdGQbSEjS:idLQVD1XutmDiSF","tlshash":"c7c31215f11c8eda996be3352486ecbf2a0886c76dc4a9d7f0459deb2caa0e008c5f55","first_seen":"2026-09-22T18:33:15.355714Z","last_seen":"2026-09-22T18:33:54.011451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":72,"dns":59,"connect":34,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.co.uk/skins/trulies7/images/trulies/cat-co-ords.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.084Z","timestamp":1790101990084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/cat-co-ords.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63023\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:49 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:43 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63023,"size_decoded":63410,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x552, components 3","md5":"0afa01678d982387a15a00ad1363ea8c","sha1":"7f77feaafe7372d2a250ba84af63fc555a763836","sha256":"9f273073f13842aa4ffce3c4c3d0e22e6e690db20722f5bd556f49269705e1cf","sha512":"49ab1d45996a25fbf56d64a990f4368d0eb99ffa49d239ea31bd94241a91b15549220cccd344f63e64843f596fd68ac4f9b09ebb1732131ac682a9eb8ab066be","ssdeep":"1536:MQRBVkha3uIjAyvUX+WePNhek47Q40a9M:nfVxujysfePrekgj19M","tlshash":"3e5302205f3f5807372caa3024d81f9cd2e6843d71aedb4af5d0ea8b399761ea837544","first_seen":"2026-09-22T18:33:15.377053Z","last_seen":"2026-09-22T18:33:54.012478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.co.uk/skins/trulies7/images/trulies/cat-jackets-coats.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.086Z","timestamp":1790101990086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/cat-jackets-coats.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62608\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:49 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:44 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62608,"size_decoded":62995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x552, components 3","md5":"499cfa650b0762b00ace4b3bd1016c42","sha1":"6cedb92b9de9af7803a106dd4f2eb8034a24f7eb","sha256":"d1fe5aba43a64c19286e71abe53ca5c93f28a19d913647f26e265119a7bd7c56","sha512":"d2eea84bf01df045ff4ae3d6602330336bc631cb72a303ededba3ae0d813d9fb594f33ad03be2171fd96f9f3f8a6d1324686da1260e8e1cb5279badee19bfe81","ssdeep":"1536:MR+Ka8l7mF1V0s+MOmmamuzzGt8rX2elOsiGqXkMvqFP3:YJhl7uwt8E7GwRqF","tlshash":"065302987b65a1427389fc78283b8fad47654f151df9b96cc0103c867a0b3291e3f86e","first_seen":"2026-09-22T18:33:15.391631Z","last_seen":"2026-09-22T18:33:54.013657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.071Z","timestamp":1790101990071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://truliesboutique.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:54 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 95956\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-09-23T05:56:44.644949Z","times_seen":72890,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":5,"connect":31,"send":0,"wait":30,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600\u0026family=Playfair+Display:ital,wght@0,500;0,600;1,500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:09.814Z","timestamp":1790101989814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=DM+Sans:wght@400;500;600\u0026family=Playfair+Display:ital,wght@0,500;0,600;1,500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:33:09 GMT\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7658,"size_decoded":1411,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c89e483a94abef1a3e3b861ec0d2d558","sha1":"2bbd85b34e9e61f169b24440cacee00c8c946bc2","sha256":"fc0bcc677b4bd8bfbd1e39ed10b9fa950d0fcd845c840ee58b141a052acbdf23","sha512":"91c1db8c313f07b8058b33f13d4124e9a03c46112fdeac5bc7edfdb3d993e329141e1e4c5bd6490f7142b0c716323571f17a4182dbe3b57da39ed11ebbe53792","ssdeep":"192:UwD+rw8+Owl+5JNK29uMNK29LNK29DXNK29agr2om/7r2vEr2bt2r26Zr2om/er7:Uis5JM29uMM29LM29TM29aS2R/P2vG22","tlshash":"5bf1cea10567a510db435cc227cfbf229e5f61506081967caffd189cac9fc2a9365b0d","first_seen":"2026-08-17T02:04:49.846169Z","last_seen":"2026-09-22T18:33:54.014932Z","times_seen":3,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/cache/css.trulies7default_20260913083622.css","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:09.816Z","timestamp":1790101989816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /cache/css.trulies7default_20260913083622.css HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: text/css\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 14 Sep 2026 03:29:22 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:41 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":213533,"size_decoded":30768,"mime_type":"text/css","magic":"ASCII text, with very long lines (65459)","md5":"42fc408bf06c6c733bb8c00024934e79","sha1":"f15d90e16001670b8f44a2517b04f31e2d538d28","sha256":"9534ecaefaf72d2934fbfbf59ce5cfaef80d8d5f7871582f1c9217d70749eca3","sha512":"dcf18e7d70b72ba30a6656cb055792d8d879fd7a9718e7d47f482f276a0dc5871131c6abfcdc9c29b773ce8ebdc85be5a62f0bb1ad63e435ca6886f0c54b9c6e","ssdeep":"1536:pt9FOgn+p1hfq13nENiupTWJTgxm9/DhUNN+0+:pt9FOgn+p1hfa3n/upTWJcc9/FAd+","tlshash":"9024b6a2b5d037086023c63665e33ea8763a1940db325e79e59677f4cbcb8d60623dc7","first_seen":"2026-09-22T18:33:15.353264Z","last_seen":"2026-09-22T18:33:54.015294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/cache/js_head.trulies7_20260804222816.js","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:09.817Z","timestamp":1790101989817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /cache/js_head.trulies7_20260804222816.js HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 14 Sep 2026 03:29:22 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:41 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152590,"size_decoded":42793,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1987)","md5":"1ecdf2d66ceac94bc195164adf3c9814","sha1":"edeaba14695e9dc8c1db56fccd075dec4b671546","sha256":"202894c32832c9030df61cd2ef918a2899a450233b9f113dea050bf0e00d1fb1","sha512":"6c732cebffc585cdc0dc4392d0766732c2ebaf54c2a1e53145d0a1e3b4814bbd0e6a823435bfcd0d7abd670e62b293fe282adeda62c843332b8af15a763099ec","ssdeep":"3072:9EF07ENmjoWQfvwvenl63o652LBQFfmj0th1Uig9:9EF07Eqo1LGFfmj0o9","tlshash":"02e30aedb645303e93fb20bbb07b0b1eb53b965658089041e16848e87db8d44d0abf7d","first_seen":"2025-10-22T19:46:38.733714Z","last_seen":"2026-09-22T18:33:54.016146Z","times_seen":11,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_pqTXtHA-Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.076Z","timestamp":1790101990076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_pqTXtHA-Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://truliesboutique.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23076\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:35:44 GMT\r\nexpires: Tue, 21 Sep 2027 17:35:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:53 GMT\r\ncontent-type: font/woff2\r\nage: 89846\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23076,"size_decoded":23888,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23076, version 1.0","md5":"b8b0fd00d2ec6b93385f569f901e427d","sha1":"7565a24d2bd0dca8aaba631c58bf712263999f52","sha256":"8f074624e50ab805878b26ab5f3e0fa360043d546c35b043947e96a5c7071970","sha512":"c6ab8d125d40af43862622eee6e628bf59d9d5236a8729e67da00240e2bd9c9c65da63ddc6fcf68ba29c21f8cadaa4ae7fd254d3350ee245495aee7b9dde981e","ssdeep":"384:MjUz7q9HvyeMqWoetvxv4ERxmQN1Z3A4yAYAYx8Hmwi7xVBS9PvEjSO:2Uz7q9PybqyR4AxmQvZ3A6RDXi7xV49E","tlshash":"1ea2e080cbacd43cf4449a3139beb9b07b710e4954431d6d2ab26b90efe54c89e3c96d","first_seen":"2025-06-28T19:38:49.938295Z","last_seen":"2026-09-22T18:33:54.016758Z","times_seen":629,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":25,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.com/skins/trulies7/images/trulies/hero-fashion.jpg","fqdn":"truliesboutique.com","domain":"truliesboutique.com","tld":"com"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.078Z","timestamp":1790101990078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/hero-fashion.jpg HTTP/1.1\r\nHost: truliesboutique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/cache/css.trulies7default_20260913083622.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 185449\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:48 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:42 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":185449,"size_decoded":185837,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x720, components 3","md5":"12ec5e27c90c72a5e8dabac03d8c6a9a","sha1":"023fc799083538b8563b532f5ca03404a51934b3","sha256":"546a6e10eeb3383455e144918a1843c27f8414dbfe633beadf647bb8e5b35f3c","sha512":"9b55213039d2a35bd9ccaa907a4fd451450519675a9e30d9858dc74d76e15e7a7af056657d0775552db220cf55b9a799d7f9cd3aeb6bcbdec5acaa3831ee4bd0","ssdeep":"3072:WSbj4mNPi/Tww4mM4deUgufKBEqvDenl57KSdejh2iDfLgV9odumnyVSN+J4t:tRPiLww4mM44UhCDenz7Ddq9DfLXduml","tlshash":"6f04127deb865ac8a85145ffcf61be9007210110e6f142027f4cff538739adb6858eaa","first_seen":"2026-09-22T18:33:15.39749Z","last_seen":"2026-09-22T18:33:54.017279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"truliesboutique.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"truliesboutique.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"truliesboutique.co.uk/skins/trulies7/images/trulies/cat-dresses.jpg","fqdn":"truliesboutique.co.uk","domain":"truliesboutique.co.uk","tld":"co.uk"},"ip":{"addr":"149.255.62.8","port":443,"asn":34931,"as":"Awareness Software Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://truliesboutique.com/","date":"2026-09-22T18:33:10.080Z","timestamp":1790101990080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoconfig.truliesboutique.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 15:14:57 GMT","end":"Mon, 07 Dec 2026 15:14:56 GMT"},"fingerprint":{"sha1":"61:78:88:42:9B:40:B0:F8:B0:39:6F:6E:0D:51:98:4F:FB:68:A6:BE","sha256":"51:1A:F8:FC:D1:65:DF:F7:64:C3:A6:C8:66:45:36:03:31:AF:30:90:C0:EC:A3:44:80:6B:E5:68:F7:4E:7F:7D"}}},"request":{"raw":"GET /skins/trulies7/images/trulies/cat-dresses.jpg HTTP/1.1\r\nHost: truliesboutique.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://truliesboutique.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:33:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77911\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Sat, 12 Sep 2026 13:40:49 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 29 Sep 2026 18:29:43 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77911,"size_decoded":78298,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x552, components 3","md5":"6f65305fe9a2cc68cf87ebfc6fadfed6","sha1":"befe560d591a029ac756f3ba26232c94d5f1f2a8","sha256":"54d92473e037267a127683dec4f4e276f02579a7df751f15058098a18072b791","sha512":"d04be1602d0e94ea5593fa46f7972d0f3861577200dac9ff53ac2d79281a9ba7f0cb7935f379d20ebfb208368fcd1024d3962fb386b03e0399fe2729cdfbbee5","ssdeep":"1536:M88LF0uiuqYZkEWsdZVUMf2toThfZasx+luX9MXUqu4XF0:vuPqPEW6TUbto7rXvdW0","tlshash":"887302ec1e183bf33d18d16fce07a9a96accc2264d53905e41e06fbc9cc5fb59952289","first_seen":"2026-09-22T18:33:15.374508Z","last_seen":"2026-09-22T18:33:54.017922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}