{"report_id":"16867b63-dfd3-43ac-9673-c287d4373177","version":6,"status":"done","tags":[],"date":"2025-09-11T16:44:10Z","url":{"schema":"http","addr":"remittixkycportal.world","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"title":"Suspected phishing site | Cloudflare"},"submit":{"url":{"schema":"http","addr":"remittixkycportal.world","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-16T16:44:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.551912+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/cdn-cgi/styles/cf.errors.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":908},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":10,\"bytes_toserver\":1325,\"bytes_toclient\":8434,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.608687+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/cdn-cgi/images/icon-exclamation.png?1376755637\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://remittixkycportal.world/cdn-cgi/styles/cf.errors.css\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":459},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":14,\"pkts_toclient\":12,\"bytes_toserver\":2155,\"bytes_toclient\":9553,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-09-10T16:19:10.849314Z","alert_count":0,"request_count":9,"received_data":580019,"sent_data":6389,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"remittixkycportal.world","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-11T16:44:13.459009Z","last_seen":"2025-09-11T16:44:13.459009Z","alert_count":25,"request_count":25,"received_data":51431,"sent_data":10266,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.551912+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/cdn-cgi/styles/cf.errors.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":908},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":10,\"bytes_toserver\":1325,\"bytes_toclient\":8434,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.608687+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/cdn-cgi/images/icon-exclamation.png?1376755637\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://remittixkycportal.world/cdn-cgi/styles/cf.errors.css\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":459},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":14,\"pkts_toclient\":12,\"bytes_toserver\":2155,\"bytes_toclient\":9553,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a1c2686e90232b6fd85432d15f0e1981","sha1":"e4c151cea0ec18e8b0d75a72f406a5ba92f58579","sha256":"b0fd213c7b74ae29fea1f83ef58544b444ae8bb8a2fa3e62fa952a7d57ae3208","sha512":"4511d40d6b93bdbea373a0fd99f980ee1e7314a22a090bfa202c17df76abee79916949b4cd1b3d323b094a034d005c2b7e2fce4e99b86f3bf028d5edd6cb5897","ssdeep":"3:N/BKL1XKZkWz:eL1aF","tlshash":"315504c0544131700510c410d15554175cdf0441111d0c01f05d14d417301100010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.569287Z","last_seen":"2025-09-11T16:44:19.569287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2e1dd02154e5ad94f0481fae4ec16301","sha1":"a64a6304589f2203e5999f243ca7a128ea26cdcb","sha256":"4593d94ddf2e1a74422507fff066ec27358ebf3fa354ecde4ae30b2a509f8f35","sha512":"199fef04d74461a1f74fc0decd319d092335a1a1ce52cc42fb89bf17a1d187d87ad498a446ebdf57a773df2532a41fdbbf899781beb968c5e871ca8405e773e2","ssdeep":"3:N/BKL1XKZkWon:eL1aen","tlshash":"6f5504c0544130700450c410d1547417545f0401111d0c05f1dd14d417301500010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.571575Z","last_seen":"2025-09-11T16:44:19.571575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab1ac4cf0f484cc9f859c0a7983353e0","sha1":"2da142b1135bd10cdbed4a7353e4483acc30ebe9","sha256":"50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324","sha512":"9e2901fe2c4505797cbc7d3853280cb3450188bd0cba66ffe5c8055687578c849b31a74c6b56881bb07c195217e9604a88ba6995a4275419ca076424ebe88b0a","ssdeep":"","tlshash":"73d0a72677ee14a8129bb031154e2705212180024002870d7a1c92359fe0e2708259e3","size":210,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-19T02:18:36.299596Z","times_seen":382550,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a98eaf75f3436d99bf607b7ff5f6e72f","sha1":"5dcf0e49c78e430ec1386c00eaf6e76df7d585dd","sha256":"35cade360712f063ad73bc60be346a6e65e380b6982ea58d61eb03d6f574cdcd","sha512":"c857ccdbd4816b8736fe39bb2c2fa53ca2a745bcf54878312fb544333895b54cede9c8efcb1b6ff9f9ff3590b298cc6beb0e5fa8ed6d63770b2d94016b6a8075","ssdeep":"3:N/BKL1XKZkW6:eL1aE","tlshash":"c45504c0d44130f00410c411d154541774df0401113d0c01f07f15d417305000010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.574463Z","last_seen":"2025-09-11T16:44:19.574463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a4a5c7b23e77f408b48c81965e084a48","sha1":"a67c6348d2bc328de51292b320ca588198711331","sha256":"ee8513dac5ab43363f91993427b12ed75982e93195c228595528164fb09d6413","sha512":"19b7cbd6c4ae65b12c4873295a48f4cac3493106952bf6fb1ea23a837930df2ae54558648d0574d10f954cbdd63be024a94f086cd9a790d52b711f893de55484","ssdeep":"3:N/BKL1XKZkWwWn:eL1ap","tlshash":"cb5504c0545130f00410c410d154d417545f0c05511d0c01f05f14d417305000010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.576575Z","last_seen":"2025-09-11T16:44:19.576575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2f71e6fddc3f0d9562cb17a2fa02a20e","sha1":"29a4217ddb201f6c4498a5261598b6913f195d6a","sha256":"537d3d44f9049b1e19f69ca8c7398a53ee00b07e17e7043d7adfab469c938f47","sha512":"a37e0eea6f65e67b12845d6a548d3dd52bef86f819e4410452fb6ee9fa31879fbbc1ffd96ed4b5b5f702a9e282ed74e69b60f7f842ace168716698b4804b0e89","ssdeep":"3:N/BKL1XKZkXRWfn:eL1awRWf","tlshash":"f75500c0a88230b00828c800e2a8282fa82f0802222f0802f2ae28e83b303008022aa0","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.578643Z","last_seen":"2025-09-11T16:44:19.578643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3fc881c8f89f379051499c566da92b40","sha1":"d015bf8029aa613d0cdd8747d6b1e0f00733edb9","sha256":"304c82bd93eaf2e2e5c52a17e6eae7f75f0ab7414334b29ed7395c8735102392","sha512":"761f583935537e0d2ed71e378118de3b26528dc7bf96cc82454ea8bd31a1c7c02f6ab07d238c8421b21c0f93b831c2689a371f5a1ad35ab3310ab695bbc18bc2","ssdeep":"3:N/BKL1XKZkXdRIn:eL1awd6n","tlshash":"835504c4544130730410c400d1541477541f4501111d0c01f0dd14d417343404010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.580808Z","last_seen":"2025-09-11T16:44:19.580808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b661f4cb7c8743c758053f6696d83e42","sha1":"c2877a9185c7402056feb50723f845e35c8574f3","sha256":"3dd3733199c121286e02ea0668730c4fb8b1773a0d8b84b16471254e785c2c4e","sha512":"f13fbdb6a12ba0590f889ad7b337b7cc1734aa7272dc056d0097ed3ab3aadcb71efd7bfe32100771c4d6b12c774dc4b007c357f70056b9409d95260e9f6c59b9","ssdeep":"768:XC6BRV2fM4l0a+rnhPLy6PzR8u5jUj4FclBMqfspVyq11AY13kep+ORWqxIrm3LW:J2E4l0a+rnhT//j2B6VyGNI","tlshash":"66231b583256797227e980e1617ba74373297939e94ccc50d423c86536acecad233fba","size":48995,"data":"","first_seen":"2025-09-08T12:20:57.981855Z","last_seen":"2026-02-19T10:03:30.871534Z","times_seen":12070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42808e8e76211a0b2cae4d7ffa7f98cb","sha1":"197eeaa0721d512b724093c6931810dea1613cc8","sha256":"b528e906448ae57ee88b45d4fa4d0a6b82c8cd14d74bfa34ad1d189387453c1f","sha512":"84ce2edc5ecdee65f736d5cab79210773e4641ca04a276dea11a58709a264e2a4340a70819d43b213494e9ac479b3ecf6771b1de872f858e4778a6abce18c954","ssdeep":"3:N/BKL1XKZkWEn:eL1aCn","tlshash":"b75504d454c130700450c410d1545417545f04c1111d0c41f05f14d417317000010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.582926Z","last_seen":"2025-09-11T16:44:19.582926Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34df99ef0602560c811e58e4711c99e3","sha1":"88dea8841635da3e1130ce19e3718ceb17a95a35","sha256":"18a52fd2cc16c86bcba28796b0e231144f219cc87e049c41d9d378b880a42fba","sha512":"df8104390e5066c45a916d84fbfe2f754d6a94cf429dd6cf62e207193f298db51f17567e50c87bc2842e2a0888ed75fc564066ec863dfcbf9b4362b9bcc8a7bc","ssdeep":"","tlshash":"ebb0929f218316b4179e3a76d02a43667620501244199800fd1ca6948f9195a808bd4d","size":115,"data":"","first_seen":"2025-04-28T14:01:07.115316Z","last_seen":"2026-08-18T21:41:13.95564Z","times_seen":141416,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4da89cdf175cb7401567f1ed971b2443","sha1":"708287c610e971652eab07e34436eacaba8640b3","sha256":"79a10f953aa750551324a0b591f8048adbba9b54ce13a9dbad6e5ad6da37d2ac","sha512":"11242c73d0ace34919d9b4fdbfc01a75430e06576ef0bed3905b21a5f6689961e2ac88dfd14bc011a86b1875468d49d75d09f7189c30bd5a66eb2f0257dc4b5d","ssdeep":"3:N/BKL1XKZkWRQ:eL1aE","tlshash":"8c5504c0544130700410c51cd1545517545f0401511d0c01f0df14d417701000410550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.585908Z","last_seen":"2025-09-11T16:44:19.585908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a48d63697d1300d227e95ecd35e16a15","sha1":"67c27d90804f30d85e05519ee9e37dbfae83d919","sha256":"3ea53af1b96362a382da6ceeab53d7aadff265de3e126ddf80c78bea1678064a","sha512":"44225c28b88ff7c858d65bc88b9ba4ea5ed5b994a7b05bd94b62034c702827f6ac1300237f1268dac76f3c3be77e8ed45b3dcd3df509143c5dd4f9eb9fb3a126","ssdeep":"3:N/BKL1XKZkWK:eL1aI","tlshash":"c85504c1544130700410c510d5545417545f0401111d0c11f15d75f477305000050550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.589077Z","last_seen":"2025-09-11T16:44:19.589077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf92eccd21e03af087b3e97cef2298c5","sha1":"f69b906a413703b57e8609fb713b16a614a5c560","sha256":"01eaaaf1ae8f7aacc977b07d02073e4b7761d9b13f2cce79ccc4b0bc8fd7fb82","sha512":"2282a0399fd17f1490442a71c90464c2494defdfb037bf188932b58b716e28576e9210ec08306a479bf733838a1948e737fd8c1a9bcc16e92a04ab52a488a18e","ssdeep":"3:N/BKL1XKZkW8:eL1ai","tlshash":"8d5504c0544130710410c410d154555f547f4411311d0c01f05d14d417311010010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.591961Z","last_seen":"2025-09-11T16:44:19.591961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ac7fc3ccc50f7f9f45194d69932747","sha1":"4ca439ce43c83d09f92c239271bf9549a3ea32bc","sha256":"e79e086e7e00c1f97c65c8120f3cb87ac19695a9aa1f1d567a51e5ff2015a29a","sha512":"a8805ad28a3972cf422c4f8e412ff17721f1c9e0e07449b45b564b8959ac6248a3c6eb982feb30b3c109ed012315abfbf8873d7e9cc4170ef12a537fbdc30a68","ssdeep":"3:N/BKL1XKZkRVgQ:eL1a2VV","tlshash":"1e5504c0d44530700510d400d1541417551f0701315d0441f07d35d417701100511d51","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.593728Z","last_seen":"2025-09-11T16:44:19.593728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-19T10:45:17.855028Z","times_seen":570169,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ae2a06912051d717921eea1053e61359","sha1":"9684b66f5274c132aea402f0996fbf8054c90f50","sha256":"ee2cbacd4ad0a05969cf1f4547d4651ce0bb4d56f26dbc264aa9d0030773a34e","sha512":"66f177069a05b8cc6e2fef13f0305adff0279ec04c083be8071b98d3ef7fa6ea77637d9d80fe19ce072566cecb217a0254136fa71bcbf2d238dc4d872533cf2d","ssdeep":"3:N/BKL1XKZkWz:eL1ah","tlshash":"cc5504c054c134700410c410d1555417545f1411111d0c01f07d34f417301100011554","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.596544Z","last_seen":"2025-09-11T16:44:19.596544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1958a350e0983966ee827d440b47b06c","sha1":"49c4e3c74d3e354271a54986122a789cae2fd882","sha256":"cf8641387a5717e8eeee86b622dcc3cc59e05a33ac9b47792a153f33f1b0131f","sha512":"26828abcc482e67fa72e67150e0dde65d5c3ed5433d4ed051b2f81acf698346dda460b65a4fcdaadca610e17024d11e77aa83ec894619ad4c4c22870063e8042","ssdeep":"3:N/BKL1XKZkXW+W:eL1awW","tlshash":"a95504c0544130704c10c400d1f41457541f0407111d0405f05d54d417303444010570","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.598764Z","last_seen":"2025-09-11T16:44:19.598764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"40c1e72b4725a7c54aefa2131a24b389","sha1":"c720681265e35e3cb1023f3549d9e4f5daae35e1","sha256":"f1e0e395e17ce592d3b3196cce1ee2cab4ce325747cda8d8d46ec8ebfe3cafd8","sha512":"4066e8a16324d30ae99ec19954b6fea2edcae7d3a13c49d7636d194ec19cefd0d548b8a239a0c06615c47b10e0c3e57d6dd6baf215ea1cd3cb2994c03f2ee857","ssdeep":"3:N/BKL1XKZkWZn:eL1av","tlshash":"205504c0544130700410c411dd54541f745f0431111d0c41f15d54d437301000010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.600767Z","last_seen":"2025-09-11T16:44:19.600767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79fa111076c30e6661ae420309d58d06","sha1":"da078ffa8fcc179800550ada7103b9ed15dd248e","sha256":"11d2400b774e7fada0127362488f82b04d9d1810fd6309f089bf6c1115da9745","sha512":"ed7771770b682ec559b86f770f7c2eb88cd4cddadb106f06014d7b7cd5de86e780112550ba1ca3fd8c395400e542ca36f0ef4b459d8b0c2fc29977e8a09b2cf2","ssdeep":"3:N/BKL1XKZkWjd:eL1az","tlshash":"375504c0544134700410c410d1545437555f0411111d0c05f1dd3cdc17301000010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.602736Z","last_seen":"2025-09-11T16:44:19.602736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=97d8a02809ec76ef\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d73b021ec2f0e52c7e9968961960ef8","sha1":"931baf09f127c77ef4594ef22f9d41d455f4c9e1","sha256":"f4e73fe6fc96b9e197aff8fe0f5b28a2fc9789671db3b3de750fae9a386783a8","sha512":"8c793fa4a369b2e21bce17d582401f38f387d7ca0612f343231a57ad54bb9c749dda6a8d211b3878a31a53910a535f008a4b671f238004b183ff543f6f381614","ssdeep":"1536:eU+Ax+m/WNtc1SQysVJ80pXJwLfUV2/yH2xUBYMxyP8FE+V9AIH0BY:eU+Ax8Tc194fcH22OzPWtD","tlshash":"20d30bca75cab6655337347000671ccbf2b7b8742024184fe73eeae5385a75c62a3da8","size":142373,"data":"","first_seen":"2025-09-11T16:44:19.554366Z","last_seen":"2025-09-11T16:44:19.554366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"10ca97b87ffbc080d3180e8b4d0b25ba","sha1":"a3d666bfe347cfce71c599113891b391e32e70d5","sha256":"47b9ced16e39c6fc15b867c38afc0c25a463e6340d874505061ea72a882c6f43","sha512":"5f542a5fa9aa79da8157a43b608272657630cb27ab944bf879b908ca1647882474af007e8e6f77fc2b0d53c82fa7684e858b1a2af1f22083da06cb1de360126a","ssdeep":"3:N/BKL1XKZkXc5n:eL1awg","tlshash":"895504c0544130700410c440d3741c1f541f0401155f0401f05f14d417303004011551","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.604486Z","last_seen":"2025-09-11T16:44:19.604486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"43db33b527dc15a7e168b5439c67b21b","sha1":"28b2f3fb05220f0a5f4263b052986f9c48f43aa3","sha256":"37de31f273b556c88630a1de35efae6ff6f3b135e930f6ba569fec55241a7f6a","sha512":"c747278a326d81e23ba325dddd3551a3721d1e5c65266c7c354b2f9fb8e9d2a83d90f25165e991939470c5967d32a9c385cc1dd51ac8c78760a9208b0ca0d74f","ssdeep":"3:N/BKL1XKZkWa:eL1aI","tlshash":"615504d05c5130710410c410d1545517555f5405111d0c01f05f14d417311001010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.606301Z","last_seen":"2025-09-11T16:44:19.606301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"03e052d01681db467f6ee4c3454dc384","sha1":"d1148ec3a59df0410ae47f1d2883b2128650ff05","sha256":"39beaad7aa7561f7e720a107690c53d408320bf1c551286696a19c785d8fa15f","sha512":"2d0ca283b801a9c0518bedddce3bd2a2fc0b86632c3a90ae2a4529de0b29f0f44cc4454d4dfb8be7227a3c8d8ac68c5aa5ec40f2872a8444fb13b30a99fbaef8","ssdeep":"3:N/BKL1XKZkWWS:eL1aAS","tlshash":"845504c0544130f00410cc10d1545417545f0407131d0c01f05d14d437317000010551","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.608361Z","last_seen":"2025-09-11T16:44:19.608361Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5410fd6ce5dc1f486411234d7ed956d2","sha1":"207a76db7fa6ae96a731c1436ae57f3c43b2060c","sha256":"faf39d12283a54ab7aa1ff444e1e76f947df32c1c95a359b1a4ac654d687cbf8","sha512":"efb1a2cd0d9751996068a0074313bc94c220d9a3a8637dd03af1f52b8648cd1f19b6287cdceaa5e5faad25cd0e9d97378b49ad0d2f1b991b7b2e3bdf3fe37e42","ssdeep":"3:N/BKL1XKZkRV5n:eL1a2V5","tlshash":"f95504d0544131f00510d400d3541417551f0501111d0405f07d15d457301000010d50","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.610765Z","last_seen":"2025-09-11T16:44:19.610765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce5b16f24faeadcbdc7ea26445d0b7a0","sha1":"a2492e14110d8913062a0c0731a4da6e95051e18","sha256":"ab6b66fd7820a0843c8d906ab9dde7ac60661b81b16f8a26e4f93cb163377f93","sha512":"149360304e0700ed6616f0352f2ad45fc9cf21c47e3d2940128f4b45fef2da629a6f9f3230f4d1b7b441cc97c7a64f8d655bd05fe4d9bc072623c70229170dba","ssdeep":"","tlshash":"7d610a4fc56e815fe77d21ace85aa6511c3600a2852864b167c29c1d3c2be9bc087ee6","size":3186,"data":"","first_seen":"2025-09-11T16:44:19.61209Z","last_seen":"2025-09-11T16:44:19.61209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-19T10:45:17.751426Z","times_seen":816534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ee49371d44d0b47784078eac6b96dbb","sha1":"6de75d71b2f2e3901d58b42e321a35b0c28cfd3c","sha256":"a1be52ce7e27f249ca157a153a105d64ef7a8cba40202d320b0de9202fc05a78","sha512":"575065aff6f99543b849a997d763995f104511ee529b847f96d3f9f0f4f20a04b09e1e3c64c74c9b9a6e045f431c0663aceb3fd2d10d0c6fea81a0118eb040af","ssdeep":"","tlshash":"4511ab8abf95b0bd2b12a4e654af204e86abfe941846344c074082d43d65b11942bfbd","size":1031,"data":"","first_seen":"2025-09-11T16:18:43.696132Z","last_seen":"2025-09-11T17:23:16.75019Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c3634f488c1e7b9d6799034dd628fccc","sha1":"5ff96cd629fa64c4ae52f23522dfdb0945ca3864","sha256":"8c148c020bf3f7239a620902153ee0df082e7da17502654b35ca302dbc38e2fd","sha512":"0461891097a32c0177cda59b6891cad297e9635daf791e1d0094b81a80374dbb26caafc97edc2b6672cbc82c588ffac0cced39529d1eb427ed1e34e9bbb4d573","ssdeep":"3:N/BKL1XKZkXcl:eL1awI","tlshash":"6e5504c0d4c130700410c504d35414175c1f0401315d0401f0df15d517303114010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.615022Z","last_seen":"2025-09-11T16:44:19.615022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"767109bcd972b2dfb2f5329526e58f98","sha1":"b8afcb9db16d8cddccde0ae0843fe75581a23c49","sha256":"19c4069f057ac496255d18f5cb292dde901e6b173e62aee5057665450986bc22","sha512":"396aaa5612c5199970975b240db604383db1be296f527c59847d6b9178fcf8d07af7ee951b6649fab6cb3908d527ea597aa9f7c0e78c3545b98dbcf46f7d9e8b","ssdeep":"3:N/BKL1XKZkWTR:eL1ahR","tlshash":"225504d074c130f00450c510d1547417545f0441131d0c01f0dd1cdc17301000010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.617158Z","last_seen":"2025-09-11T16:44:19.617158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f6161217e242dffadf4241d174abcc","sha1":"304832d02caf7b8a45ea29c321993d7eba48be67","sha256":"390eefa5af21228aaab4bb7eb68043b2468a645b3c861aaba17b226cc8c05d95","sha512":"886e6c321c801fa26a1363e65eb9ddd6f15617044d57f2b458d235cb396119dbc35e216178258e47ed6a73ad9a6f558e12605621bb3bae8e463c56ae6f9f6d18","ssdeep":"","tlshash":"869004534011730005710337175555403335501310314c0437cdc1153f51f57cf05340","size":46,"data":"","first_seen":"2025-03-04T09:24:28.966015Z","last_seen":"2026-08-19T02:18:36.299103Z","times_seen":246331,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9b1d534e6311af5a0fbd02d4673407ae","sha1":"ac6c328702024eb8d35606cb08b86aa7e8bdbd76","sha256":"47962d3caa5865b31f23eb93080e26a2f06df8c2d2a6c029bd4ac4a76dcfe967","sha512":"987fac6b51fc64ac676f2043a6c46286970a284b60b8962b1e77b4583e5f1e71bd3142e8c13ae77a62919f60f8401862a05f1e9d4184186b05fa35ffe35d0cd3","ssdeep":"3:N/BKL1XKZkXTQf:eL1awTQf","tlshash":"265504d0544130700410c400d15c14175c5f0401115f0401f05d1cd417303104014551","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.61951Z","last_seen":"2025-09-11T16:44:19.61951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e93bc54052c58e8746d4b33f4750d13","sha1":"12442134ab4d0a3516f41a899238d2a7f62e6b41","sha256":"35bef5668964c1f555776a4fd05c4dbef18fc3c32ba4627d83afb5ca5c31d0a6","sha512":"f71214d34f1afaed44332fe14f8b25e6cc22a99756db9e8530ee3e7dee78b10eaac022aedf6f5d67f5663ba5e785cfa2d2319c93a650ee9fd164c8a277087b07","ssdeep":"3:N/BKL1XKZkWS:eL1ac","tlshash":"ed5504c054c530700410c411d154541755df0403111d0c01f05d14d537301000011550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.621786Z","last_seen":"2025-09-11T16:44:19.621786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f10a1eb28ba30165c5d5241f1313c1b9","sha1":"1a5217c5c8fd3493412f48f2ef0babde01067543","sha256":"810cc8df72b13b3dfe1316590dbdb32c3ddc9e5dc46736edb1e6a88e6e1ad139","sha512":"02bd16b28485f142fea0ce2ee3f0df63bd602bf40fb885ea5f48f08d08510ad9aa86ca7d0e11683b2fefd0bec07a5578b31e21f63d308f897d42caa400682161","ssdeep":"3:N/BKL1XKZkXWVV:eL1awcV","tlshash":"965504d1544370700410c400d1541437541f0405111d0401f4dd14d41f303404010550","size":1337359,"data":"","first_seen":"2025-09-11T16:44:19.623782Z","last_seen":"2025-09-11T16:44:19.623782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T10:41:31.836878Z","times_seen":1039356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=97d8a02809ec76ef\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-09-11T16:43:42.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=97d8a02809ec76ef\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97d8a0289b6676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142373,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d73b021ec2f0e52c7e9968961960ef8","sha1":"931baf09f127c77ef4594ef22f9d41d455f4c9e1","sha256":"f4e73fe6fc96b9e197aff8fe0f5b28a2fc9789671db3b3de750fae9a386783a8","sha512":"8c793fa4a369b2e21bce17d582401f38f387d7ca0612f343231a57ad54bb9c749dda6a8d211b3878a31a53910a535f008a4b671f238004b183ff543f6f381614","ssdeep":"1536:eU+Ax+m/WNtc1SQysVJ80pXJwLfUV2/yH2xUBYMxyP8FE+V9AIH0BY:eU+Ax8Tc194fcH22OzPWtD","tlshash":"20d30bca75cab6655337347000671ccbf2b7b8742024184fe73eeae5385a75c62a3da8","first_seen":"2025-09-11T16:44:19.554366Z","last_seen":"2025-09-11T16:44:19.554366Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRm%2BgHEdK3pgyA4HvKPHmzuvqg8%2B7LP73Qoltj4Hb7uuH9bNsvpW9WEzFRu5nJGF7IEOQMtjhx42QKtxSCwMTGkzs4uFtYnfSINW3RhgqaZTzuDKsvv9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a3c2021fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":4,"receive":4,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9PPDXIzmDJJNUxvqQ50vGdIZzJ7YPzc%2F2mxQoUu7JthYQI8weIpi6kgdC7ZHCASNBrX7eJ8cNp7xhYbeTtdl9En%2FDm1YVswqOdSs5DH9YuiqE5ISC9D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02b0c3021fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1302086629:1757607116:xSp3PePPgjitLm1Qd-ghxTgENyTGxGqOtI66TMjeb0I/97d8a02809ec76ef/c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-09-11T16:43:49.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1302086629:1757607116:xSp3PePPgjitLm1Qd-ghxTgENyTGxGqOtI66TMjeb0I/97d8a02809ec76ef/c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 34039\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:49 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: O75rNzqvJoJ/8KM00pt49Ml6cyW6JRjrlY+GmzG2sufIKvjP77nxMwH8EoGyA/NJ$ALL/SGY0as0Wf2UC0UP+NA==\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97d8a0526a8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29564,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29564), with no line terminators","md5":"f74bb2711e274fdbe36854613c4aabf6","sha1":"6bff2b0425f2122222bf044ff3bcc2d9f1b6db3e","sha256":"cebc0e34c7bd6de768ab92cf21ad1019ae63d9ec6a2ed0e11b1fdc0b202f1405","sha512":"464ce75bdc9b58ea69209cfb15c0fcf1cfdbdb60156f3381f1953f8011eb503f47d9c010dd8fe2f9a271379c1c28da860197abef87507a4cf5d30bf2c2f6e094","ssdeep":"768:lZEUyyqilfAC5bI+FeHdGvZt4uDSqlg7F:bEKfD5rFe9o4uD+7F","tlshash":"b1d2e139bea436293e557c1833abdc2d5c029a133870b4564e048e25e1eed497afcdad","first_seen":"2025-09-11T16:44:19.556498Z","last_seen":"2025-09-11T16:44:19.556498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3D3AIuba6LrU%2Fs%2B05VkEXBPPdyD4rtYk%2B2kZ6alL5Ej27QS8wHenx2ZYD5amnW7jUmfMemIlC2Y4zV1aCM4MgsaUQS4suFZJX5iRKHxljtNVite71mti\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a6c2621fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHipScXq90AxXGtG3LK2GoWtHPDpc4oY3zHHPUxliXYRSXa8xdu61apAU4JgfGz%2BG7Ay7g9b2mKby4rcpD8N5wSvSLwwy8nLEim%2BDpsPnk2yxzgt16nd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02aac2a21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keBKkxiFYMwBEMf%2BudSUR98Dbam9nahCFJBV%2FHvvsuBysdMpYcth1dScYWeaeUWQN1mOWN0ndz8tKTuZU0z7ML2vjB4FwBrjgxmht5%2FwzyinGdTfQ4CG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02b1c3321fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FuZ78DsjOcEtzC7DFmYUi4qXn9LIwPIqKm%2FP4gpaBOf24wqezTCXGeqOWvIB%2BuD%2BR0LZuPK%2F%2BKx0ATjuls5HjtrUH%2F6HkWwWPjEgFgeOqeFLqVw63z2M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a0c1b21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6M%2BX3ZXswBArHCfrKPu3eNFl1wu8ALsAPQwkNnoHdhK02z6zs1i7FRdU9eRa1kzoCyHBVFxHxycZdDt4t4zonduA9099Twc5bQojQSsCcH8%2Bj4N6iOW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a9c2921fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1302086629:1757607116:xSp3PePPgjitLm1Qd-ghxTgENyTGxGqOtI66TMjeb0I/97d8a02809ec76ef/c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-09-11T16:43:43.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1302086629:1757607116:xSp3PePPgjitLm1Qd-ghxTgENyTGxGqOtI66TMjeb0I/97d8a02809ec76ef/c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3319\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$mkaYMSP2Cbc+4ee1yB9wIw==\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97d8a02b5a0476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270960,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4b433e2ebe585e2ff924a2a1e7e1e441","sha1":"91d815fe0a16b44ae590bba34dc4a7b58c610edd","sha256":"e2670d4388e0dda9f2bae176f840eac7ba4d21b60c3973e95b252c79368e64d5","sha512":"6bec38ed4e4160e588c8aa55017c37fd1b4defcb832dd4bbcfdd52564d74bdfff594cc880feef0a9448c34e5a0fcb39e3c77169ca9265258767113ebc8e7621b","ssdeep":"6144:ypf3jlKyAEJzp+E9PKvGOp5ilAzi1OLDhzom+uEzdyHF:Q7lryGOpglAu16F0m+uEzAHF","tlshash":"0c44127d16ed2b5f9b05e34b81e581667f9427af0048c4e099da56cf228ff484133aab","first_seen":"2025-09-11T16:44:19.557623Z","last_seen":"2025-09-11T16:44:19.557623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjMYGc5RsIWXzqy6M3129871CGv9zzoWRfnccVxBPBhq%2Bw8HruWxt2qC5VBbh3YfLQgPPBBiezO%2Bj25zqQ0lxLAFkle2xD2j8vHPqAi3TrKsVvBKVMIg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a1c1c21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCztdr0Z28dvt7uRjR7xRJNRfwJmrvWvDGRO4PK3zJd2ltnhC3b89mKo8%2BEDT2G%2B4fILr0slH7V0JOBqh%2Fb%2FgmcDzwaO6wZEBenh8sw6y%2Bh9DVoJ6H9I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02abc2b21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-11T16:43:42.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDzZ1o0fbdffuIfCGwRey6bD382xDZ1CMrp%2BzphKVbogKJX2VF%2FEsyC%2BBTZSqpxrS%2FUj7x2T2bEW8qNCOQU03HS9Tm2B2lNOj1cx7nqRzgqGtJauY7nW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97d8a025496b5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4982,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"8506c896a6f6fbe13776f8f6a0c7bac5","sha1":"4327e492648d6e611ca714ed633c2d1ff4a776f4","sha256":"a7c2d751f6567fafdf93a008b9b166b9598b6dfea0afeb3292f13c875f8718fd","sha512":"ceecdc5d3152d47b441d402ebeecf1b7b220641a38cca1dd6be2ab4fc85a25943a8e6cb5ed46366b6497d3355c84b301a454ec32315a992161340933d424c040","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GaTlqZNeBuI7RLlvaQxvbzM:fjFj7jOjEjK/VounOVKRqZyuI71lCejI","tlshash":"fda18472f9bd107f2093917261bdb70a3aa5c143db9b08903abcc2751f8af55ae131c5","first_seen":"2025-09-11T16:44:19.558985Z","last_seen":"2025-09-11T16:44:19.558985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":20},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4EJHjhrImHMkVa1HIQir038557eyIWURUhREvkmSa4v9pibd3fsT9CHA85a07LRjz1hMrSSVzbjxrTWradn8pISWaJ2iFWqFwwoahyXNNPvlkYAkA%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 97d8a0296c46b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":12,"receive":0,"ssl":22},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhZJe3h7683sdherOBV%2Fh5lA6VaP0KimGLOH5EeVdXOyB9G8eQ3gnm9GQtRqCgp%2F0YCecPn941QEbhWPLCl3eu9S1JC6N9%2BphLm6Q4RW99Q17nFJq0Bd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a029dc1721fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCB%2BBmbPzs0p8ZVlMOaMXpzMx2qLc%2FUqJXI6bW4fESs2R9%2BlvDlLS9E7OXxKtKZOHxFq4YZ6QHPVS4WrndNFfpbmI%2FjEKZRPBuM6DHjgl8SHWLo7KcYx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a029fc1a21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/cdn-cgi/styles/cf.errors.css","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.550Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/cf.errors.css HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://remittixkycportal.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 11 Sep 2025 16:43:42 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkFtoInkYL%2F%2B%2BB9tu8Lqu5XDcJtnJFwibvD8MBlyYTyYkgNh3yczKRa%2FC9sXvswDBikIImgLBcc8bya0zW2yLt1YvIzQRhjI7GlyPbcqlXwlptIgog%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 97d8a026bfb356c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24050)","md5":"5e8c69a459a691b5d1b9be442332c87d","sha1":"f24dd1ad7c9080575d92a9a9a2c42620725ef836","sha256":"84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091","sha512":"6db74b262d717916de0b0b600eead2cc6a10e52a9e26d701fae761fcbc931f35f251553669a92be3b524f380f32e62ac6ad572bea23c78965228ce9efb92ed42","ssdeep":"192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk","tlshash":"86b21323e5f5381a2516a13ca08a92dc69356073f7f30e9eb985d06cd78dd791f226c3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:17.728311Z","times_seen":567558,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.551912+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/cdn-cgi/styles/cf.errors.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":908},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":10,\"bytes_toserver\":1325,\"bytes_toclient\":8434,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-length: 0\r\ncf-ray: 97d8a026db27b505-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/f78657f80e4b/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-09-11T16:43:42.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 97d8a0287b1376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bp9Kz7tUjiX1ghUBVMvHXhKYLPYF3u5vOVOn5DtPjm%2BIXhChejTjeKDPUwcUg22GP%2F8awisNtLq3m8Y%2BeuNHPTV5AGoyGbuJVAhaiB07VdKof1GFwDAn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a029cc1521fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oK0xGq1jt64wpONMS9Bl5M1Bsp0sxN4OBeUfsLXE9xRXeTxspOL8tjl1dDL1Sr19jq3A0Bny8%2BWitxXzk9Te3ilmrS1GpKtYIkavCbdjqLwyf6XZ4Ad3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a2c1d21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUGjrMxQn2sMsPZuqyi%2FJj9GaXc1xlwjy8TK%2BKLcuMb7TK620zHn004wF4W6NjBE2eeehnhFPLLo1%2B%2F%2B48vgqe4oS4rgQJMPnfIxzdv4pGcTA7FI9rxE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02a7c2821fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/97d8a02809ec76ef/1757609023271/S24BeJDd2eh7Odz","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-09-11T16:43:47.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/d/97d8a02809ec76ef/1757609023271/S24BeJDd2eh7Odz HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 535\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 97d8a0450c4b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 76, 8-bit/color RGBA, non-interlaced","md5":"8b0eba4f035037a9c5e07cf034c33b7a","sha1":"7974909ec87d5aa10be240787bc97fafafad891f","sha256":"aa128337ac1f6170266754d9580105949080bbc45e3f5dc4d6b803013bf46c73","sha512":"0d9b8e39c8e2bdf207c49d332c699c4298dd2245bf7fbc47035840599d0500ab7dbe7292c781be940817ff08bd4376826545bbd68a94c7f66a646722cb33c3ac","ssdeep":"","tlshash":"04f08cc1629cb4e8fa3c3a22028382dd4a611208f654045f433d40e32301cb790841dc","first_seen":"2025-05-30T09:39:17.925622Z","last_seen":"2026-03-30T04:11:29.567205Z","times_seen":114,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-11T16:43:42.439Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Thu, 11 Sep 2025 16:43:42 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xv6S4lLvleS9Y0Neq2y4b5jrNEhFRiw7WiZw5fowBVAJtHRkQM88O06MxfEh7ORjh96oqN%2F1UkTVBZ%2BlRw2UivbPIoZgzjMu%2BXS9%2FgObA7NIy5Lczw%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 97d8a025fe9756c9-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4983,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"f40ee2b9a54e251ecd80cd643a8a0638","sha1":"ef5e9694768d418233133f8632be1b86d4b0daa7","sha256":"f3d2e6470e4bf9502352afe1074d24d17e9450146940e27abfd3554f496591ae","sha512":"41bed3446f43c9b7d1dbf10e2804503ab782784c0360cd7557892d62a73c5a1d10aaf165102214f4e834f4e49c24f46deb7b27905a0245eb3d541e35fd8dbceb","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GvfQlqZNeBu/7RLlvaQxvbzM:fjFj7jOjEjK/VounOVHOqZyu/71lCejI","tlshash":"52a1a572f9bd157f20d3917261bdb70a39a5c143cb9b08903abcc2751f8af55aa132c5","first_seen":"2025-09-11T16:44:19.562747Z","last_seen":"2025-09-11T16:44:19.562747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.447001+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":660},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":680,\"bytes_toclient\":3109,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/cdn-cgi/images/icon-exclamation.png?1376755637","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.601Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://remittixkycportal.world/cdn-cgi/styles/cf.errors.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 11 Sep 2025 16:43:42 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3P%2BvSR%2FSY9%2B5sZNh54aUckrpPA5jSPxaHUu2mYM6ALrE6o8w0%2Fia1siGRCVDpEyXNptfoR%2BAV4Z9CVlaEMvDllHEI5AFZPL%2FVPWq6nHlg9cTt1%2Fjqg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 97d8a027081d56c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"c33de66281e933259772399d10a6afe8","sha1":"b9f9d500f8814381451011d4dcf59cd2d90ad94f","sha256":"f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016","sha512":"5834fb9d66f550e6cecfe484b7b6a14f3fca795405dece8e652bd69ad917b94b6bbdcdf7639161b9c07f0d33eabd3e79580446b5867219f72f4fc43fd43b98c3","ssdeep":"","tlshash":"14f05c45c595e9f5a90330586311ca15ab7701c6276726c9d3854032a456482ca97f86","first_seen":"2023-04-12T19:44:04Z","last_seen":"2026-08-19T10:45:17.723888Z","times_seen":418346,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.608687+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/cdn-cgi/images/icon-exclamation.png?1376755637\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://remittixkycportal.world/cdn-cgi/styles/cf.errors.css\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":459},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":14,\"pkts_toclient\":12,\"bytes_toserver\":2155,\"bytes_toclient\":9553,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oQZAdD7SXoRyLjc%2B5Iuo5pnrFScIbWTEfbq4fGhFRj08LGOBbayIvXAX8iOxV6lBQx5a6zH%2BuBQzpSoHvrB35pIyrsxQMbNIsQz%2FZGjNuB%2F3d9GgVla\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a029ac0f21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btaDQFkPoFC0ZIQQKX%2FgVgs3aNdq6zcir4fimJ7VXWUGha3g%2FUewlhhNG4frPOoz517NzbZ5VP4ewiH8zz31H01YMuhwIxrfwheJ29AdzwNdN0rZlv6E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02afc2f21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1302086629:1757607116:xSp3PePPgjitLm1Qd-ghxTgENyTGxGqOtI66TMjeb0I/97d8a02809ec76ef/c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-09-11T16:43:54.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1302086629:1757607116:xSp3PePPgjitLm1Qd-ghxTgENyTGxGqOtI66TMjeb0I/97d8a02809ec76ef/c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: c_5yT52OovpW._LOdGTrvnNnrBWz3qNUO26duvsLT4o-1757609022-1.2.1.1-uh2djUaHYcI9SLruO43kewRGU7ud1na1X3kN87WPbMaqd8AsJoP4Of02guYuBTA4\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 43042\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-chl-out: kTnycOWJzawaj4ptDlvAM9jxh1izht3HVsUtLizaY0qEEB0qWPuCGQXlVynHzcHxrAxIAlzvyyq3725LTgwz3RewWo6mejmeYbtyTy6lYI4=$S8Qmc1rSgKUWZz/q1Izhtg==\r\ncf-chl-out-s: d20EG5kNewv64q2ou9yZI3JAkCZ+HXdbgFLXWSjL5VRxs4UPcuDVrah4j09LJ5npBpgGUYT3uBAiH5jyw8glUNX2flQ2aIcSDed9caabdup0hHS0JzojGMncafcOYAstOFeQ8gJrpbwdDP2csot6SRX8E9jGHo1u4mgLneCLmGzxgBVt/R6aOF/ze+nA5enYc3/PLZbjzv5u7fo3AqkDh1Qhv8i6GTzuWo8uvd/pm9pk6i03rovoIZ6zKLEtt+xIEaAOUCW+aglSHaQy4BlPIjL5b9AJSC9ydCks1R11f5wlLYe+s+lFusq4PP5zFZqbeSdArEjwfGvLa79r8OosFULCuhZlvWN4tMwQb1o41+Hho31lqEUdWRU1avlI0tl+2oORlTBWkYRdCGjV1tk7QaZhJfFI5JptyFcL08gDx7R/PeKDbzM0Aq64jVJ/bpz7UTe+lx1QNa04XF4kKJxlOkuPxnnLP17R5BVf024GeNkkWvHNTS1FxkfMrdljK1iN1V22IVtTDDaYyLu8n+S+Ox/Nb6y4kK0G7GtfPd20ySB2ODyI0ThRH1HFUqm+LzY+T9vNw0qCe2jy2GIvJe/4OtGLHNiOIny1zhIHObpNT2sfhvjGG0HvJLMBSVn+HKY8TlZQB2B8jBqaP5oJA4Z7zHe3QTavDNhzTZPBvShB2VNTQAzSS3Si5nX12zj/enARMZPnWrLFB1e07OpmEqpNL9roYY3oV5tjghAJdaVcDFbC/E/Fyt3KSv9ze1ZQ/5ZdVzBYCuGLCgQ1WuMq4o+B3AT5ac8hditZyHaqaVUm2jwARwESNPHhlOXuInUl7qgL2Ap3m808anxlcuqDlbS7o1YiOMOsMHOe4Rd0hj8AeMe5mlTJpsMxcwiYxjZDCaUUza6TS6P4jX0Lru2hgtUk7AYu1ZmjBYdtB7RRJJjzqkXZhsd7OVobCzTrAKb5ZMbRfN/34i45DZRdhe6GOtsnShuai5K37SP3enfTC3X/EfBsLdtk1Q8W2yemKMSZfMmqmlF0eNNQ1BwM7WsitfzdBo8D39yUeXNFLKbjCigTSBRxC6X74d4/3cXGDx1eokW7vibrMjkWJR7gThAcnpl6vBXbj/UHGzBpciKdd8Lx6v4/ktdswfRBShN3bMSPcendbs95z1UwBpgHyUV5nRqqOh9lCQZ1/Q3aeNMYcDW9uIe6Q4SS6nt1yEdeeiejYdW5n5fjLJp3diCFrOMVjGixTQBvYMeGVG1EimkbpNV9FX6O+mZFDLGkcvVhVBAyGhCl$Rigrnq1QNCJhQEpVchpfmg==\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97d8a0712ae876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4944), with no line terminators","md5":"80e49ca4098483d69a03c723de4e2e1f","sha1":"f1a7b32cbbab768af919fe5d4b882537cf550dc0","sha256":"97f89b4a583d60ddfea46a0250ee79ba3c9ef57dfefac76d9f7c7836068f3fd4","sha512":"7dd1b4e477b8d583641c23c7c02cce16b86e2d048faaf08896e9b252868c4cc28c7f3e70efbcea26cb88099453401d8a31120cbe1ea5e86dd42401ceac95516a","ssdeep":"96:E+JRw/xEQMV7qsECSTrrxyV/LGxCp51urTfs6qBVHr3BGEQBwNQRTFOMA85hEWv:E+J2paJECCr4pLGxG5P6IFz0EQBwNQR9","tlshash":"44a16e0fa52b182d91c45dd6cbee8f177944a588374a82cd9b7e5ec3c1f1a02ce754a8","first_seen":"2025-09-11T16:44:19.564857Z","last_seen":"2025-09-11T16:44:19.564857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.735Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://remittixkycportal.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Thu, 11 Sep 2025 16:43:42 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCross-Origin-Resource-Policy: cross-origin\r\nLocation: https://remittixkycportal.world/favicon.ico\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lma%2Bx2%2BWzfuqFCd5QA6NZsOkz5C3qvsOklUgUJGNPMJaQpjJBqzrmpAQYMhkTed%2FF4dkan9ujSfgCOJJ8uLw3gW3WQQEVRt2lGqGAx%2ByeUqtFdCcKA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 97d8a027d8db56c9-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1085r/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-dOSpme2QDmonHlFo' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97d8a02809ec76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26984,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26984), with no line terminators","md5":"e0ae98ab52b2a418365328108b5772f2","sha1":"d4998dd1834f7e33b06639612d9a9a3ab1098c25","sha256":"2975657b42eff585d8864c9289b4bb09bfea1683b5d02502b1952bdcbb95aa53","sha512":"9e508a070983ceba4a2415c51fc3d57f2217cefddefbf5b81b0eecffb94119b721d9f60e2c6954149c7f676b9ffa5de929ab7b5704deac68065292b0fe8f7576","ssdeep":"384:Ox6U+qdB83E29aJC6tHzSk1b2xdLVSmda3mDI9FBAZCfQ:KdGrkHzlJUdLV9da3m8KCY","tlshash":"8cc2c8038a101b7e7463872cb3e1b5c9a338ba025f5ab1b7f15012a48f4d69f3b5371a","first_seen":"2025-09-11T16:44:19.566227Z","last_seen":"2025-09-11T16:44:19.566227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mW7D9ZhVgq9bo%2BL8sEUansauIyROUzOyuPuX2tug6JjN23uNpoNeyVCzdufQh3e%2BXjFEWF4iwoCXdrofMG7H0HGjowNtOes93tQ8Douqt3SjDHvk9xhh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02aec2e21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/f78657f80e4b/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:42.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/g/f78657f80e4b/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Thu, 04 Sep 2025 13:20:09 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d8a027380076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48994)","md5":"b661f4cb7c8743c758053f6696d83e42","sha1":"c2877a9185c7402056feb50723f845e35c8574f3","sha256":"3dd3733199c121286e02ea0668730c4fb8b1773a0d8b84b16471254e785c2c4e","sha512":"f13fbdb6a12ba0590f889ad7b337b7cc1734aa7272dc056d0097ed3ab3aadcb71efd7bfe32100771c4d6b12c774dc4b007c357f70056b9409d95260e9f6c59b9","ssdeep":"768:XC6BRV2fM4l0a+rnhPLy6PzR8u5jUj4FclBMqfspVyq11AY13kep+ORWqxIrm3LW:J2E4l0a+rnhT//j2B6VyGNI","tlshash":"66231b583256797227e980e1617ba74373297939e94ccc50d423c86536acecad233fba","first_seen":"2025-09-08T12:20:57.981855Z","last_seen":"2026-02-19T10:03:30.871534Z","times_seen":12070,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:42 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UBzzAkxRxAI1zc3bysUm%2BsWQJtLnsCJvyW9Jl8vPL15NdVkrdTV1lk62xJtoYyRbNiNWSO3BzUUMAufzoNCAcOCXpHVT9oRJ6BJRu%2F3bgQi0CFjBw%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 97d8a0299c84b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixkycportal.world/favicon.ico","fqdn":"remittixkycportal.world","domain":"remittixkycportal.world","tld":"world"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://remittixkycportal.world/","date":"2025-09-11T16:43:43.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remittixkycportal.world","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 04 Sep 2025 20:55:45 GMT","end":"Wed, 03 Dec 2025 20:58:54 GMT"},"fingerprint":{"sha1":"DB:4A:E6:12:3A:3E:8B:08:6E:83:B9:85:A8:71:34:CC:88:A2:E0:84","sha256":"F2:ED:49:D5:B0:C9:35:49:8C:76:50:8A:4E:3E:3D:58:6E:A8:04:C3:ED:BD:48:3E:73:02:FD:13:09:38:AA:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixkycportal.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Thu, 11 Sep 2025 16:43:43 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://remittixkycportal.world/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0s2Vv8ijpWZly0MdBoo%2BNrEWbeO%2BdYw0H8DjkT93XynM10TQfq4WKZriaXap7q9BSTvLqx3ztfm4ibS7vf9xbs0FLlB7CCRfL%2BMLZv1nuC2luszcpJT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97d8a02acc2c21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T16:43:42Z","timestamp":1757609022,"ip_dst":{"addr":"104.21.32.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":41180,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.world Domain","source":"{\"timestamp\":\"2025-09-11T16:43:42.931375+0000\",\"flow_id\":1481274027841119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":41180,\"dest_ip\":\"104.21.32.1\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027879,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.world Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"remittixkycportal.world\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://remittixkycportal.world/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://remittixkycportal.world/favicon.ico\",\"length\":347},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":17,\"pkts_toclient\":15,\"bytes_toserver\":2724,\"bytes_toclient\":10834,\"start\":\"2025-09-11T16:43:42.431711+0000\"}}"}],"analyzer":null,"urlquery":null}}]}