{"report_id":"1ee0d69c-97a4-4f55-95e9-e0deeb37a256","version":6,"status":"done","tags":[],"date":"2026-03-20T10:09:31Z","url":{"schema":"http","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"title":"Home | \u003cbr /\u003e \u003cb\u003eWarning\u003c/b\u003e: Undefined variable $sitename in \u003cb\u003e/home/loyallui/public_html/index.php\u003c/b\u003e on line \u003cb\u003e12\u003c/b\u003e\u003cbr /\u003e","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T14:46:13.557246Z","times_seen":17903991,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T10:09:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/64/5d/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"maps.googleapis.com","ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-03-15T23:46:12.31195Z","alert_count":1,"request_count":4,"received_data":753358,"sent_data":1885,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-15T22:42:33.164796Z","alert_count":0,"request_count":3,"received_data":25253,"sent_data":1638,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":1,"received_data":7084,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.loyalluisexpress.com","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":65,"request_count":65,"received_data":2426220,"sent_data":30682,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-03-16T08:24:17.268159Z","alert_count":0,"request_count":3,"received_data":5210,"sent_data":1607,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-16T03:50:54.290602Z","alert_count":0,"request_count":9,"received_data":680593,"sent_data":4401,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-03-16T10:32:28.71191Z","alert_count":0,"request_count":3,"received_data":418965,"sent_data":1744,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-03-16T13:30:10.597082Z","alert_count":0,"request_count":1,"received_data":81508,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-03-15T23:23:31.668018Z","alert_count":0,"request_count":1,"received_data":90461,"sent_data":453,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/5d/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc0f5fd5226231fbd359f9d68b9adffe","sha1":"8b6b41614df13e8cbc4fec08fccb1a3a2a8a4f64","sha256":"1905014257cefc1d41fd0656fd8b067407fe2e2f04df7bc4410a1d664473ff18","sha512":"c3ca3cf271d7469ed47dd65236651e33bc3f74ade3f8a61b9f246386f1e90d42cb4b07d1a0b20c29062a591f9655574847057786cff7f1792e87c3d7511bde72","ssdeep":"6144:Xi1iZ7z09pa1nIhaMvM0wQeFRqxv35Xu0ImqCABOCk8Zxu0BFVOtgEy:Xi1iZ7z0m1nIhaMvM0wQeFIxP5Xu0ImC","tlshash":"f964d67c71316b0ee973c85fc626301e90257edbfad488bdeee55146ea50989f0e0638","size":311790,"data":"","first_seen":"2026-03-18T17:32:05.413441Z","last_seen":"2026-06-15T09:41:50.34498Z","times_seen":7681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-15T14:44:07.552332Z","times_seen":267001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-15T14:19:08.011182Z","times_seen":93547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/code.jquery.com/jquery-1.11.3.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95957,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-15T13:20:33.870996Z","times_seen":18623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/5d/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19488061de8c326aaebfac825caca7c","sha1":"59b46fbcaf8ff6a46c5ab807b2c5d28de232069f","sha256":"dea1993cec328ebd8a1787460d132e6231d5416eb99be9f75175de3dcee81cd0","sha512":"5a3426c1fe033b0ddb55c8e02de219da15966aa3ac468aae59e4e4118f0370033930aa0e9efdfe2888fd53e4665699956f18c360344264f7d2cc50aa026d37d3","ssdeep":"3072:794/UoR1JVG45/aKYEdX738N39HxpY0ivecXBQeqd28gh1WRsEHZJxMkHr//M2Y9:794/UoRZGMSpEdwv1iveuB2d1RsE5/Mr","tlshash":"a4c3d8d5719370737f71a89444a74106b2aaa89ab05dcd2db1fcc8f3aef185601f9b38","size":126827,"data":"","first_seen":"2026-03-18T17:32:05.43155Z","last_seen":"2026-06-15T09:41:50.357453Z","times_seen":7683,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/64/5d/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9486d1e3ce00855817a50fd1721546aa","sha1":"c6713f73d6e00a57838bd7920389d73113fdea77","sha256":"00840e0ae3f5b858ff5084fa90d415a2b1b09a41c5ad8cc9eff31ba4d87ed306","sha512":"ec09be8907e8f7e28a37998092a47caa27722195b0667de183abc51d7afd2957144e363c8cdc617556d976c1c60b0b9a49cc756220f3821468d7aa37c9dd7394","ssdeep":"","tlshash":"02c08c43b030080b149aa116c3c6468c32b8840804360d282a40a04a38b3fac030c8a8","size":154,"data":"","first_seen":"2026-03-20T10:09:40.993323Z","last_seen":"2026-03-20T10:09:40.993323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-15T14:19:07.929254Z","times_seen":67048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/validate.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef7a32219204c884c2ad5ba988bd5c83","sha1":"d45182c849bce98893277aa391d777cb2bce871d","sha256":"78081284738b0d7a05a476b880894588b1813dd34446a8f76368bdc2656cdf8e","sha512":"488ba972ffad90bd9b9d90f36474e40253db3654d00caf62c94d1d8e94d23820d010fbfa30c5141a8338b11a5affaed2c99ec3b1def94225f73cb571805af831","ssdeep":"384:Qy+AEKCnU0pMEdMAUZh/VL06g9B4gny+mz4CebUC3mIqNF5AzUjvNTqbrWV6r+Zm:WKCnU0XdMAUNLTwKgny+yxFMUjcz+Zm","tlshash":"9092aa4c76c1a0575b9620f5a40b550bb1f39aa8600de02cb5bcd4e2bee4f896167fbc","size":20889,"data":"","first_seen":"2023-04-05T08:09:07Z","last_seen":"2026-08-15T10:36:17.501708Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/bootstrap.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","size":35951,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-15T13:40:17.977939Z","times_seen":10721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyALX1LcWvT-LG93ATIqo2B_oozsHn1g4nM\u0026sensor=false\u0026ver=1.0","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9929998c1f7641728fa5010126b5c802","sha1":"cf9f69ddd5c383d0bcc4edcdf1454ca56238e3d1","sha256":"788346a8a9320d783d17999e3acc3b3e4c37740ea046e3df0bd6270278e72f4f","sha512":"de9cdfce91eb14490151ab8da4f294b4f3ddaabb2fadffd70a7818e90d0fc91857ca33bc8fb29dd2cf1cb313095f75b3de5276cc756af4f7b475f8f614da6513","ssdeep":"6144:YR2FzUOCbjhXehzBFGGz/FJUcF1RDQl+/c/bnLremp+HpeSW8VVacF8OG24MHnSP:YR2FzUtbjhXehzBFGGz/FJXvRDQl+/cj","tlshash":"89642b9873a2346187b2e4e450370106f27e649af04c8aecb69ccde3adf69464577f78","size":311941,"data":"","first_seen":"2026-03-20T10:09:40.985947Z","last_seen":"2026-03-20T10:09:40.985947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/wow.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","size":6300,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-15T12:05:59.494123Z","times_seen":5566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/translate.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f666560352f0cf89990383b69603b98","sha1":"731c76d4e14015be1eb57125c28e514aec07d1c6","sha256":"ab8a43d0e459d4608024c96ca3a6b9657850873ac800dad2d389dc5cfce0a8c9","sha512":"79e8571fc991a86283a1b9285a8cc779d4736902f954263c73680bd59f3f43e3cf24f55f99595fb78442fc5e8f1141cde2f96e02526b8db81313d6db02712b67","ssdeep":"192:ea8F3nG906aSJJJkSeIUHVxLDDhWwpy8b7z:F8F3G906akrwHV5Hh1pz","tlshash":"ce02c8c97242f21b979721b6507f460ff235a86ab8584d40e059d9f8b9708f8053bf2e","size":8680,"data":"","first_seen":"2023-08-27T21:57:54Z","last_seen":"2026-03-20T10:09:40.943147Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebd160989f8c41d69e4653e729b2e75d","sha1":"850da1a7d2086e5046005a152b63e5c1a60a45cf","sha256":"cd9cdddbdf96dcb5d9d2b64cfa9a3f8d49f69aa1ba80aa6dec651321fe081421","sha512":"dff9f8d6fc902d46ff32d39f1ab5f7b5378a6e74b68129695be668647c41ae343bd15f9909b7c855d0d43d0f06f78cc4d78688a1be503f311ce702d5f5ded395","ssdeep":"","tlshash":"85516525b5e1003480ff22711a7d58ddb63d0676092f5044761fa9d54d74adcda8b9bc","size":2483,"data":"","first_seen":"2026-03-20T10:09:40.994168Z","last_seen":"2026-03-20T10:09:40.994168Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0ea48dc119b77e19ab4eedb70c364b5","sha1":"2d03f184a5a5800f424289fa9f2c36d2002c4ba4","sha256":"1b4156677cc396a365afbc284aaa2059e3f35ec5103e799c5ae4212d7f3d96de","sha512":"2cb15e7a21979fa8268b428d5dbd4d8b83c79fa82c7d7390e6aa9a3c75aef4a57fe6c78243bd4f9ce8291e702e8108c3af027d8e03540e531a0a2a981d070146","ssdeep":"","tlshash":"7de0265d2a407d31935356d710f6ef4c34f23024a559d85298dfc84d2a18d8dc42df58","size":334,"data":"","first_seen":"2026-03-20T10:09:40.995095Z","last_seen":"2026-03-20T10:09:40.995095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/jquery.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13c0a5055cca7b2463b2f73701960b9e","sha1":"e6082a7b52db82604ac446d2e6a32cb5af263781","sha256":"20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104","sha512":"2fa08436b5f748776d265944595a59581c6b06eb6eb239626de3338e0819b45852ead29d4997dc1f86dfbfb1b5d39dbd4dc9e44e6e38ba9f6006628710546ef9","ssdeep":"1536:zP10iSi65U/dXXeyhzeBuG+HYE0WEeLzFoNqLTW8+S5VRZIVI6xSb8Ch2ZbQnRmL:q+41VqLTW8xRrqSb8dGH77da98HrC","tlshash":"c793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95962,"data":"","first_seen":"2023-03-07T01:07:14Z","last_seen":"2026-08-14T13:51:01.976365Z","times_seen":4101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/script.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c207fac44783b888852d9cb6f614398","sha1":"2471bfc1a481867a0dff6700d748d8a441e156cf","sha256":"98ffa923ab8bf675e6efaeb6132340a4daad863858d001d5239a7aedd41ecf37","sha512":"d6866da885b3e253bfb7a1ce294aba72d136f214704d087d9fdb80f14f7da2deaa7afd28fe25e2a6a4a8b51e3c266fae9d2950d0ef7dde0ddff06d72a385669c","ssdeep":"96:Jvq8lhm+vRMS2nnBVv6yX6z6p9oX5SRYo69vRYTS9ipTX5SRYjeWUqSXgbF+w75d:JvSPDF9RVIpM4yeCF+mvelRVMtp","tlshash":"11f13392b36cd46e67f72115933dc900debcc032a011b0faf9ea216c77e479b12a5788","size":8041,"data":"","first_seen":"2023-08-27T21:57:54Z","last_seen":"2026-03-20T10:09:40.972405Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/googlemaps.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c05e2b8cbf7273e3030487e62e93ea","sha1":"be8eb18e023896361f41d8e7f831296fb6cc69f4","sha256":"74c490c7957ca842cc4201e50864bf0ae468e398f44781099f10b702a03d6974","sha512":"cd4b94ae31ca5ab0721b7caf191c5747c872687935d4d70d928d517af91dc71bbcdc50a25ee50c6ae9c04d37701bda4cf97d338929f60c78837ca305a6d565c8","ssdeep":"384:q4sgjg5AENOJz4rdiliFFwlVHmPO61fooMW3ee91tjMR4y9heBAR69kcIVaW1Nbq:2dNPdK9vG3D2qAR6YIQf62HbBGQW7","tlshash":"9b430c461a16161694f373fcee1b454ce73ac327910982467eac97d06fb1824e1ebef8","size":59665,"data":"","first_seen":"2023-03-07T13:48:29Z","last_seen":"2026-07-21T08:41:42.723646Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/revolution.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92f9bf1bfbcca80e33ccea3629c0d489","sha1":"7c4dfa60f70c1c2717c16336e48bdfd0ffc18b7d","sha256":"54f29ff37ae9a29f5620e6ba606bb4ce50ce6db0ce65525cc42416d33f88984c","sha512":"5af4021ce137e2521de3ca59a54a5e14685b900494b0a12b475a9b58e43aedf37e1fd391a9b3a333248a37839c06d74b8bc07c9f0d9d2296c8ff8050d97aff3c","ssdeep":"1536:WOtkCR62Hc4IMzY6L1PDqz5WsrUvvjWNWAxieiF/JlA0KRjmoMj3bgHQD6sPpRM0:57R6OzY9IvvaEGiRKRaXrCoUbTQEOlP1","tlshash":"54242a963610206590e72267917f060b7272fc7b9a06c96cb195c8f92f34cc927bff69","size":214813,"data":"","first_seen":"2023-03-07T22:18:33Z","last_seen":"2026-07-19T08:32:30.67183Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7a8833078acc4e88bc67cebd2996f51","sha1":"eb547af158c70ea7b3fcfde852b7c3fc08ff49ce","sha256":"a0303c878d32a4bd5eaffc2a351a274cbcca29fffb2f182103f1607aa16e33b6","sha512":"3816eabc754e2331fa59c1a2b9e4fe4ba99bf86a3fc3ecffca8466c4125b6c1f4189977b6f41607953d4a5ef76d02425eaf4a50bddd14fd10e01da59a2705db7","ssdeep":"","tlshash":"a7c012e774870870999b78267626828c382081012e16b851cb1958124c329565d9fa88","size":175,"data":"","first_seen":"2024-08-21T07:58:01.134236Z","last_seen":"2026-03-20T10:09:40.996034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/_/translate_http/_/js/k=translate_http.tr.no.pyPhSnNzAdA.O/am=AAAG/d=1/rs=AN8SPfo1bJ4mqu0TLyHQnpB8rhZDMrMKGw/m=el_conf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c4542ceb5ea6148b868b6c205cc7ae5","sha1":"d837f73db3ecbf7e4e848eb944bd1eebf94ff6b6","sha256":"a3c5991a6f4cd973c2d8d931c01ed8f6e62d22bb58f8cbe8243241503acfeb73","sha512":"68b8e646d6cdaf13d212f69f3cfb37faed9f44d9f6c62141cc757edd1fd8b5ef4d952fd2bcb556e613eb47861dc9eaeb75d44c479296fa9a7bfac6bcb6c8a95f","ssdeep":"1536:Xxzr38Y8KR3mEZeUd+S82KXbp0T4lLPKucbRrWKi7wNW/c:XpxmEF82KXCKKi7c","tlshash":"3783b8c8b6a574a59353b5b5413f000eb23f699df8084dbcb288d8e1adb4948453bf7d","size":80938,"data":"","first_seen":"2026-03-20T10:09:40.932806Z","last_seen":"2026-03-20T10:09:40.932806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/owl.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f237ddf38ea4a29181a8aaf9dbcc5f5","sha1":"95743b3bc935a634e674313a646e84e3ef239d03","sha256":"96d4d762960e6170d0cd1a7c5ebe09dc181ad7cd4559937ede1e9a47b46327fa","sha512":"97f2c35f30c5d791e05b3a8790d1bf50b470a6439176293dad49501595127890bbbb2eae1034ea3c68d99391040deac2de097d68739cb572f5536d0172d540bd","ssdeep":"1536:8cXxFH5ld7oIOdwyBhKT/dUP3Y0HXJsVa2fRjcN:8cXJld7oIOdwy2doo0HZsVa2fRjcN","tlshash":"b68392e1b32e222f4ab6336456bea345f93dc525d10227ad78e8a5dc3491448436effc","size":82221,"data":"","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-07-29T03:06:32.072454Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-15T14:19:08.053005Z","times_seen":93575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95366593c791b5c5558ec50afaa02bcb","sha1":"ef01164f58d4c91e66c5fff1afd091c15cecb641","sha256":"008051e87b2e57b3aeedb0409671f948bc98964095c283f5f2ff9a32d9142e41","sha512":"2e2a8cbe335282c620f066e9ab211bfd9e6c09527ccdb66d785570c898ff739a6c45ed1f19b0ee2807a3349c43a0dd6323283d3e62cb75f28d4c6cca54f2e50e","ssdeep":"","tlshash":"e3d01247b130100e0496b119e3c619cc7674c50a053e4d25765290cb7db3fac274d1a8","size":206,"data":"","first_seen":"2026-03-20T10:09:40.997065Z","last_seen":"2026-03-20T10:09:40.997065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6602862aa0c6737bd124ca39/1hpstoajr","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fafa09c22ac6c6b3aeaaba2ae81f434","sha1":"fb658dd52e6cd62e5974bef329b843acf15f5a05","sha256":"d145aad3f58261b126697ce654e804b9bf7de3da6079ef165061abe647eed31e","sha512":"e487945fa8942d7f66a1be73a6a4f17917e28910196085e35767146634689c79f680ddaf4b73d774a5448f241eafe754e555eff49fe24356290840ec514525fb","ssdeep":"","tlshash":"a041ddee5b4f1c52b22410d90dbefa0ef47620e745da5892970c085272657ad2f8de38","size":2123,"data":"","first_seen":"2026-03-20T10:09:40.959948Z","last_seen":"2026-03-20T10:09:40.959948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f2ebafa327edac27b63e57095449656","sha1":"4fd449a135daf278e5c83c08c4b97dd776202a49","sha256":"88c1d3fa46defe9436ff6885b84b9b4abff55c42a571203899ea4712142325e1","sha512":"5d516a9b89d6fb00a1b73e2761d26cd0846b65d7278653ae95a7875e92464ef441b33245f3b6ba371933bbb657e3b5f94847ade087d632b5be0f5e798511a528","ssdeep":"","tlshash":"71e08caf74eb227d5222606e7e6a10192716d413b31dc9a9b25d81667fe02284ee8b4c","size":353,"data":"","first_seen":"2024-08-21T07:58:01.137908Z","last_seen":"2026-03-20T10:09:40.998161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-15T14:14:37.299242Z","times_seen":37742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2106982b428f96d2614826ad3ecfbe0","sha1":"857fc53e2ee5f57e23b34dd86a15c674c5aec66f","sha256":"dce2ad932dc4ce6cb3520993b238ef2697adb0aab5dbbf9891f14bd86d52981d","sha512":"03a72f3d25b5963458f73920a9f38853af1033cceee42ddc924bee4643561bc706f66ccd8b63fbd5d182a4b673a6b5c9ee8c916a6b13e4d51a73e54300a1fce1","ssdeep":"","tlshash":"23e0a355730da0b121e3382d003b2c8d312e78e3541458a5f4b4c5741d3c85c1232d1b","size":415,"data":"","first_seen":"2023-06-29T14:00:35Z","last_seen":"2026-04-22T09:03:12.762339Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.pyPhSnNzAdA.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfo6q3C_cfcp1FtWbkKxoVHkhTLtCg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b76f3ca9844732a8ca9abd3ba6b63af7","sha1":"84d07c3da98f4402328f9019015556ecfb1de124","sha256":"ab9773a71898a57e70cb5c256356e7bfe66d4c7507c3109bf7c3a31c08b03429","sha512":"dfb4110689b26b55914b5452acd375174c372e4a836713d1ab9af92af63265eb845fab1c08ccd130de0f66dbad6289065ae47690509b805d1f6586deea9fb75e","ssdeep":"3072:9lnALczNJZMKaYKXdIFPeX3GnECZpCDVBIJLL4bh+NqdRuBHKaO+D/EkeXN1Dadi:X/xMPRImgJIaOlDCa2s","tlshash":"3394d8d9b2a274629266fca0a47f00c7b53dac57a4884c6cb248dcd65df090952b3f7f","size":417032,"data":"","first_seen":"2026-03-19T19:27:39.393039Z","last_seen":"2026-03-23T19:34:06.763973Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#221","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-15T14:37:07.299959Z","times_seen":37122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/hover.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/hover.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8101\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":132601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8caf7b60470c36c1f1f4038eed4af6ef","sha1":"52bbfe22f9eb161156eb0c71362d75968153a903","sha256":"2ccbbea25b06596a234bcb2ff5b95b8a72fe806ec160e8390776fe71f5cbec30","sha512":"1c26e936469ccada70f028bc45d1128e531131928cab5bc37172a1b76c8e951abfbd29bebf2a1d485032c56828a667e3f5dd38ab7d51cbd568002b13388a1d88","ssdeep":"1536:9IsIFDtYo125oP2NYEY2YMY1HZl/vxMR5tj1NgoqY49wuflkrszIiIQE:5o125oP2Ys","tlshash":"85d3d0b96841120416378e09c7ce5f7deb3ce4736a221eedb787590b8b52e5c12c6e27","first_seen":"2023-04-05T08:09:08Z","last_seen":"2026-08-14T15:27:21.354581Z","times_seen":735,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.loyalluisexpress.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 186\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":186,"data":"{\"p\":\"6602862aa0c6737bd124ca39\",\"w\":\"1hpstoajr\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://www.loyalluisexpress.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"CYSPgIrYoyo52gyeGwFbA\"}"}},"response":{"raw":"HTTP/3 400 Bad Request\r\nx-served-by: visitor-application-preemptive-7732\r\naccess-control-allow-origin: https://www.loyalluisexpress.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-length: 64\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb7ade6335cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a6b300f3a66ac0e1d6a5ed200bb03562","sha1":"627bf1ef3b132774dce16bee05921a603316261c","sha256":"c83dfb92ba52b1be7ab6226fbf540d4797a3994436912f1270f25da43971ef11","sha512":"b6d0c008cc5cd3563a00d23500d502b4faa77260add6688bb6b02a1913d074fbe18a143b7605b61a4ed987621b173c044b693856688866f199e509408b4b1cb5","ssdeep":"","tlshash":"93a0022553dc3ddf5bc34401ec28f5101799e0c178982c234a0c7e96624366ec911519","first_seen":"2023-04-07T01:42:43Z","last_seen":"2026-08-15T03:59:25.271888Z","times_seen":726,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/de.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/de.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 391\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"dcd25169b6a324680ce95b55d0c944ec","sha1":"e1c3be22e1a0bb8a267ee3764aab1292b515cdad","sha256":"3f8384a63bb1864db0f883baf0159573ffe7d7e2107ad736423869260cc51262","sha512":"217be6672d66fe18090540ba39b1a1e2a9743229d37aef3acd82336691776a6df1e5ee88923bec47fa3e624c25b91879203243461553aa5fea79ff138194c5f4","ssdeep":"","tlshash":"f7e0f1c5ddf41e2fc03d1192740b2714c2af654c07c7a90429257cbd6ec3ec407d4925","first_seen":"2023-04-17T05:57:12Z","last_seen":"2026-08-13T04:37:05.489215Z","times_seen":229,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/nl.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/nl.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 367\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"49d1309b370eaa5dd12f07b0dad4b156","sha1":"8bcdefba61f764fd9301086b97d117a0950353cf","sha256":"fe9e583f1d1dcca70a3268761d979c1117e249448d86f4f3a68cfd892d347770","sha512":"3a50ce78b86a08f20f84e94ea1d66becbc4934d612b4b3c7c92839356a5b04880e309d26fdf33fe8a7f6321a14397c776b692f4b930ad25dd4c3225eaebbe528","ssdeep":"","tlshash":"b6e061d601401c3a81acdea281aa4a5445a7961c5b5f69105e6e658d28822572744465","first_seen":"2023-07-07T10:22:38Z","last_seen":"2026-07-20T22:15:04.171472Z","times_seen":80,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/revolution-slider.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/revolution-slider.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8404\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1a9d340153129ea6db1120d9a07204f8","sha1":"5e0e1cd5751e31aa7ee4cc032167b1af13320248","sha256":"a684d11a31ee3c92310a8ed7a211bcbb721aa340302cc57fff454d2cdc791eb4","sha512":"08f7119d8fba674c00a38a8665cfae6cf46a18973a6e6885bfef80e736acf9fb7f04eda8b186be231f34cc28fc5074da0c964e5dbadd7413c99e2f90dc289041","ssdeep":"1536:nG4+BGT4uUuyHGYyufEPfpUkmzoEcRejoG788BwT4uUg4eN+Y:0fGfZj","tlshash":"e4736471e1556029f527c93a72d0b9f9203dc203ee530b69f257b9b8ca9b1cb3623748","first_seen":"2026-03-20T10:09:40.904769Z","last_seen":"2026-06-11T22:55:23.505278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/logo-footer.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/logo-footer.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 26 Mar 2024 07:34:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10564\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 82, 8-bit/color RGBA, non-interlaced","md5":"b3618973bbb27bf52c273265855ded61","sha1":"141d40540712227d4e87ea760ffe564511d85489","sha256":"4cdcca1f6b831aa9b31cafe5cbb528102c509c51311aff219b8777affb820ea4","sha512":"dad0b486604a8b524875a37546558b79ac1f0ad20020ac23ea90e4487795b0d531cae9958fa43ebfdaede80c37ce48ca6ad8d948840d6379c6a6c40547d3570e","ssdeep":"192:Udjd/LYWk5vpa4dq2sjI243zSTFAe+rscX5947i+pcNw5qChrL/sq:Udjd/Y5v3rs0ITFA93Jm7dAqqCh/sq","tlshash":"5022be258a523800cf65e68c0db550175123828c92fea51bffef01b5f8b9d9ce8cb1d2","first_seen":"2026-03-20T10:09:40.907346Z","last_seen":"2026-03-20T10:09:40.907346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/switcher.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/switcher.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 207\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced","md5":"d6ae4f341752017ab0e603e3bb9260b7","sha1":"c84c11d3bc69c7e14b2f75e7dea6e0ac93dee1e2","sha256":"8c2ad9254589a597b65dae284a6da49dbfe1e3c8e628b03b80883d980fb6435e","sha512":"136f04b44fc3194fb2dda6dde51ab0b83ce15bcd129ead332053114675423d9e21e02769969d7037bc282f59ae11e673b61e2b3977253c54d8c5270fa72228fa","ssdeep":"","tlshash":"aad022c2b3841c68db7b0423cbb80022b87e1a5c65012b1c9484c4e213caa8821f43a5","first_seen":"2023-05-03T05:26:52Z","last_seen":"2026-08-14T02:12:56.890394Z","times_seen":244,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/ru.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/ru.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 350\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"53bee57c6f03a66347cf7e5614a00c6a","sha1":"b20fbf04f244925bd0041e1e445f05c43800c7c1","sha256":"bc6c51350976a6cbe7cc8d0d08bd8b4c264070dad00cb61c0d28355ca28fae9b","sha512":"77023607e4e19e920bf877c7cab03002d149a8bb1092c525437ae3b70dd8d4774ca9d8a4401a7779ab8307ddc6f9be2e65720b2a764cdeea1be4db25be6330de","ssdeep":"","tlshash":"b0e0c0d46164357f8e6d683b009b4611486b099986318828c51f886e1c56a0d54e6982","first_seen":"2023-04-17T05:57:12Z","last_seen":"2026-08-14T14:00:29.037029Z","times_seen":168,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/bootstrap.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9206\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35951,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-15T13:40:17.977939Z","times_seen":10721,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/wow.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/wow.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2037\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6300,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269), with CRLF line terminators","md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-15T12:05:59.494123Z","times_seen":5566,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/fonts/flaticon.woff","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /fonts/flaticon.woff HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/woff\r\nlast-modified: Sun, 26 Jan 2020 12:13:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43576\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43576,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 43576, version 0.0","md5":"72f2926c74046a1b8c29e060a53bd860","sha1":"b68bae170ba876d167b2614497b26ab0ffd8f6d7","sha256":"2a5de9c2b145030a8d70a9dc5426655204155882d4999d9e389bf8c5a8278e1b","sha512":"e1986000d108aadfcdd27b0effe7f51bb889aa2ff0d2433effd543587884c7ad9e37b52e387c3ca947e39e14a1be0567a2e71bbff86df64e7cc1b3ca1e91fbe9","ssdeep":"768:oWpC7Z/QPpxEdcMmJirGsoDiPnpr4vtMUDbQPLkkNgnudHPuFIuMsa1PjxnA5hKK:oSC2ImgGsoGf19UDiLiCmVEbxnA5hKK","tlshash":"db130110d89b75099889d0713be4674784bab6ec48e9e1f479807b3d1f0fb0b6e69871","first_seen":"2023-05-30T05:18:38Z","last_seen":"2026-06-11T22:55:23.570581Z","times_seen":5,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.loyalluisexpress.com/\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb79ee5135cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:19.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.loyalluisexpress.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1185\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1185,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20260318\",null,null,[4,0]]],1871,[[1774001349951,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"17074FCD-0711-4B16-A234-F7FFBCBD0701\\\",[\\\"https://www.loyalluisexpress.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,23000000],[null,23000000],[null,116000000],[null,116000000],[null,304000000],[null,209000000],null,[null,405000000],[null,406000000],10893,10491,59638]],[\\\"translate:page_load_to_initialized\\\",[null,406000000],[1,564000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1774001359953]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.loyalluisexpress.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 20 Mar 2026 10:09:20 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-15T14:43:47.423762Z","times_seen":587984,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/fonts/fontawesome-webfont.woff2","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/font-awesome.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 26 Jan 2020 12:13:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56780\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-08-15T15:19:04.809779Z","times_seen":30785,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/clients/1.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/clients/1.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23069\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 120, 8-bit/color RGBA, non-interlaced","md5":"6adc0b80cf858af30d94ab891ba3c390","sha1":"bb036a5448ec3a3e8c040e8158c8ab31139bf981","sha256":"845a49daabdde77940c17f3d12f5aeac52dab267d858b24deb633a6b6e9b4368","sha512":"d4a33c4e40eda8098b38004b2c3ec474e393973a71cdeb8dfa958506f797e3df1d92a1ded76b24b32246cbf06705a826ce9d4e97908a73df387dd80af4a96d38","ssdeep":"192:6S8kUqdTCHJU2Gw75WTu71A9guYjMT1CYhhMl14Czrr:1PUiTCH+i75W9DYjg1fMltf","tlshash":"32a24a70fcf2b96d4558a3b729c014466d7317c3e682ac8bb6cd8d1a5f417dc8cab252","first_seen":"2024-08-20T08:49:27.572692Z","last_seen":"2026-06-11T22:55:23.421663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/zh-CN.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/zh-CN.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 469\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"3f8fb102f474a30de7e80a1bf2580dba","sha1":"2e77344b348d257bf9bed7b9fb8977df7f7039d4","sha256":"45520fa94a2021a533d4e147635bb1f03017ae79fb650d650ad20ba29c905e66","sha512":"5a9c4a6f2d26cba053a5b84dc7cc56ed4777cf9d637f8ceddd8c012ea5c2594e05957592c7e65295417beb9d828ef4189760bf7747c1709ade56f5fc1dacafef","ssdeep":"","tlshash":"e9f0bbd502959c3fc50f019307660d420073126c173e3d0f4a1f7cc17d555af1074653","first_seen":"2023-05-15T17:43:31Z","last_seen":"2026-08-14T14:00:28.995492Z","times_seen":84,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/pt.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/pt.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 591\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7e0c7e1fae4eee4db89b240f1782a87b","sha1":"4be7d407d53eed7d17bb27a28cac78cfcddaedd7","sha256":"095a1cd83eadd88d14c4c2ea3fa2e3deb83bd1bad748016a408f96242e4ac527","sha512":"f23b1d151f4a7d512a16e8d731174ad73316dd6c296e837d8b3ccedbe40d1624533872495663c5183579315903cb80f75016c77bf3bab63517e94d8c70a06afb","ssdeep":"","tlshash":"2cf041ca12e23c7dd9d917e20a23c2582ca2143e27b600a4340ecc3d15c3e8558b8bc6","first_seen":"2023-05-19T09:17:25Z","last_seen":"2026-08-14T02:12:57.004174Z","times_seen":108,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb75cbfb76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/css-1.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/css-1.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 234\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1041,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4b382f6fd6d0d779ca0b51d4acc52277","sha1":"675543fbdf57921ba81405a45842265e1478cd0a","sha256":"50eaf3a2cbb1e28a5d499a34dd6be16d117e35232997d72f93a30137afb72239","sha512":"6dd9ea7a880e301eeb9da039b4b32504aa4cbbd5b3d14b5f55e4f77998e0c964afa7a0a76044f8b549474e6f8e84fbcd7464816b6ffc784ce971ed83f40608c3","ssdeep":"","tlshash":"551175100a969725ee622dfd679f3e2ded2c1915200fc92f1671ac787d96a3e03c0b1e","first_seen":"2025-08-08T07:32:50.40693Z","last_seen":"2026-06-11T22:55:23.429529Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/responsive.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1445\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8539,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"44bd803ab0db3ce16e6269b03d8240a4","sha1":"f5059e816a97e879962d5cc0df08e0f341714e20","sha256":"748424f75ef7bd36a32f071fe48febd04d43ab33286441ef0080cd217dbf8e10","sha512":"960ebe3bd7d5fb460b1775ddc7ea9e78918adf58765f674cae077761baf238378bda2bd5cd9314e673f4fe620112241a6f6db0f7a59c3edeb57dbc6be6b902fa","ssdeep":"96:9gL+uHSsVZfkQor9ZnzI8947W0JFfmHVYoKoL405pSZSFztXXg01HfkjzTCRxKs:9FuHSsgnzH4KYFfm1Vk0rpgWxv","tlshash":"ad02f16bb49f70081352421bb7fb2fb4adb8d015d71616e9e8b3d320c6925aa07d1dec","first_seen":"2023-08-27T21:57:54Z","last_seen":"2026-06-11T22:55:23.579392Z","times_seen":4,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/id.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/id.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 333\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6918359d3d5ba6d08777957ff0aa639f","sha1":"a0a7bdea180b127aaa128dab01e1e1b7e16923d7","sha256":"03f09127ca417489cbe158429faaf62753ee2c62f7744e802e1256a46a600828","sha512":"2defe789de5bea7e4a901663cfd89f54118a2477c08cb590fa0cc09c05346bf81bfd9a77a7fca6cb4aa77053c6ea53d9a56d703fc1397d2dddf3bdd1f2adb064","ssdeep":"","tlshash":"d6e02dcb70213c3a89ac356b092b0801e0839a2c10f204032a6d3aaa4b85cc500ece03","first_seen":"2023-05-09T02:07:09Z","last_seen":"2026-08-13T12:00:32.408552Z","times_seen":64,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80938,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"8c4542ceb5ea6148b868b6c205cc7ae5","sha1":"d837f73db3ecbf7e4e848eb944bd1eebf94ff6b6","sha256":"a3c5991a6f4cd973c2d8d931c01ed8f6e62d22bb58f8cbe8243241503acfeb73","sha512":"68b8e646d6cdaf13d212f69f3cfb37faed9f44d9f6c62141cc757edd1fd8b5ef4d952fd2bcb556e613eb47861dc9eaeb75d44c479296fa9a7bfac6bcb6c8a95f","ssdeep":"1536:Xxzr38Y8KR3mEZeUd+S82KXbp0T4lLPKucbRrWKi7wNW/c:XpxmEF82KXCKKi7c","tlshash":"3783b8c8b6a574a59353b5b5413f000eb23f699df8084dbcb288d8e1adb4948453bf7d","first_seen":"2026-03-20T10:09:40.932806Z","last_seen":"2026-03-20T10:09:40.932806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":101,"dns":25,"connect":10,"send":0,"wait":24,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/font-awesome.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/font-awesome.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5383\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28678,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (308)","md5":"bedf6c7a725a2a453d35f75c2022946f","sha1":"62041fa6ecd82f5ec698f1af09a34a608aeb0088","sha256":"a90cd37afa6dd60f9bea43e9cea9b138d61b4e0ee71210a9b249dec841aa8581","sha512":"b8a643307394edf727a79b50d567263f121c6d32f669c9944f182a3cd7719e5767f214c75afa2409378d536a3bfef82f9ccb7f730133787818d2a5dd75f00449","ssdeep":"384:w5f0j++ArEPSIDqvnIDyYTnBrbkPvVY5JY+n:i0j++A4PSIDqvnI+YTBrQPvVwJjn","tlshash":"01d23eece6bf18904391e0d12386a270bb3db73d9c4a6d9cd2a2799cb5c1255c2c63dd","first_seen":"2025-02-21T09:40:56.933851Z","last_seen":"2026-06-11T22:55:23.522742Z","times_seen":8,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/fonts/revicons90c6.woff","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /fonts/revicons90c6.woff HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/revolution-slider.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/woff\r\nlast-modified: Sun, 26 Jan 2020 12:13:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7536\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7536,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-08-15T14:59:58.433913Z","times_seen":32408,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/bootstrap.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/bootstrap.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18678\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":128145,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (559)","md5":"d5ad9cc61b9db1bd16d275cf11bf43ce","sha1":"64dc330080c32f048420e2d9b4470bd645bd228f","sha256":"789d546795697c83c4dd72127344f88313a9d1b1e22e3acbf98fda8fb0713cf6","sha512":"51a78302594d193f77e466ec9530998c2a641117f6c0814b5437eb2d0908716ef8cc727550b27e31a9a129994279e99f468d96612ac9ce11a0cccf88a16be3af","ssdeep":"768:VnSG+jA01rzWHCxU7rwqtfs2XkcztqHQVS6FmmX6iIIza/eEsgNX26fPsa9OnyCW:VgA0hzokcZqHIBx69VW6H39OT5U","tlshash":"f9c3c8a4f63039993323c1483980edd677296112e56ecdb6f56b38dcc3c86da62a3f45","first_seen":"2025-08-08T07:32:50.410664Z","last_seen":"2026-06-11T22:55:23.58368Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/clients/3.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/clients/3.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21881\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 120, 8-bit gray+alpha, non-interlaced","md5":"4a26ea7f78d20806bb0f6eaad941ef17","sha1":"846e2196db9f0a0df48ed4cd53e4b24173172c74","sha256":"064ded6f2012cfd5977e8736dded6d465b527289c8fc777d16820f9c45478890","sha512":"c5a82698a1824ac92e454a78bb6f1945aa6d023f4128426847ab1608bce8e20d9423a636d350c62b7696a46a54bcf10576768f8a4752f62a9d1359e44905f8a9","ssdeep":"384:7VGrUhulU7Dp2mW0i7sKSY9MroiEKxb7b:x0UCv0iQKbapt7b","tlshash":"afa21a24fcf1f699940d72b13ad614025c7306c3db825c4a7dcd8e1a2f54bad8c8faa5","first_seen":"2024-08-20T08:49:27.574921Z","last_seen":"2026-06-11T22:55:23.482218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/favicon.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3575\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4ad29694cdcba344eb54177f62cecab0","sha1":"470d494a3f2ad61064942662622b514d785c18c5","sha256":"7e657d70cfbf2cbd6a27bd20099c598b156594d7b859870087c535b49df5adbf","sha512":"5b4ad75596d16c38ff215b11b5df52c20fd45799c75954ae468cba38874b517cc908d15caf419c2b2bae5329ef3b41c5cf45f7e1f8408a8279526af94fb58b68","ssdeep":"","tlshash":"c3717daf9930a00eadce75510ddd4083a7bd322cea263b34d4c118ff4885f1b2b55574","first_seen":"2026-03-20T10:09:40.940914Z","last_seen":"2026-03-20T10:09:40.940914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31021\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 17:53:57 GMT\r\nexpires: Fri, 19 Mar 2027 17:53:57 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 58511\r\nlast-modified: Fri, 08 May 2020 07:05:03 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-15T14:44:07.552332Z","times_seen":267001,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":111,"dns":0,"connect":7,"send":0,"wait":10,"receive":8,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/it.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/it.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 440\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7afb68f6f985ff9da11d01fbaa61ee8d","sha1":"b87a5e7620392c23a02507b29655f0aa43f8a8c0","sha256":"19f3b464efac9cbac3bc1224a39cd06bad1fe361de9c1794ef50fdaed825c67f","sha512":"f77f03cadd5b98c63259df75506f66241341412ac960c043c0cfa8c0a1820345385b876fe627f5576451efd6e1b22f4705a675860aebb0449c61b2e1e3adc804","ssdeep":"","tlshash":"4cf02be4370ed93f899c0a1505f60116897305390fde5c4cf82f6d9d2d9135340e5578","first_seen":"2023-04-19T18:18:43Z","last_seen":"2026-08-15T14:19:08.079142Z","times_seen":204,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/translate.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/translate.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3640\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8680,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8525), with CRLF line terminators","md5":"5f666560352f0cf89990383b69603b98","sha1":"731c76d4e14015be1eb57125c28e514aec07d1c6","sha256":"ab8a43d0e459d4608024c96ca3a6b9657850873ac800dad2d389dc5cfce0a8c9","sha512":"79e8571fc991a86283a1b9285a8cc779d4736902f954263c73680bd59f3f43e3cf24f55f99595fb78442fc5e8f1141cde2f96e02526b8db81313d6db02712b67","ssdeep":"192:ea8F3nG906aSJJJkSeIUHVxLDDhWwpy8b7z:F8F3G906akrwHV5Hh1pz","tlshash":"ce02c8c97242f21b979721b6507f460ff235a86ab8584d40e059d9f8b9708f8053bf2e","first_seen":"2023-08-27T21:57:54Z","last_seen":"2026-03-20T10:09:40.943147Z","times_seen":3,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/resource/featured-image-4.jpg","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/resource/featured-image-4.jpg HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Jan 2020 12:13:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72144\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72144,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 471x377, components 3","md5":"03ebd6e5d1424465b50817e2e953c399","sha1":"d7f74f35e5bf787f84bd22ec998ebdbc5d895b68","sha256":"5f8790bcb21668ef9c8653af8c7f8e81a74ce51aaab9e3bd5b4d1c603a5a1a6c","sha512":"2912959c4762ab4cef22e2f6aef41ccc2bd99a73ae6b7f687227e74c019da15fdbecfbd05eb0b1f7dc14189b65c0ef8dc002fc863d1e616cfee375c2628f0b93","ssdeep":"1536:k+i+Wa+mSI07D1QfToIElGbYcZL1QOzzzoWpiBqyEF0BeIw4gmd:k+UH/QM3UkcZLukzogG/Hd","tlshash":"e663023d4d24bc0f78ee49a92ca9906d4f4fb165b9bbbe5470b2f80929c368420056b7","first_seen":"2024-08-20T08:49:27.578559Z","last_seen":"2026-06-11T22:55:23.582254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/clients/5.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/clients/5.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20830\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 120, 8-bit/color RGBA, non-interlaced","md5":"003a30ba331aee5733a7069806319bab","sha1":"e94cfdf276f3c2ec07394f005721ad2a696cfabc","sha256":"2b89a8aaedcd015619b84c5eeded23f3cbca0a6b12c58e0c4c7b9fb4b3c5b445","sha512":"ccc020eedc72953de9bb7cfcab71b7419764f9b531d49f3a426cf26b0e0bcfc04dc5365c0e0d2c536b1ce5ce2083e92372774504d8618a39bfbb5a6fa6755d21","ssdeep":"96:6SUkY9WmcF0BCBrdpCnrCNGZ9IGfNX7sc58GFf9fgZ5HkUB2Co181VEqFDjnTamO:6SUkUm0s5SrCCHfBYSAESnnZO","tlshash":"e9922918fdb0b9618959a3b72dc52442ada34bc3eac09c4076ce092a1f91bdd4c8f797","first_seen":"2024-08-20T08:49:27.581657Z","last_seen":"2026-06-11T22:55:23.449223Z","times_seen":4,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/arrow_down.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/arrow_down.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 208\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced","md5":"20a650477130c7c2c62c5647131f545b","sha1":"4615101fcc5df1fab3e7dd516d058e1052a8fcb2","sha256":"068f35dd132804c7effcbca65f9398d34351339ed2fa7b20ef5e9a6221e76516","sha512":"9b5f312c3ce5e504de7b2b1ee4bdf21f8a27e04329b2793e12f685d70e53d02cbb5e3094f83950573e814303900b77f099331dd4106fb534773d6d60736ca003","ssdeep":"","tlshash":"fcd022c6fbc00f1dc9924a32d6788410a87a9bc4812467680881c0832185ed880aaae3","first_seen":"2023-04-08T17:48:50Z","last_seen":"2026-08-14T02:12:56.778899Z","times_seen":265,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/s/opensans/v15/mem5YaGs126MiZpBA-UNirkOUuhs.ttf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/s/opensans/v15/mem5YaGs126MiZpBA-UNirkOUuhs.ttf HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18133\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27496,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2011, Google Corporation.Open Sans SemiBoldRegular1.10;1ASC;OpenSans-","md5":"c062d7d188586db3c4cf61e1ae43b331","sha1":"75cdc1addd87d3971f48a9e2e76572ba09aeca11","sha256":"74461248f0a3edd43acbe67fbd98bb8bc6f26bb6b2e8b948c4757724717bde5c","sha512":"6952deb9ef3144b7e7fd160fe4e7a5f296d873f539dd2d35d348f49ef9b1461a313417b7fb8671a70effb0434cc3af466dd05304eb9a7cd8b8cb80a07afe531a","ssdeep":"384:VTkXmC/88gdulfhHEeyQo1+sPzGBv22QeX3bENawy9annytQRsilV2HMIzmSwyvh:VTmfxlfyQo1bie7wSfRksIzmqbiA","tlshash":"96c23906e362ff3aea1374bdc4924f9006977414674fc29f3d8b43aabdc515c8246a1b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T05:00:17.871561Z","times_seen":44,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/animate.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4144\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ccd176bf48f680412f29f30f70bdbf63","sha1":"fae40b3a206bed0d04b28864a10a5e4cfa37923c","sha256":"7bbf19c2ce969e8eb6e42d46efc950062f559d964e2bbdabdac5ec835c3f0c27","sha512":"e5019e203c1538b441f90e57d59dcccc5dc95c401ff303da2bf6c5e4e795d1836b83ef11d4e51ed218f39c1d657f90b7597632402e05c68037a0c3a20643521a","ssdeep":"384:CD1A1ArsYyY21f1NYtYZ2x2NvPvXXXYzYYVDV5YMYMx16bBHKpk5pRMt1b:I1A1vYyY21f1NYtY7XXYzYYVDV5YMYs","tlshash":"d673fb5e1d40118447724b29d7de8f68eb3d917318222eee72c2588b8fa6fa853cdd47","first_seen":"2023-05-09T19:45:32Z","last_seen":"2026-08-01T15:50:37.459434Z","times_seen":43,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/owl.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/owl.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1241\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"583fae379e864190cefc34cc23602e0e","sha1":"1a8ea7db159a271a6e58482d31e10cc15debb30f","sha256":"be326b84d867703bc9034d05d24945e1fb72c26b488b38b7f9dea26035126622","sha512":"b40573862f486ea38f0c3ef9842a6495ac81528f811ba694f8ee963ec2842da43f5d874f37e867d521f163ec6062dc7279d08a9d797ca8760299f59013f9048c","ssdeep":"48:2mePoJIfFfvhfOp64j1I7Z3hQJkCJxneVnYMCrXBVQ8eQcgCZ+FPyvfathPFgWEm:2VhwmIexMx+q+ATjFG1oVtcIB4uaOzRr","tlshash":"b1c124ec1221114d603787b41b9d9616be3d90a2ee02058cb9ef671283efe5c901ff6b","first_seen":"2023-04-08T16:15:46Z","last_seen":"2026-07-12T16:25:47.191061Z","times_seen":61,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T10:09:08.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 10491\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]}],"data":{"size":59638,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (728), with CRLF, LF line terminators","md5":"29b30e300866f014752decba7f476fbb","sha1":"a4f0552b8b959a1414e6ec1141fc45381e53d62f","sha256":"6ef144bb46916d903a17cf31d502c32f8fad5a92895d2b88274e971112aeeaa1","sha512":"d80f570543a7e6e4f9d104ae456eec6fe20c464b09aeb1382f5c503cc3865f3811adc707a5287a840dac097b14fd629047b724a43daa79ce3e48118a84ae5d38","ssdeep":"768:E/fWOgQ4QsPCHDeSPdv8lUxsIULgPhxsVi3ubVqlucUsnFDd:E/+WDDeSPdv8WsIxsVi3ubVqlVUsnFDd","tlshash":"a6434d2124e4503601e712e65a751e1deef2d307e61a5980f3ad4ffaafe2e4ddc1321a","first_seen":"2026-03-20T10:09:40.948891Z","last_seen":"2026-03-20T10:09:40.948891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":280,"dns":93,"connect":88,"send":0,"wait":101,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/es.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/es.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 493\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e60a13aadbb4635df6189c6b283c62ae","sha1":"701c17adf80289bd820ad8abaa89ec76bb4ba0a0","sha256":"efbf0cf75d4b00bd5a0891a4de84ee10bd4dc6bdc7e2d33841d37fdf51263f8c","sha512":"cbabee71cde892ae1cbd6fdd0c005e0aa2471d4608dfcad02186eb1f375a955b4fcbe22e0f8256e09fd51fabed956f84a284abe963f8bd99eab03bf2dcc6650d","ssdeep":"","tlshash":"1ef054c52b20af7de8bf50931826075dceb339d78ad222ec0523da5f45238f3d09a650","first_seen":"2023-04-17T05:57:12Z","last_seen":"2026-08-04T18:56:24.541306Z","times_seen":275,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/ja.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/ja.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 471\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"1430ec864138165b6950fea5a42522a1","sha1":"26b8661e7eb7e354c9b8a205e78ef527bbf74025","sha256":"9115576085f87c07aa08b4c64df5c877109b38cd944207146fb8362672e249e5","sha512":"fe8520a5bc85fe79779f78f9e833d0ab9099f8b37fabbe3d9fa5b7d2cd8196974f06866951d507a1ad22680a51b44bfcee1032d7bb981ffac7888021c06601ed","ssdeep":"","tlshash":"d9f054c754c0383dc63e07f541463a0cece735be1607960c15daed39059343e0854060","first_seen":"2023-05-19T09:17:25Z","last_seen":"2026-08-14T14:00:29.00169Z","times_seen":110,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/main-slider/3.jpg","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/main-slider/3.jpg HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Jan 2020 12:13:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 231439\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":231439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=ZACH SHARE], baseline, precision 8, 1200x675, components 3","md5":"7ecf69b707f689119d55e1bc9fb362ce","sha1":"7982a6143cb26a6a8c6e2dac44ab86b0d484009a","sha256":"3e86460a0212c353b0c19082388b100b077412df80903eafe3912e2d8ee13de4","sha512":"d5eff0f78dcc4fba78ba6eafea7978089c60e0ae6d54891268acd82c37c442261342994d05a2bc7c0d7d99591165d504eeed80e242b55e92e3fcfa5b72a4339e","ssdeep":"6144:oROqV79ZP9bHTOwOF7aPYCfmfLbFAF+pA6vyVTt4p:oRb7FbaNFWDULa4pA66Va","tlshash":"8b3423e463948055f78cb1af6a6b030c5b59e7efca7b8033575c428c59abb849b24dcc","first_seen":"2024-08-20T08:49:27.583955Z","last_seen":"2026-06-11T22:55:23.578008Z","times_seen":3,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/jquery.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/jquery.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32365\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95962,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038), with CRLF line terminators","md5":"13c0a5055cca7b2463b2f73701960b9e","sha1":"e6082a7b52db82604ac446d2e6a32cb5af263781","sha256":"20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104","sha512":"2fa08436b5f748776d265944595a59581c6b06eb6eb239626de3338e0819b45852ead29d4997dc1f86dfbfb1b5d39dbd4dc9e44e6e38ba9f6006628710546ef9","ssdeep":"1536:zP10iSi65U/dXXeyhzeBuG+HYE0WEeLzFoNqLTW8+S5VRZIVI6xSb8Ch2ZbQnRmL:q+41VqLTW8xRrqSb8dGH77da98HrC","tlshash":"c793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:07:14Z","last_seen":"2026-08-14T13:51:01.976365Z","times_seen":4101,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/revolution.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/revolution.min.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 59954\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214813,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26113), with CRLF line terminators","md5":"92f9bf1bfbcca80e33ccea3629c0d489","sha1":"7c4dfa60f70c1c2717c16336e48bdfd0ffc18b7d","sha256":"54f29ff37ae9a29f5620e6ba606bb4ce50ce6db0ce65525cc42416d33f88984c","sha512":"5af4021ce137e2521de3ca59a54a5e14685b900494b0a12b475a9b58e43aedf37e1fd391a9b3a333248a37839c06d74b8bc07c9f0d9d2296c8ff8050d97aff3c","ssdeep":"1536:WOtkCR62Hc4IMzY6L1PDqz5WsrUvvjWNWAxieiF/JlA0KRjmoMj3bgHQD6sPpRM0:57R6OzY9IvvaEGiRKRaXrCoUbTQEOlP1","tlshash":"54242a963610206590e72267917f060b7272fc7b9a06c96cb195c8f92f34cc927bff69","first_seen":"2023-03-07T22:18:33Z","last_seen":"2026-07-19T08:32:30.67183Z","times_seen":176,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.loyalluisexpress.com/\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-7732\r\naccess-control-allow-origin: https://www.loyalluisexpress.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9df3eb79fe5335cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T14:46:13.557246Z","times_seen":17903991,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/logo.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 26 Mar 2024 07:34:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10570\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 82, 8-bit/color RGBA, non-interlaced","md5":"87a7fdab2411160f891de9b650ae95f9","sha1":"1d37835a03f65dc5c9b3382c0327dbb303f817fd","sha256":"0b9a02f84f6b70849192878d4bf0af8a490454ad9e7c86df385a9d8a03b2d345","sha512":"1cdd47765609802bbc1b6dafe3817abc3bd1d2ca430f12f8677bc2a617b63fe9956ca0c6fbf4bb6671d39cfffa190d619128592b1220a4c34b4573069dae7806","ssdeep":"192:/2QtEfJv/dmxaFG22K9YLirsrilASvTRVZpkjDSjgBH/ciEoT2el:/TtevluKMFLmsrilAMlKegBHE5oV","tlshash":"5222b03af2b15cc014dfd0e22c7125bec1dae9c096d6b50aeea44961de368ae60443cb","first_seen":"2026-03-20T10:09:40.954655Z","last_seen":"2026-03-20T10:09:40.954655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/s/raleway/v12/1Ptug8zYS_SKggPNyC0ISg.ttf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/s/raleway/v12/1Ptug8zYS_SKggPNyC0ISg.ttf HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/css-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25116\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53356,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 8 names, Microsoft, language 0x409, Copyright (c) 2010 - 2013, Matt McInerney (matt@pixelspread.com), Pablo Impallari (impallari@gma","md5":"c8d109147435d76b46090824e1b5fced","sha1":"2e0237bfba10af8d5643ecafc0059d16af7473c1","sha256":"c9242c9e38a8f38f4a58d73b3fbeeee4737b123bfe0ec8bfc554b340e2310c52","sha512":"7261a10ab31a703626afad214646163898fc69ba3c2ae030f04e8e560ed53c5dc5ccc03db2808364a0e3fe74ed1cd484aea42ca9acfdc92e1ee588ded631e1d8","ssdeep":"768:dh/okhkADkkO0nsSn78VIKdAHGE+x/0USxzGXJLsBHIAv5JjT20yy+Ge3lgBYeF0:dhgkhZwkO0nNnv+AHGbCGXdsJxjufDN","tlshash":"5d337d82b7957301d2232d7c4ff4d2a6c76ef5115f8b834eb04a676ae5420e42687bcb","first_seen":"2023-06-19T20:42:39Z","last_seen":"2026-06-11T22:55:23.447469Z","times_seen":22,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/assets/timer.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/assets/timer.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/revolution-slider.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 125\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 10, 8-bit/color RGBA, non-interlaced","md5":"ba593bd9fc9e07110f3dc74f728b3768","sha1":"9620e53c9e0a5b5d55e15b23f556e2089e903fc1","sha256":"a15348b049a18c85702dde38f379aa78d3809af8c07adcf25236c69b03f6f746","sha512":"daa17291deacd922e08aa3ba67d1d4bbb1d0859ce0f0fb3dc9f5f330805ad4d66dee5104db61ddb63f94906a76ef8240252675791b97764c94bb6c956bfd8d97","ssdeep":"","tlshash":"89b02bc37b54dc30c1220022901c4020d422c590161102581881e11c0df170041ec20b","first_seen":"2023-05-01T16:07:42Z","last_seen":"2026-08-10T05:49:06.10557Z","times_seen":1951,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/5d/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:14.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/5d/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37634\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 15:50:38 GMT\r\nexpires: Fri, 19 Mar 2027 15:50:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Mar 2026 08:53:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 65916\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (732)","md5":"c19488061de8c326aaebfac825caca7c","sha1":"59b46fbcaf8ff6a46c5ab807b2c5d28de232069f","sha256":"dea1993cec328ebd8a1787460d132e6231d5416eb99be9f75175de3dcee81cd0","sha512":"5a3426c1fe033b0ddb55c8e02de219da15966aa3ac468aae59e4e4118f0370033930aa0e9efdfe2888fd53e4665699956f18c360344264f7d2cc50aa026d37d3","ssdeep":"3072:794/UoR1JVG45/aKYEdX738N39HxpY0ivecXBQeqd28gh1WRsEHZJxMkHr//M2Y9:794/UoRZGMSpEdwv1iveuB2d1RsE5/Mr","tlshash":"a4c3d8d5719370737f71a89444a74106b2aaa89ab05dcd2db1fcc8f3aef185601f9b38","first_seen":"2026-03-18T17:32:05.43155Z","last_seen":"2026-06-15T09:41:50.357453Z","times_seen":7683,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/64/5d/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/css.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/css.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 326\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b16a9bff81bf19c80ead6557bf43a8ad","sha1":"c55d4225b7a4d17f13f4f3cb3a2ee4a5ae5d1cf9","sha256":"77ea3c2acbeb106ca6cf58153efc77c58d65df65d58092f9e473d9a074291bc7","sha512":"4eb6abe8c60010c11fd1403870c57c36e7cf9a86924c18184407ba2cd49076ad1d7fad1cbd3f9f27c74b3614344b41b34bac70f31f14d4c7eb51075605532716","ssdeep":"","tlshash":"1e31ca15189e25399d111ddb3bcf3e38ca089926310ec59f13b5ac18de96e1d63f0bad","first_seen":"2026-03-20T10:09:40.958599Z","last_seen":"2026-03-20T10:09:40.958599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6602862aa0c6737bd124ca39/1hpstoajr","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /6602862aa0c6737bd124ca39/1hpstoajr HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9df3eb70e8e176a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"7fafa09c22ac6c6b3aeaaba2ae81f434","sha1":"fb658dd52e6cd62e5974bef329b843acf15f5a05","sha256":"d145aad3f58261b126697ce654e804b9bf7de3da6079ef165061abe647eed31e","sha512":"e487945fa8942d7f66a1be73a6a4f17917e28910196085e35767146634689c79f680ddaf4b73d774a5448f241eafe754e555eff49fe24356290840ec514525fb","ssdeep":"","tlshash":"a041ddee5b4f1c52b22410d90dbefa0ef47620e745da5892970c085272657ad2f8de38","first_seen":"2026-03-20T10:09:40.959948Z","last_seen":"2026-03-20T10:09:40.959948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":46,"dns":0,"connect":8,"send":0,"wait":141,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/s/raleway/v12/1Ptrg8zYS_SKggPNwPIsWqZPBQ.ttf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/s/raleway/v12/1Ptrg8zYS_SKggPNwPIsWqZPBQ.ttf HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/css-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25020\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53644,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 8 names, Microsoft, language 0x409, Copyright (c) 2010 - 2013, Matt McInerney (matt@pixelspread.com), Pablo Impallari (impallari@gma","md5":"8b3ba153329b143a06b0ade946cc79b0","sha1":"d4d651a113eb2761c4fe4a205f80a11bc8f4f6ab","sha256":"1be8e42d60f98f19e52e9a0054afa9bb08fd5c18521959768ff7a60914b1534f","sha512":"989d74a1e338c09f3965c4b44c8c250d0159f2d88c61f784bf6eaff29b8cc5ab7506f0082a4b3c8248cf52b066d86541e852bd6e49bc1c73f313197ad8ac57f0","ssdeep":"768:Yf7/ajFQ1fM/ti1hCmeOsEm0TdGdbnfXLZ8rQxNLz+Igl9FlaCPlgwYRFIQq2Zqx:Yf7a8Gtkh5sEmLzHz+P9Fgo/","tlshash":"3f337d5377457310d6732c7c4ea4c3a6cbaaf5301f8b834bb18a7676ea961d00587b8b","first_seen":"2023-06-19T20:42:39Z","last_seen":"2026-06-11T22:55:23.45919Z","times_seen":7,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 10:30:29 GMT\r\nexpires: Wed, 17 Mar 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 257920\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-15T14:37:07.285306Z","times_seen":57288,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 14:45:55 GMT\r\nexpires: Fri, 19 Mar 2027 14:45:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69794\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-15T14:37:07.28748Z","times_seen":79895,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":33,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb75dc1576a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/ar.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/ar.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 645\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":645,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5f7def0582f61db2e3426217d80cd67f","sha1":"0753e36ca2f5b35e6addd7d3d70efcf49badefec","sha256":"b17e4549532a7bb45989fffabe6f474cebc208f3a4fa8b7db1cd3282481fa744","sha512":"f9d004bdd8626b54f3e7b7d49ca72920933ddd49da2f7235635c31bcd44243b388ee24c71690399ab93bffb15b5e80eb0dfa8e4324596c025bc3ab989075d5a6","ssdeep":"","tlshash":"8df083a51f72e17d14bd4e86017400117cff017e01c7a1aa444c88880ceb8c310ec8c1","first_seen":"2023-05-15T17:43:31Z","last_seen":"2026-08-13T04:37:05.494754Z","times_seen":59,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/ko.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/ko.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 658\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"673d0eec416f1b717c52727ab03e9eaa","sha1":"a84b3076b19a533c12c68ca8b4bc13578e5e8396","sha256":"646c55794c944d642a7d3907973324ee44cb4a989dc3961d0031ef1496d01a0a","sha512":"ba21cef1f637243ffb7425e6516357b5248407c62f8524310c8a913653fe04400168673a628224f7721b6cf6dac5c2c714c838b2ee3c031cf86a3be03673133b","ssdeep":"","tlshash":"8e012dc4a2d582b8e5bc0053365aa980ccf75b1f614349448438994face3ee3baa563c","first_seen":"2023-05-15T17:43:31Z","last_seen":"2026-08-14T14:00:28.963658Z","times_seen":85,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/s/raleway/v12/1Ptrg8zYS_SKggPNwJYtWqZPBQ.ttf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/s/raleway/v12/1Ptrg8zYS_SKggPNwJYtWqZPBQ.ttf HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/css-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25374\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53732,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 8 names, Microsoft, language 0x409, Copyright (c) 2010 - 2013, Matt McInerney (matt@pixelspread.com), Pablo Impallari (impallari@gma","md5":"432d587957e6a956a1995ab5da76a331","sha1":"c437592fd31f84492be7b7586051cc691fbf0b67","sha256":"69b87813dc3e26df61bd73f62035f339f17671150d823debfe9a9e2a3e7d4ce7","sha512":"3eaf1698e4715961dde9ad2e00ae7fa9aa4c254b8e658a982c19c9352f716efcd7483e48dfcc4278626087d9fc1f065d033f181d34dc4770821f7dc0639e2b43","ssdeep":"768:OmxHhUo7gU9YV9k1td0RiLLSfghM5pREQdEiCIs8e9GsdlgCoY5F1I+q2Zq0Au8:OmxHWo7gRk1trLL5GpXCP8e9/x4","tlshash":"88338d43b3846304d2631d7c4eb4c2e6dafaf4112f87838fb05976a6e5960e816977cb","first_seen":"2023-06-19T20:42:39Z","last_seen":"2026-06-11T22:55:23.446458Z","times_seen":24,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9df3eb75bbca76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-15T14:19:08.011182Z","times_seen":93547,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:19.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://www.loyalluisexpress.com/\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.loyalluisexpress.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 20 Mar 2026 10:09:19 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T14:46:13.557246Z","times_seen":17903991,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/clients/4.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/clients/4.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24895\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 120, 8-bit/color RGBA, non-interlaced","md5":"813d6ea63037d4aac77593c9d2921cad","sha1":"ac2eb62660f5e87341e05e8f8037eddb8456d1ab","sha256":"4692120227b2bc42d7cf20a062fbbc54d1ad96c9375f7b80af950e6ac7915cf0","sha512":"83de4e08866972104dd3230e95985ef8fd4c0dab5dd78a9d1b46a61216e98ec8326714faf4032a0cad1365275a3115d9f7fb967b15aac2fb2ccec77c08215cc9","ssdeep":"192:6S8kUfdlCHzLuYvOdQAWgwAR18QLCgUONcmhaN/5tAeaq2ls6tCK6:1PUllCHzLTAWgJ+QUOlhGt2qTA6","tlshash":"deb25c64fdf1b6549888a2723bc618011c6307c3da41ac89b7de8d8e5f91beacc5b646","first_seen":"2024-08-20T08:49:27.579721Z","last_seen":"2026-06-11T22:55:23.588276Z","times_seen":4,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.loyalluisexpress.com\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=11\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-08-15T14:40:35.88427Z","times_seen":431987,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 22:48:44 GMT\r\nexpires: Fri, 19 Mar 2027 22:48:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 40826\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-15T14:37:07.271914Z","times_seen":74888,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb75dc1276a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/5d/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:14.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/5d/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 71755\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 15:50:38 GMT\r\nexpires: Fri, 19 Mar 2027 15:50:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Mar 2026 08:53:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 65916\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":311790,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"fc0f5fd5226231fbd359f9d68b9adffe","sha1":"8b6b41614df13e8cbc4fec08fccb1a3a2a8a4f64","sha256":"1905014257cefc1d41fd0656fd8b067407fe2e2f04df7bc4410a1d664473ff18","sha512":"c3ca3cf271d7469ed47dd65236651e33bc3f74ade3f8a61b9f246386f1e90d42cb4b07d1a0b20c29062a591f9655574847057786cff7f1792e87c3d7511bde72","ssdeep":"6144:Xi1iZ7z09pa1nIhaMvM0wQeFRqxv35Xu0ImqCABOCk8Zxu0BFVOtgEy:Xi1iZ7z0m1nIhaMvM0wQeFIxP5Xu0ImC","tlshash":"f964d67c71316b0ee973c85fc626301e90257edbfad488bdeee55146ea50989f0e0638","first_seen":"2026-03-18T17:32:05.413441Z","last_seen":"2026-06-15T09:41:50.34498Z","times_seen":7681,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/googlemaps.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/googlemaps.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11951\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59665,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"09c05e2b8cbf7273e3030487e62e93ea","sha1":"be8eb18e023896361f41d8e7f831296fb6cc69f4","sha256":"74c490c7957ca842cc4201e50864bf0ae468e398f44781099f10b702a03d6974","sha512":"cd4b94ae31ca5ab0721b7caf191c5747c872687935d4d70d928d517af91dc71bbcdc50a25ee50c6ae9c04d37701bda4cf97d338929f60c78837ca305a6d565c8","ssdeep":"384:q4sgjg5AENOJz4rdiliFFwlVHmPO61fooMW3ee91tjMR4y9heBAR69kcIVaW1Nbq:2dNPdK9vG3D2qAR6YIQf62HbBGQW7","tlshash":"9b430c461a16161694f373fcee1b454ce73ac327910982467eac97d06fb1824e1ebef8","first_seen":"2023-03-07T13:48:29Z","last_seen":"2026-07-21T08:41:42.723646Z","times_seen":42,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.pyPhSnNzAdA.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfo6q3C_cfcp1FtWbkKxoVHkhTLtCg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.pyPhSnNzAdA.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfo6q3C_cfcp1FtWbkKxoVHkhTLtCg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 120329\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 17:26:40 GMT\r\nexpires: Fri, 19 Mar 2027 17:26:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Mar 2026 21:11:06 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 60149\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":417032,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"b76f3ca9844732a8ca9abd3ba6b63af7","sha1":"84d07c3da98f4402328f9019015556ecfb1de124","sha256":"ab9773a71898a57e70cb5c256356e7bfe66d4c7507c3109bf7c3a31c08b03429","sha512":"dfb4110689b26b55914b5452acd375174c372e4a836713d1ab9af92af63265eb845fab1c08ccd130de0f66dbad6289065ae47690509b805d1f6586deea9fb75e","ssdeep":"3072:9lnALczNJZMKaYKXdIFPeX3GnECZpCDVBIJLL4bh+NqdRuBHKaO+D/EkeXN1Dadi:X/xMPRImgJIaOlDCa2s","tlshash":"3394d8d9b2a274629266fca0a47f00c7b53dac57a4884c6cb248dcd65df090952b3f7f","first_seen":"2026-03-19T19:27:39.393039Z","last_seen":"2026-03-23T19:34:06.763973Z","times_seen":453,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.loyalluisexpress.com/\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb79ee5235cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-15T14:19:07.997694Z","times_seen":29372,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/script.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2312\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8041,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4c207fac44783b888852d9cb6f614398","sha1":"2471bfc1a481867a0dff6700d748d8a441e156cf","sha256":"98ffa923ab8bf675e6efaeb6132340a4daad863858d001d5239a7aedd41ecf37","sha512":"d6866da885b3e253bfb7a1ce294aba72d136f214704d087d9fdb80f14f7da2deaa7afd28fe25e2a6a4a8b51e3c266fae9d2950d0ef7dde0ddff06d72a385669c","ssdeep":"96:Jvq8lhm+vRMS2nnBVv6yX6z6p9oX5SRYo69vRYTS9ipTX5SRYjeWUqSXgbF+w75d:JvSPDF9RVIpM4yeCF+mvelRVMtp","tlshash":"11f13392b36cd46e67f72115933dc900debcc032a011b0faf9ea216c77e479b12a5788","first_seen":"2023-08-27T21:57:54Z","last_seen":"2026-03-20T10:09:40.972405Z","times_seen":3,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/style.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9910\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84976,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"fa5dc0bf3aed128b549df70449a97c53","sha1":"ed3d9b1701580cd0d4a86ad77d20adcc5ed5dda4","sha256":"c48115e302d1d21a387fd113995e04f65578a7f9c0c90d53284cc3ec1742ec24","sha512":"17edc825b67cb925089aa1f15b324c46266c043f920da39a60c55e5027b1dd90a9df0f2d2f5a32a91db25816230b79671460dd392c7f352b45d822c65a51ed3a","ssdeep":"768:95XVc52+NYDq9JRHUbqYmWHEROSzZRlLPiEcJE3bwlJwJUIHsWWjSMW5AZJg4RtJ:vUhf8D","tlshash":"c6837825ea26204da213576877f129f42d388052dd2f495eb3bcba34d3d277926237cd","first_seen":"2026-03-20T10:09:40.973638Z","last_seen":"2026-03-20T10:09:40.973638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/en.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/en.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 707\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e4896565595fc22e344fd619c0ed15bb","sha1":"43d4481a4cc3e60b406b2467b5f7e576fcbae260","sha256":"c3a4cb8f32ef0cd89e6429d40d1faebd359e02e34d69764052c8402a391e9a00","sha512":"0ab96b0d29eeb56d1bbef4017dd039701fa85775f50f6b9dcd50fc0d8853228f1ad1fd9a4593d5cf9ce521cf84c31145c10a99588c2d243e114400723e02549c","ssdeep":"","tlshash":"b90194fe22a03c3bd56414a720071125487fb97f87da1168b0a4014e1cc3c0c8198fe2","first_seen":"2023-04-17T05:57:12Z","last_seen":"2026-08-15T14:19:08.102528Z","times_seen":765,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/fr.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/fr.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 446\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d909ff1434128340008455d23a24fbed","sha1":"b3469b660fb2cc967cc924d22058a2952be50fe4","sha256":"2629de759dd340f44743175bb4510aa6d438a37e3d94e079d2aa4e6032f71de9","sha512":"09c6d29836b6ece202c7afc4cf586111721141ea1ced5b0900b9b80aa162d3ef644b18b6042c6b16456c8d2bd74b3c46639ef5a46033debafdd32bf72cc92250","ssdeep":"","tlshash":"80f02391220915b256b80c315f07577dda9f07782e66954910dd2ca815e3c683273c0b","first_seen":"2023-04-17T05:57:12Z","last_seen":"2026-08-11T13:36:34.979647Z","times_seen":246,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/code.jquery.com/jquery-1.11.3.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /code.jquery.com/jquery-1.11.3.min.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 28 Apr 2015 08:20:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32363\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-15T13:20:33.870996Z","times_seen":18623,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6602862aa0c6737bd124ca39\u0026widgetId=1hpstoajr\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6602862aa0c6737bd124ca39\u0026widgetId=1hpstoajr\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.loyalluisexpress.com/\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-g2h8\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-3-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 20 Mar 2026 10:09:11 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9df3eb79de4f35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c33f0f53093f1456dba3268bda52180e","sha1":"7f5b063d7434c3d8100579cacce9d8cec46aaaaf","sha256":"515345ac5684f52132b0b6888da0e842e971c8fdd78fc569d7dd218581ec6071","sha512":"6524237f25d12a65c9789f5b8909e9bc277c190768d0909503f3b15071af876892a11af758f2a939faa58ce25d751e74eba17ad1028e4e921ca4046842ca6f66","ssdeep":"","tlshash":"f55114298915dd3953ca925770de3623b93dd123d384590de4a86e3cc3ebacd221174f","first_seen":"2026-03-20T10:09:40.977109Z","last_seen":"2026-03-20T10:09:40.977109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":400,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/translate.google.com/translate_a/elementa0d8.html?cb=googleTranslateElementInit","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.html?cb=googleTranslateElementInit HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 03 Jul 2020 14:02:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 140\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":347,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"935f0169a4f05d7e399977d4f0a150a6","sha1":"bd3056945319bd8cc9c0a559097224b3c97273e4","sha256":"000c840af22c23e1f544a63879b02f2505db3e8161a03a0b30e5d5d66d1d6ee6","sha512":"ff714c1df829e08e6ce140815e8c3fafeb41eaada715b4e5c4501323bcc3cb12fb07648d6c1c8a2854845c8fe4cabde8e7b33f5240192f60b1f0676625af404d","ssdeep":"","tlshash":"87e04f07bdb1c50a4049e146d3e2948cf16cc2088235dca423c0409b7af6fcc1f0c5e8","first_seen":"2026-03-20T10:09:40.978087Z","last_seen":"2026-03-20T10:09:40.978087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/icons/icon-select.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/icons/icon-select.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1034\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"fff2d62d6407c3b445ce69bcb94f668b","sha1":"56c4c299afb1e35b21a02dbad5157e9d9731ddd1","sha256":"e5a9390942e28ad83283f62f92cccc8cdb2521305e8499a1bf0ee31e29b5e922","sha512":"9693379ce9e8446fc3674f2a5fa2d7616279b49d6b6cda85cf40c27039daf5353c641fe97950fbbb288687d5bb69a6eb2636ee8e05021f82ab9d3614532ed9bd","ssdeep":"","tlshash":"a311429ef8401841f18ca89318eb90269d56048097e095a0f69fec1b0a381f1643b9db","first_seen":"2023-05-30T05:18:38Z","last_seen":"2026-06-11T22:55:23.476655Z","times_seen":4,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9df3eb75cbf576a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-15T14:19:07.929254Z","times_seen":67048,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Mar 2020 12:15:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32413\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93636,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-15T14:14:37.299242Z","times_seen":37742,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 19:08:08 GMT\r\nexpires: Fri, 19 Mar 2027 19:08:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 54061\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":112,"dns":1,"connect":21,"send":0,"wait":23,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:10.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.loyalluisexpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 10:09:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9df3eb75dc1776a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-15T14:19:08.053005Z","times_seen":93575,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/clients/6.jpg","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/clients/6.jpg HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2856\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2856,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x140, components 3","md5":"9552950f9136efc8ebf81477cfac78d9","sha1":"a6349fdcc3413e9f8e1084885356f1b5e0b22e51","sha256":"1423276964609f4cef33db047c234a383c54c055897969a919734d1169f1210e","sha512":"961ea1c7bdaf34c5ab4242f72e11efbcc014f0a26fc43a538bdd35501dee76f0fe85dd5dcd07a4fbdbc358a01e02b2535a284c78bd04b2cf0288f59122803948","ssdeep":"","tlshash":"0e51b70abea12c90edc9e0b13b76e2235d328850990768d774cac47b78504b22029dba","first_seen":"2024-08-20T08:49:27.576059Z","last_seen":"2026-06-11T22:55:23.589485Z","times_seen":4,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/flaticon.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/flaticon.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1938\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ee4f4fe7756487edd03dbc62b73e4e70","sha1":"2b00e7b56272ba5aa8cb3c670e5ca99c940d90fe","sha256":"3c22f4d7e65aa590b53f301c8be522b9ebb695cb006b5fbfb1ebdcdb11305919","sha512":"877d435e107b06c6f7f1fffb90e5e29e7ccbf1a27ab31dd1b285067f918a246e515b0e1bc93ea7e88acdd500851c981fd6ebc73751ee5d9c5462375290e10076","ssdeep":"192:EPNuhBDnlcaBU5TspqQ2OfO1bk+vWeBWv7zc15uFR/Ce2fTGtkmj0a8iKVA0Z:Rqi86TAu/0","tlshash":"74529ff8996e01ca5382ef81a3792e028f19b2b4dfd1dc1dd5637e0de4e7a111ac12d9","first_seen":"2025-08-08T07:32:50.382526Z","last_seen":"2026-06-11T22:55:23.596839Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/image/flags/16/ms.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /image/flags/16/ms.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 509\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"eb45e0d0b9ee26f6567a297e1ae4839a","sha1":"ffa035e829059e45becdc7021d4a1c4d656dfad4","sha256":"8a7a4fd4741dc0d7086670ae96999780322b91aee7b827b5add7e202a2d93733","sha512":"56b6ec484ea0e880916d3ddca0f91492c913a6ce7f4a01dfa95a7321db557809653f4285531537ccb477b38ed0989912d58ece6db168d5d8fd6eaff58c29e8d4","ssdeep":"","tlshash":"b9f075e10350bd7cc2d960f1612f09a5dd2312c531922024c593485d3463b3502c8321","first_seen":"2024-01-05T02:00:45Z","last_seen":"2026-06-22T09:48:00.017957Z","times_seen":17,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyALX1LcWvT-LG93ATIqo2B_oozsHn1g4nM\u0026sensor=false\u0026ver=1.0","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps/api/js?key=AIzaSyALX1LcWvT-LG93ATIqo2B_oozsHn1g4nM\u0026sensor=false\u0026ver=1.0 HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: ebdbea56\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ntiming-allow-origin: *\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 102628\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=45\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":311941,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11726)","md5":"9929998c1f7641728fa5010126b5c802","sha1":"cf9f69ddd5c383d0bcc4edcdf1454ca56238e3d1","sha256":"788346a8a9320d783d17999e3acc3b3e4c37740ea046e3df0bd6270278e72f4f","sha512":"de9cdfce91eb14490151ab8da4f294b4f3ddaabb2fadffd70a7818e90d0fc91857ca33bc8fb29dd2cf1cb313095f75b3de5276cc756af4f7b475f8f614da6513","ssdeep":"6144:YR2FzUOCbjhXehzBFGGz/FJUcF1RDQl+/c/bnLremp+HpeSW8VVacF8OG24MHnSP:YR2FzUtbjhXehzBFGGz/FJXvRDQl+/cj","tlshash":"89642b9873a2346187b2e4e450370106f27e649af04c8aecb69ccde3adf69464577f78","first_seen":"2026-03-20T10:09:40.985947Z","last_seen":"2026-03-20T10:09:40.985947Z","times_seen":1,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":123,"dns":1,"connect":11,"send":0,"wait":54,"receive":27,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0e.ttf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0e.ttf HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17558\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26488,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu","md5":"c045b73d86803686f4cd1cc3f9ceba59","sha1":"92d652578c531e2c3d9db4622584f6a1ab2c225a","sha256":"927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc","sha512":"9a40dbe8cca62af6a1c2dcb9a3431752c7080eb153f0bcba1822d284c41a0f4f92940954ad13ebfbaef3d279cabfd916efcf59beb7ca080bb3def8bf55226f50","ssdeep":"384:5MpkfAo7YUAz0sBIx3pVFIlGKN5kUL4U/BknWXK2yRDt9XhPAHMIzmSwykDxA:5wkIodAmF9veyRDt9RosIzmaSxA","tlshash":"bbc23a1ad3a1af35e91730fdc8270bc88557b460b71bc6cf3a8e83beae8511c8545667","first_seen":"2023-04-09T23:08:22Z","last_seen":"2026-08-10T20:30:56.537385Z","times_seen":1626,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/jquery.fancybox.css","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/jquery.fancybox.css HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Jan 2020 12:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1266\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"42a382562ba42991d4ad469962115c36","sha1":"77787cb5333045e7a20a540865a47d950a096d02","sha256":"7c188b6bec875812893c6590e4dcd4033b9947f7bc72ab5b1565a6d5e1ad968b","sha512":"61e91b97f61255eee7da83b6587ae8787cd2b06737371d803d7f0621f222b18d9fd8e652a388c2c9caa8af3fb9554fae647cb508bcbb033e6b1c2417da799e5c","ssdeep":"96:GKXaoFzzzQFRgRdrXNBo0Oy88i4cSX2W4Le4gino:GKIFu7rALtL8","tlshash":"c9a10e6726503901a43ede54db2f9a46c63f2482aa0a4dfb725cf93883d87e040f39dc","first_seen":"2023-04-08T16:15:46Z","last_seen":"2026-08-08T06:26:35.644058Z","times_seen":242,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/main-slider/2.jpg","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/main-slider/2.jpg HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Jan 2020 12:13:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107272\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107272,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x420, components 3","md5":"7f66629bc02dc7d66ec8650adc6bc4a8","sha1":"18d3de98e59c5c66f5dc8a71949e6a36bf2217d1","sha256":"bb642066fd5640dbc87a7c4a839b0f3ff27a09e0e79845623f364562181af1cc","sha512":"a95962c3a7c660882dedc84a63f879beb01a961b53c3032aae689c7380d19066e244f8bd38deb025250611c79c52fd9861b22b821561cd89942f7ff6906e00f1","ssdeep":"3072:8oaGI6z6CNI2JPYhZN6XKHUwVP4kp8bmIB8:8H5NCC2J+xtp8bms8","tlshash":"a4a312b8126cca13d4a52d37ebb354408dbc944169a28e352ecbc4db7d2717217fa36e","first_seen":"2023-08-27T21:57:54Z","last_seen":"2026-06-11T22:55:23.511908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/owl.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/owl.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17226\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82221,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7f237ddf38ea4a29181a8aaf9dbcc5f5","sha1":"95743b3bc935a634e674313a646e84e3ef239d03","sha256":"96d4d762960e6170d0cd1a7c5ebe09dc181ad7cd4559937ede1e9a47b46327fa","sha512":"97f2c35f30c5d791e05b3a8790d1bf50b470a6439176293dad49501595127890bbbb2eae1034ea3c68d99391040deac2de097d68739cb572f5536d0172d540bd","ssdeep":"1536:8cXxFH5ld7oIOdwyBhKT/dUP3Y0HXJsVa2fRjcN:8cXJld7oIOdwy2doo0HZsVa2fRjcN","tlshash":"b68392e1b32e222f4ab6336456bea345f93dc525d10227ad78e8a5dc3491448436effc","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-07-29T03:06:32.072454Z","times_seen":229,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/clients/2.png","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/clients/2.png HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30794\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 120, 8-bit/color RGBA, non-interlaced","md5":"d2998e4640bbf6ae87cbe6096a534007","sha1":"72e383c0d6bd51ec71495533f136c30fefca68d0","sha256":"220aaa14604090a86ac6426efd2291e67d92389acfc47e584ea05a9bed5df39a","sha512":"f85b0a46c8d8b0d512171584443c9c9870c8286ce6b7c254774409b80cd1b5d8cee8a856416d1bb142896406c7e02212c544e86e7e91cb64118075b15a247cde","ssdeep":"384:19UwB55CucIdEydzuMNKutfdrJscrvYwX5NQ7V9Xq2cUyDp:zUw0AFzumtfdOcrvxPQ7V96eyl","tlshash":"79d29e14fcf177414546a27669d13402183306c3ea81dc01b8de8d6b3f62bde8e2fbaa","first_seen":"2024-08-20T08:49:27.573796Z","last_seen":"2026-06-11T22:55:23.54729Z","times_seen":4,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/js/validate.js","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /js/validate.js HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Jan 2020 12:13:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6022\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20891,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20730), with CRLF line terminators","md5":"ef7a32219204c884c2ad5ba988bd5c83","sha1":"d45182c849bce98893277aa391d777cb2bce871d","sha256":"78081284738b0d7a05a476b880894588b1813dd34446a8f76368bdc2656cdf8e","sha512":"488ba972ffad90bd9b9d90f36474e40253db3654d00caf62c94d1d8e94d23820d010fbfa30c5141a8338b11a5affaed2c99ec3b1def94225f73cb571805af831","ssdeep":"384:Qy+AEKCnU0pMEdMAUZh/VL06g9B4gny+mz4CebUC3mIqNF5AzUjvNTqbrWV6r+Zm:WKCnU0XdMAUNLTwKgny+yxFMUjcz+Zm","tlshash":"9092aa4c76c1a0575b9620f5a40b550bb1f39aa8600de02cb5bcd4e2bee4f896167fbc","first_seen":"2023-04-05T08:09:07Z","last_seen":"2026-08-15T10:36:17.501708Z","times_seen":426,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/css/s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0e.ttf","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:09.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /css/s/opensans/v15/mem8YaGs126MiZpBA-UFVZ0e.ttf HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:09 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 26 Jan 2020 12:13:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17558\r\ndate: Fri, 20 Mar 2026 10:09:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26488,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu","md5":"c045b73d86803686f4cd1cc3f9ceba59","sha1":"92d652578c531e2c3d9db4622584f6a1ab2c225a","sha256":"927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc","sha512":"9a40dbe8cca62af6a1c2dcb9a3431752c7080eb153f0bcba1822d284c41a0f4f92940954ad13ebfbaef3d279cabfd916efcf59beb7ca080bb3def8bf55226f50","ssdeep":"384:5MpkfAo7YUAz0sBIx3pVFIlGKN5kUL4U/BknWXK2yRDt9XhPAHMIzmSwykDxA:5wkIodAmF9veyRDt9RosIzmaSxA","tlshash":"bbc23a1ad3a1af35e91730fdc8270bc88557b460b71bc6cf3a8e83beae8511c8545667","first_seen":"2023-04-09T23:08:22Z","last_seen":"2026-08-10T20:30:56.537385Z","times_seen":1626,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.loyalluisexpress.com/images/main-slider/1.jpg","fqdn":"www.loyalluisexpress.com","domain":"loyalluisexpress.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.loyalluisexpress.com/","date":"2026-03-20T10:09:08.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loyalluisexpress.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 08:14:49 GMT","end":"Fri, 24 Apr 2026 08:14:48 GMT"},"fingerprint":{"sha1":"03:2B:95:3E:EB:CD:61:4B:9E:6B:93:04:7A:14:A9:91:A0:1D:99:93","sha256":"8A:35:D8:66:36:D3:9C:85:CF:8D:9C:49:22:72:D5:57:D7:44:F5:E5:A1:AA:3D:47:0E:62:49:6D:BC:0F:01:4D"}}},"request":{"raw":"GET /images/main-slider/1.jpg HTTP/1.1\r\nHost: www.loyalluisexpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.loyalluisexpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Mar 2026 10:09:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Jan 2020 12:13:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142080\r\ndate: Fri, 20 Mar 2026 10:09:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142080,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x420, components 3","md5":"ed93f97f7a3e436e8510aa1ba5dc2235","sha1":"ceb11510815cc27b16d1b894c00408cf55f7f7e4","sha256":"f93e246c06b081777d074cab825c86e7d3fcc3da5320794f0452e678a71003a5","sha512":"ceaa68df7ea258a7ef2f7452eaafd0b88bf2f0d7eaa7f1ff337ea00350c4e1f7d4a90d043b976774b0e0e211a04b2640f44a86ab6bb42e308b81c2b1eb15d6d0","ssdeep":"3072:mGjKatku5waJyMeJc10COBWubMIvkJ/kecs6zEuZYV2GnLH5Ut:mGjVtkMUc106rkoeYV9LS","tlshash":"cbd3121a1e03435fcb8da542e692edcb921197e804a5da493394dc5cbf8f7e5caedc08","first_seen":"2024-08-20T08:49:27.582777Z","last_seen":"2026-06-11T22:55:23.436366Z","times_seen":3,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"www.loyalluisexpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
