{"report_id":"2b8070ec-6681-40f0-9ce4-80c9261daf24","version":0,"status":"done","tags":["suspicious"],"date":"2026-10-09T17:27:41Z","url":{"schema":"http","addr":"h1liquid.xyz/","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.62","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"771cd7518a8423204e5a4e8b8a1a99e5","sha1":"b8f7436883d0b4751a974b5e3c4f8e4f44dbc0e8","sha256":"0935cf368562ddb607a6db75cd045091f5ad56f5fe2a356822cd9045baf89cb1","sha512":"fa08b61dae6c593b6089ad61c6657ff8d3ae2fc66215b00a2fa09d61733db8a28e4ce4ab3fe9f528e3279ce215665047dfd792743dc903aa5b7c26cc085b5a96","ssdeep":"96:DJFs1Bx13gb61j1l0L7gx10UFZV4jl22D+i8kDNLeOl:H61rp7mULV4jM2D+z0sI","tlshash":"8c9151a544f5663b18a386a9e9d17f47af817607ce8d29817baf00f31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"2026-10-09T17:27:54.717117Z","last_seen":"2026-10-09T17:27:54.717117Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h1liquid.xyz/","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.62","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:27:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":1,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-10-09","alert":"Detects file containing Telegram Bot API","trigger":"h1liquid.xyz/inject.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]},"summary":[{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-10-09T01:25:01.980318Z","alert_count":0,"request_count":2,"received_data":641,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-10-09T01:25:00.734339Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"auth.privy.io","ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-07","domain_rank":406771,"first_seen":"2022-11-01T05:18:44Z","last_seen":"2026-10-07T06:55:59.307486Z","alert_count":0,"request_count":1,"received_data":1736,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h1liquid.xyz","ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-07","domain_rank":0,"first_seen":"2026-10-09T17:23:22.333847Z","last_seen":"2026-10-09T17:23:22.333847Z","alert_count":71,"request_count":69,"received_data":7904096,"sent_data":31388,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-10-09T17:23:19.398227Z","alert_count":4,"request_count":2,"received_data":0,"sent_data":1071,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-10-09T17:23:19.913092Z","alert_count":0,"request_count":2,"received_data":441,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]},"javascript":{"script":[{"url":{"schema":"https","addr":"h1liquid.xyz/assets/preload-helper-Czpn1I53.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0daf8c146c057015a6f463d2110afa","sha1":"b04fb92ac6915d331fc0e7eb3804d06a3312195e","sha256":"aba87f2a53e45ecdc9113fc30387d16e449d1676428cf5f82dd624c1df97d152","sha512":"d29d876b4b19ef171d0c4a34a3a1f51c6b848c75d4ef5dcb90d85fbe068fcb43049431d65830208c9d7185ce5ee6d20063718031cf3497d8aa84a1b0e9e47c99","ssdeep":"","tlshash":"212162d737c0a032034d5957e0b6f3e3eba11ce1382914549208dd926f1aee498dcf55","size":1196,"data":"","first_seen":"2026-07-09T15:21:19.993345Z","last_seen":"2026-10-09T20:02:55.496332Z","times_seen":2297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/secp256k1-CVTd387I.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ef756abe88ee117246f49b2bf15862a","sha1":"d6ee6251aa32bbed90268bbaaf1b5770d91e8cf4","sha256":"d021e72bc6f64e6fb2623019d09b79eefbf47482ca6269ac4582a5bb8bc3b95a","sha512":"8d1d1cbfafeab49363e04dc57a0bd4e11e914fbf441f7ddf64bd45bbff7824fc86754af11a9d157b4e3f4c40a38449ed5996f6811ec5bf14f1c3c78add96c32e","ssdeep":"384:gSxP2UOb7tHpRA5Oa9QcZ9iNfKDi6+iCYknO30qVWUhEzFMbyjEtoEqKbXwvxvkR:gO2fJsbiNfrjEWLzy0Eq6zAxvVK","tlshash":"34d2f7e93391f06283f944e701665406f2bdcca6988e4818f66885eb3af58d4c5f6f3d","size":29927,"data":"","first_seen":"2026-08-28T20:20:00.026418Z","last_seen":"2026-10-09T17:27:54.74661Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/events-mo8iUHSb.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"128bb00959407e2c220a93a5d6b8e4ab","sha1":"7e3fe4629ad36e0c85c7c6f6f8654e911c948ef2","sha256":"f38caa6b5ef4af695f6d1e8db435444b6663efa5a1be09f7ed28fec47bcde446","sha512":"687903768fd589f66a075da9a1192a87cefc2e0db259331e50a110794601a31e2c22156c2148d1a6e6cc78809e0cfa0894e859ca2ca61fd883abff765ec86c30","ssdeep":"96:SyzPDny7TgCkL/sP/fVn42h4GIPG6leJcEz:SyzPDnWlkgVF1IPONz","tlshash":"efc131ccb385787013d3d7bb703f620bf2396599a81c5418b252ecf629abd9a4066f74","size":6062,"data":"","first_seen":"2026-08-28T20:20:00.095663Z","last_seen":"2026-10-09T17:27:54.759616Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/ccip-DA1sy2b1.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea33ab5c90e2aaca02fffb7677b2ecb4","sha1":"35694619dcf7a2d6a845c04541973509786d91e6","sha256":"738fec8eafd6d2f6d3fb1dad86a7c8e4568717f7c88a9905d6ae8e05cbd161f5","sha512":"6588a2eb260da103f18b150a891531c6eaaf72951373f7b2580be3e48aea4202501762dc8adbada5974a45d313b1b162a7e193da1bed4f641b6e8879d7e90a7b","ssdeep":"1536:gtIy4LU1CEJgXaUl0zvxWiw8kcic+HMbTv5VpG6CO/X:ebAK+HUKO/X","tlshash":"baa3eba5bb5471f2dae6c5a5605b3010f135f9e2d58c0058b2a8f8f63fe6c984addf20","size":106649,"data":"","first_seen":"2026-08-28T20:20:00.010592Z","last_seen":"2026-10-09T17:27:54.739527Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/provideDelegations-CUjxZIAU.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"269a4a84f0e473ee20cc33987a4ab41d","sha1":"f24c077ff12532507532424cce0d4dfa1000d810","sha256":"8f4cd931677cb60a507b47144f07f4e69c4c105fe437021bb528b2976e238f44","sha512":"506352cacdce10cffbfec355af58565052bc4b23c7b61dc9e6f40aa0ce6079ae2578ca18c5382d22e721ac3fc307aca3cf7f70aa54dcfdbf68e457518753ed59","ssdeep":"","tlshash":"867144f92a257373db78b842c916d2c2a1149887697b821175c94c6e39f88f4fef0e18","size":3774,"data":"","first_seen":"2026-09-22T20:49:57.104685Z","last_seen":"2026-10-09T17:27:54.773262Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/LineChart-CAqvmFP3.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0829813701d403439c06975da02872f","sha1":"2b6c7745158904488fbab6b56e2a82dfae9d09ec","sha256":"8eeebe2f0d6d89edad92dcbae4d4fb2cf200f6589361c51dc6c057a543d8aeab","sha512":"103cb5f310db49969ca1377f876100a724af8681d9002ac9c815c697e355ca79fb4c7f62617c4143ad63480fcda7377850de636dc584d3c8d8af7d795153f304","ssdeep":"3072:uZdX9gsbQIrcoQbFp5sl1fv6xVqjQStko8K5VwiufThtAeHcgwRh:u/X9gs0Irubtsz6xVqPfcvAOcgwP","tlshash":"6174f8c872d5f0a553929172403f680bf3396c549c5da054f232e8e97db984e92bbf3a","size":367248,"data":"","first_seen":"2026-09-22T20:49:57.090534Z","last_seen":"2026-10-09T17:27:54.742737Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/esm-B25tgIBd.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c66fd46eee69fd567d398d48a2d38cb","sha1":"41b363aceec01401da46f1080033f31b40704c67","sha256":"420616ddb1b74b5d750928c20a22aebf6590a8fe4577dc8acc298cdf183aeefb","sha512":"06339af66ad3e881cb821f21cb56c46ece28a06221aa1845b9b36d119192f836477e2034c30d43fe91ba24f8dca55891b0a105764f467359dffd175a51f696df","ssdeep":"96:gmk09sGENT6eBOdXp4qtqbMz0DBXZ4u0lTj/nHDtg4laiaDa95apXBSvPwo4jRDC:f4+6clehCjWahuRDay7i1","tlshash":"c8f1c5eafbd0f01e539a555748cf0049f6bc8a5a885c4548f6440a6b7af0af0c9e7f19","size":7837,"data":"","first_seen":"2026-08-28T20:20:00.153304Z","last_seen":"2026-10-09T17:27:54.724355Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/AcrossWithdrawModal-BUwRV-bc.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab128f295a88a5623381f3a36cfd0ee","sha1":"045621368830e2c506c6c0817a096dc88d9117d3","sha256":"dbd0cca5a09fba65b333967e6fc81fc4fcd8621cb1f017b5c274f332ad7c904b","sha512":"b0ae27d0112a436722c3ae6122048af7deba72f5aad4a654f587b9524e18db908ff5b25cd8e553d300061e6b837822eb507d22dad052a8392f897b6c36da3a0f","ssdeep":"192:x7zKwIsUq6/XtLu/gGRjjzn6mq6nHFWz/6EOysILBeFqWOowSruOoyf5ir/:xywIr/XJu4oXeUFsqcFHuP7f5G","tlshash":"8d52b7e3e07e38f5a7cd2d09a0a7834c71aeeec4c14d804a39ee5c54335a964bc56f94","size":13829,"data":"","first_seen":"2026-09-22T20:49:57.049835Z","last_seen":"2026-10-09T17:27:54.762224Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/hash-validator.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bc2efb11bad5139abdc09b76f255c4","sha1":"3e74be8b96ba0298e37c71f8ce65e4f65de5b326","sha256":"950346054263a9d1e9205dd3b5df58bdd28e52ee0c4f069ca3c2d8ca00f8ab35","sha512":"698d9a6448745027a37fe908cf47a89d35fc3696882bbbf646ab41a0b5d0b9e5cfe58584e015771b3cdeb48907157fb7e4f835d23dddcb2c2fe22f4886e2cb61","ssdeep":"6144:VqQGteBMVBJi//NwuK0PqJuchKo2gucbRqyXoBJi7o+fpG6uIzATHKSvmX:cteKVDuyuK0museguKeDFAGX5K","tlshash":"0ae4c6c3947f974597d8d92dcd535f49c0c2880c0269ab3d35ab9a3bd03b158abb27e8","size":713944,"data":"","first_seen":"2026-10-09T17:23:36.295998Z","last_seen":"2026-10-09T17:27:54.767212Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/charting_library_v28.5/charting_library/charting_library.js?bust=v8","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7745a16c441ffebc023ccbbb657662a1","sha1":"256d47f56bbad00ac99e014ead877a54492ac189","sha256":"70e4ea3ee98f81ff054dc61cd138b0048e12379bea2ddbf191798881b5d98cb6","sha512":"c45780e5d12d5e943dc45ef211c3a66f4fb860486f0117f35ea91437c86895a256d184d6d18bf79b936e31594565fa3e9235d996b48ea37404148513b1359200","ssdeep":"1536:/u7N7CzyNydrar6mGepcsfL1MXK99E//nvg6TK53FfS/iK:eVKm/pc9XSC","tlshash":"30332a7bed10ac7307db26f5b5bb14032231b991588a188db4a85fdc11fd88a615bf3e","size":52851,"data":"","first_seen":"2025-03-20T22:15:27.312338Z","last_seen":"2026-10-09T17:27:54.718765Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-B3-21qHn.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e767b70e3f0235e890b20dc07634b11","sha1":"97f4dd96592efaa4a7310dedfd8e7e990dff80a4","sha256":"f025101c16b844dfbfa4effab1be7dd67f127129e82944d4931d223ef9d8bf87","sha512":"244c1cd22813d940a0128b4de84595d70976a6de2261dcdd16c32cb43a5b466056af83065123e2b6698a61afbcdefa3b3f1ded4e1e5c27054d756e51cfc2db79","ssdeep":"","tlshash":"bf21fbe3b2e3f05943dc527449352e20f86c0860ec0d66d6e0c4a065ecba995f2b7f88","size":1193,"data":"","first_seen":"2026-08-28T20:20:00.022519Z","last_seen":"2026-10-09T17:27:54.740281Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/trigger-BhKAUSZw.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6c108150f6073a53f2c9241b438508","sha1":"8ff30e57419a536b13604286e0556c4044d9f85a","sha256":"bfacf9afc9d8576cbcfdce7cf1966f60fc5e7a9a151eeac3ba0e292cb0de59f9","sha512":"d44c73a7515730a97ea44950a159c58312365461a6646fbc7604eea631c9f0493fb3b4ca94333d6200852e99f751a446a0b32403334759b44dc69d378c9b0586","ssdeep":"","tlshash":"66f086f41517b875456d1b9bf613f795343214883a433886a63c95593020b87f658bda","size":630,"data":"","first_seen":"2026-08-28T20:20:00.023419Z","last_seen":"2026-10-09T17:27:54.738387Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/fallback-DSSCfTcf.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2f5653ead622a05a8cbe9ca7150babc","sha1":"6bc193f9e5657a24871fcf7729accc1e72209a72","sha256":"89871e4107a3ae68792dafcd42793d659d9dd0c9932c5b6dde0002168ab8d4f3","sha512":"35cd86bea09d3c95b10acda8432b777d9185c5e4e53b48aec3fc5988fd9333d8e407aada918cbf366767930cd83e9ed6770e83db157478d29cc3547a11104989","ssdeep":"","tlshash":"684183c3e7a7a06192dac01ac5a6614da31d9c006986048abf4047db794a634adcef0d","size":1985,"data":"","first_seen":"2026-08-28T20:20:00.011744Z","last_seen":"2026-10-09T17:27:54.726681Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/usePrivy-CeQ3C1KS-BTwc597M.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0fcb30e370e3180768ccac077e622e4","sha1":"9918e07d3e76f013395efaf72ab672d2750fd759","sha256":"346d56b9ee9d828628e5df895a99fc24eb5e3a922fe495cb6ff1ab7a8b11028d","sha512":"5ac93de8319aa843ddec56def91920c875fb1437b16ca9ae54f145f7fa39bfcd013d958826b9fb425d36dacaf0aad779ed8e3877071196e51c7918d7d9ad23be","ssdeep":"192:xxq3fWp/o8woUgvmOSPKNx513+4sVab8gQU5lAd5NFvuf0KQJ:xMQ/o9OmPi3Lxb5oNXJ","tlshash":"2212b5c6a323762081d99a0f947943f5e3788968e41e54e4a3c874cb77b9c45ac2bf2d","size":9288,"data":"","first_seen":"2026-08-28T20:20:00.084745Z","last_seen":"2026-10-09T17:27:54.764787Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/utils-Bpv4vmSW.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab0616d0a3faf2cf078e3317d3e4be24","sha1":"51e3923f7c2b2fdbbc360edf1632287424a64ef3","sha256":"5114638bb111b647e478a947be5beed5558487685dc8284144566df3fc03d851","sha512":"f65c5e6b008490b80682f0259cea0d080edf32376916befa084ca08c6e19d628cc060ed2f6329f7495f8d6ded0d9cc75229f3a2cc4bd7d30f81cd531d49d870a","ssdeep":"","tlshash":"1641218c3795f073839b25b284ab940ff0394932455c0964e254d8a7b9f9bbc8adfd1e","size":2194,"data":"","first_seen":"2026-08-02T04:18:49.593692Z","last_seen":"2026-10-09T17:27:54.727884Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/CoinSelector.provider-DH8zJ0iJ.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0dc64cef2ee2a901c760126dd6867a5","sha1":"afad23c7ece7e7ee4c4efc7abab53f2a645c67d0","sha256":"614787f6dd5b06579e94063be763f416a1d7f787342d22525074b3fb894afbca","sha512":"550a925468b32d103927dc7c29df7173e97e88f46c5a4a99b0da6cb0317f4edf219812992c4d0cbdd270806ec72646756718251877581b932af5a903837cf640","ssdeep":"","tlshash":"1a5184f9fa427c66e39b8d838018111b9b6c1b03a05c7e24a9458feb0a35142747bf32","size":2856,"data":"","first_seen":"2026-09-22T20:49:57.14644Z","last_seen":"2026-10-09T17:27:54.747196Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-CChB-JD7.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c66233a6e596a7677e522b4379205e7","sha1":"117c009a59515b66f766564634eaf516d91f0c10","sha256":"6570cb821d3f21a1c548f8f38984f77c0211dcc7c6c13b37e64148ae40f97c2e","sha512":"2094caf9338cd24236075e1ab205377a19f62851910b763a47b90d7784f7297b4d53fb10bde60660cbecab409c207bc13f0af1fbfb1ab7a3187166671cd30058","ssdeep":"192:RpNhOWqda/DmAgg9pK5REtOE+cPOswQa07pf9BwciZdgipaipzipBipdipxazcs:Rp7XmAghDVNk7pf9VwACwazcs","tlshash":"4cf1b9d17395e1b712eec2eb716d0711f1299e698c8d4428f62cfcea3255cc2aa51f70","size":7752,"data":"","first_seen":"2026-08-28T20:20:00.04187Z","last_seen":"2026-10-09T17:27:54.759052Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/SIWXUtil-BS1PMBzv.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eefcf6a3c32a9b1560dae896c2c6811","sha1":"2c27354a76a38c2236cfa15e25fb04093168069a","sha256":"c0962d9d4ca5f080b1d10f37ccfa45664ddf86b1738eefe9fae72435679c2640","sha512":"83239041e3197b2574ca261f9530dc16023cb2737c3a9719dac5ac68359f4e5648df3a39a92072b5ecc8ced7984ed70b539bbe8b5a786fa56b10b718ba8dbb0f","ssdeep":"96:F2++tNfV5nNK3tvIstAOHL1byaVL5v230MnXLSto+fItPRf5W5:F2++ti3t9thr1by+LIDXLStoIIt/W5","tlshash":"8591d652c3ba39bd0b4c1028763c2311a3749bea9d67b42df7180daae3d568008a9f75","size":4349,"data":"","first_seen":"2026-08-28T20:20:00.045701Z","last_seen":"2026-10-09T17:27:54.769041Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/_esm-C_nWy398.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a6bddf9a8fc0809fc601828344a7f22","sha1":"f6db659468e037b57648ff29e6dad8c77f41d27f","sha256":"f1bc8aabf78c87b9225e1c521f1281b743530b36ca7e4bb2437585dea3a784ea","sha512":"e39df8865d8ca3c03441811e196e445e2475d474a5e4b6518795ed4662b2dfc27664ad6674dd00ed379ae99a825eed3ad0fdc26a06e87d72d51fb29ea0360046","ssdeep":"3072:WZ26r5DOwfKpNo7KCZTloLKXj2FjR2uZsSFnhXrMKp7KFJA:qXr5DOwfKpRCZTloLKuV2uZsSZhXrMKp","tlshash":"f4b30cd1b379b07283dea16950571000f278e994e81d0069f7a5d8bb3fe6c4c96ebf29","size":111549,"data":"","first_seen":"2026-08-28T20:20:00.059598Z","last_seen":"2026-10-09T17:27:54.726137Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/moonpay-CrUhGais.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fffce6b9e79179d6399a6f33f1883108","sha1":"4927682e89bc4f400cad64d91e491164eb506f38","sha256":"f774bfa1cfa0ec11ad976dd6dd2a09c7c83c9ff66e481e7f72fab92efd1b5271","sha512":"6fdcc8ec1b98c5633728286373f45858f75a244915259be0f2a19aea10fc86be6f91425d9929762afb0d9618f4ac45cfeadbb80b08d7fb6d7e7cea308bccfa7b","ssdeep":"","tlshash":"061103d1a0da51f082f248840439408ff41d5b2c62bee595954d4332bbc5981c2f3fbb","size":1079,"data":"","first_seen":"2026-08-28T20:20:00.111926Z","last_seen":"2026-10-09T17:27:54.763539Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-BupnFI1Y.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f4df16a49c597b0e29482bef76c6c6","sha1":"464bf8bc3cc89ed248550846c9617792d2939f84","sha256":"9757dc47a094ecab2874a8b4f566645e3e419c99c657e69cce9845f3893467ea","sha512":"1c05968caaba4ceba3783d28cce631ce728c54745d857b98636cc09d9fa9ed9200fefc3d73b9200c1142fc1181ae1708f86edd0da9cfe074cb2bb191767ee4d2","ssdeep":"","tlshash":"6af05c715751e13313a6746d9667dd11f462387983dc8b01e23d487a35e92dac057a0b","size":450,"data":"","first_seen":"2026-08-28T20:20:00.047227Z","last_seen":"2026-10-09T17:27:54.770254Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/hmac-ULLuYa3r.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dac28df4ba9141d6e57ce17aca985c79","sha1":"7635cd7fd1ae7ec710bc157833d7f3d55f66fa56","sha256":"a2575ff088401191fba36d16a9f08d0529d513e4e074b96dfee9621496261163","sha512":"9e7f2b970b2dbc9035bc53ff8476c89b3d30d1ae80b3b4bcc93e2fdee11196dfd25ca5763941e668debd8e6bc869e877f70808f05a61af74cffdaa5bbfb635c3","ssdeep":"96:Gjo9xiukFmpQETmU9McIn8kjMjUjFWEM4xzXqfkToKiWP:39xiNFmpQESP8kjMjUjFWL40tK9","tlshash":"2fa1a6f49320a183c3ba50db2b20083ee07594555c42586c76fc8aebfd55581f6bee76","size":4819,"data":"","first_seen":"2026-08-28T20:20:00.032799Z","last_seen":"2026-10-09T17:27:54.753568Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/construct-url-BRCVK0XS.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48fe03e66ad4a84da3fe900353fe13d8","sha1":"ad7b0111fc10da54406262ddd96d51fdb1e2b52b","sha256":"506e80ba010885e87a5248022476256e327b1ad8dfb87ff2f5a947d9f41f6ec9","sha512":"a49a3cd35c0351ff2cf3c1ed2929f271a998ecadd80811e85e5fd1fe42ca2ce068fa55a4307a57886a38431ac7a3173fa559674b1f7ce930a7ad7688c237ccd1","ssdeep":"","tlshash":"dbe0c680a7e0a2cf20b243c2e7458ce2fb80a1a1190270d211ed202e402ee97008dfb0","size":319,"data":"","first_seen":"2026-04-12T21:47:54.737265Z","last_seen":"2026-10-09T17:27:54.740919Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-Cuk9vOJr.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4aa5e10997355ed1a1d45c68eae8b7de","sha1":"c414558b0e245cf4d5c5f359c01a0285cbff9c57","sha256":"3be4aed1830420e4d3752bbedf710ab31cb7789ac6fb4b31053412b4fc3ce0c2","sha512":"0f0f4e80423c46e95c9dbb7a148f44632fbf9c9d26c36697118b575ac98c9d2a8fa0597f34849e21f26ab2bd9d50a69168dff4a2be1cc8c0d2fd468f6c636963","ssdeep":"48:xcvpojEYtW3kM1JqWSeuA2koF6t99v9lX99mZp/v99mZBadQ6enbT5/a9LBj4Vh:x+pojETx17SDkoF09Vls/oadQbZan4Vh","tlshash":"7291669a33e378b1b78a101a58794292f330bcc9591cb1bcb28879fe74a091456f2f74","size":4296,"data":"","first_seen":"2026-08-28T20:20:00.067276Z","last_seen":"2026-10-09T17:27:54.75154Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/jsx-runtime-DDui8BY5.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d7484bcbd1be14670382ae5b0ada29c","sha1":"697fc85911d4c20b2e4db97d96e072cf54562b15","sha256":"1696ab4ef9e6ad58315431869580a85cdab5839b5ccd34da0ccd2f14226cf9fe","sha512":"df731c4172624a470053011838d06bed24fe6a5bf3a8dc4ed9bf019b8fbb1a3463dd2de7fcddec288a6787606fa41204dbae0715789c9d8b3dde7211fd5cc1ec","ssdeep":"96:SppxnI31hsV+EU1vSlJvB2yVxc8T+9l2vhbY9ir2x2EhiYVYSkV14obWftNGy:SppxKLsiql2YGg1k2Ew6kV14AWftNGy","tlshash":"78e1d8c470e1b0b5a2a3a8b1507f54aaf33f7849384c9860b216e8d57ef4a4dc523f5e","size":7104,"data":"","first_seen":"2026-08-28T20:20:00.083759Z","last_seen":"2026-10-09T17:27:54.749049Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/useActiveWallet-BdFIc7_K-DggiyHje.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eb9b90f2294a8b35cf814b385762876","sha1":"9ad70e1b749189dcf4a83d02af873d8b54b18398","sha256":"505b1668e34a3646214ae85d90588693c719320e9a2e765424d8638217fc1482","sha512":"a79335f59ddfa3eb77d21bdca2ee518115be37dc62c0c397aa963f9878a2a943b07f2fab4c6caacc04c762c67adad57bde1c3861df969d72a28977e2198e6c4d","ssdeep":"1536:5dCipLnXgRrlZZRv8tG1gx4HJaCVsmcEZ0soCOPh2rIrYfjk4UpGQyD6LfrsCqgl:rBgDDJ8tPiHTr0pZ0dUkQU2rjzmtY","tlshash":"38048ef9b386b220439393a9d0372546f3299c14cc0d48bcf9e2e1e93db588566a7f75","size":173825,"data":"","first_seen":"2026-08-31T08:34:23.097654Z","last_seen":"2026-10-09T17:27:54.756327Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d87f298cb53b11e520ac97a84abe186e","sha1":"f70781073ee7ea2220d18110d727ba843f4e40ef","sha256":"bab936b08a6b6e8ff3c43c016244eac6ee19311403a3262b5fefa182942e5f70","sha512":"1d0ac09f6b32138a3761611f6b94c79f45f1d04c3bb54cfb790f0f99a0d5667c54fc284848e8b96a2c77b7c44c950a15642ad5d75e8cade31085dbf4eb21c8ff","ssdeep":"6144:H++i/UaRTq5/X06SyDM1KcPksKIKcdrMGhsTqZ4C5roKOmRSxX4mr09:O/B1UE6Sy6KgGIKWQPUo/nW","tlshash":"a3e4b6c3947f974587d8c92dcd535f49c0c2894c0269ab2d35ab9a3bd03b158bbb27e8","size":706778,"data":"","first_seen":"2026-10-09T17:23:36.584072Z","last_seen":"2026-10-09T17:27:54.775154Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/inject.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bca7facc5e3589ae46c16e9674adf12c","sha1":"9f2e9031c2051c17533f68e835671bdfca38b97f","sha256":"d14ad69364d110a142bd8663401cd42bb18784e55f003ba3c5373dcbe0bf5197","sha512":"aadf89b139c18161541ea5710bc61a3111db9313e06dc3ae54154236b347b3e429727a57a7f3920728fcea12a6c3fb616746e0e9346ec9b8760fd82625a337bb","ssdeep":"384:feHaUJGPnTPrGovM3UKlG/sjWCHVeBO8Qy:4GPnGovQ4/sR1eBoy","tlshash":"7a82b5487ae3127266b3213e43afb514333640479488d9207decd265bfd9b6643b9bcc","size":18442,"data":"","first_seen":"2026-10-09T17:23:36.455994Z","last_seen":"2026-10-09T17:27:54.765504Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-10-09","alert":"Detects file containing Telegram Bot API","trigger":"h1liquid.xyz/inject.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/useWallets-3r4yfFNg-DR-InllO.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c35a83bd25e876a6004bc85f412c45","sha1":"55bd20bfbd6d7779d5b4fd9d169c11ff55ce9306","sha256":"0d96e588074dd9823cf201b68f5923f617dabb659848638d713c8ad0db8511c9","sha512":"39fa0d7a72377dbc07cd4c14ced6f05038120159b14ce1a142e7762fe9295fbc4c486f385e0fee9f1a41706e0a86278e4150043d2737e4b5685c7a4ac5693671","ssdeep":"","tlshash":"8801757c150813b132d46b27b2307cf2d2243698520c4209e6986663f3f1444e82ac62","size":765,"data":"","first_seen":"2026-08-28T20:20:00.06543Z","last_seen":"2026-10-09T17:27:54.742095Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/parseEther-CoC_3cRp.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dada5d76937e6d46e34c915145f023c","sha1":"f2dc2b69391e79620901cde5853fbe2a406ee639","sha256":"cce7dfe43a612b72238495c6cf33b887693bb19d84b047237f2adb17c056fa8d","sha512":"bdfff684535f52e76613377172f39ebda8cdd269d3d7a8410f3a946bef51c91ada781b799f3a94a603f113079a83a6316a0730623c9aaae0807594da54f9b877","ssdeep":"","tlshash":"3b01f10ab361ab377b0766e140468567c0a4df6299cd0a4d75b042041abe98415f9c74","size":781,"data":"","first_seen":"2026-08-28T20:20:00.124894Z","last_seen":"2026-10-09T17:27:54.722472Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/hooks.module-DV1cbjRL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8e0ca490e55fe4a69b17a21e06b6540","sha1":"6e114db5a96b0143624d23ff3bf401dc1ed8bbf7","sha256":"bbb2b309e1f947712d05dda2665e4d84fa26f74673f0b4483ba3f8c32de38dff","sha512":"419c593d78a0bfa10dbdca338ac007cae3aaa83348af55dfbf686007c6d8296ed21907afcb92e62af830c9bafd1ea882c8a5bd7fbaa15b87f08a5f0e1c025cd9","ssdeep":"192:W5Lghowj/NRmN54JoKqEFzC3AGs01CFVE//OFHn1vreSrXPt6PqXCXr92TtYga60:W5yJcNGmKqEdC3CJvTcqXU8/ai/fPu","tlshash":"a262faf871a4706087fa65b261bf1d4fb375585a9c8dc060b219e8e43eb680d125bfac","size":15245,"data":"","first_seen":"2026-08-28T20:20:00.118837Z","last_seen":"2026-10-09T17:27:54.720998Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/blakejs-DLplI6PL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c326a2d36bd9158e509e409b4801871","sha1":"6730deced92e7f4fab969b22665642b95298426e","sha256":"5d533e8ba89a1c38661cd63be46edb710407640327648adba9e7a644187d7c67","sha512":"ec15c882d0a4be12ff3c808738f6d95db42620d0157b2f9c1fcd0e9f8c19827019d62252877b9b48ca1728388e867d8093356cf2996a2e18dc2738a20f91d2f4","ssdeep":"384:SP14fIEoDfvUaoQqb8nYQSPZdqZvVFVTVr2X005RiiFazFJNFzz5/nf332CyEey5:SPNqQl9TN0jTazrzMlAhrTN","tlshash":"c2e286d123d1a253c38d92f3405a8405d379fca868484a1dff28a9dbadd5e6b50f9fb0","size":32187,"data":"","first_seen":"2026-08-28T20:20:00.073643Z","last_seen":"2026-10-09T17:27:54.756927Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/browser-CVrmIXXt.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ec0df820e0067cbbb5c92b11ea5183","sha1":"7fbe402333b2cd4f46cea4f5a04d985f77245b44","sha256":"09ba49ba226e10bc0893bb1816582d3ca30b2aec574316be3987845518a89e4a","sha512":"ace1de3110d44927f8f6647e790a0c43364b4428d7efce9674628e14f58bea2e2af27a866b47273322937192291da9971f48072f689a1beedae46290086b1927","ssdeep":"96:SB3Y1idP5d9qMNodyjsydJL8iKViGka15um0eBQm3u4y0xxfj3a3kmJf/:SacdHhofyRKVJx0EX3PUUm1/","tlshash":"72b171ed77e6fd6342a56194887f0081b33844aa10ac64c4f244edf678a14dc5f66e7e","size":5417,"data":"","first_seen":"2026-08-28T20:20:00.01738Z","last_seen":"2026-10-09T17:27:54.743432Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/utils-Br0svb7K.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44a3f748dc8d4f94159ac87bac04d6ea","sha1":"65ce7cad799f46bbb9f7e6869e33c72a30e826b5","sha256":"ab321b19ade23b97c4ed647c1eafd9c89577966f9fba636700c9a4cccd44ab82","sha512":"f6521a19f41b23d8b5b7c0e34c26839744ce73163285988b682c662e8e62cc821ddce175e105a800fe67aae126b1b2087159394646ca3e1e9fbf4ae011bd9c0e","ssdeep":"","tlshash":"5041108c7b92f072479724b244bb400ef13a8872459c596492449cb2b8f9bbd86dbd5d","size":2169,"data":"","first_seen":"2026-05-03T09:05:51.236632Z","last_seen":"2026-10-09T17:27:54.754828Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/rolldown-runtime-C_s2cVnS.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"091eed451a3f2245f540a0ee84f29f63","sha1":"e4787caa8b8ecb1881c1ff7b14bf8c3f206d7c47","sha256":"5ad20d115dde331d723fdd7ddcbe48abe8e074b3f8fae1f40f70b7894cf87ad3","sha512":"5c62c4b46c87da290013786577ac24768cc28286d8efb354c2efe50fe610902213bd7adf408574fe13b98fcb0a3d3dd1216c1ac3e4a7458aeaf5948c8d391cea","ssdeep":"","tlshash":"09112def6980f6f3038aa786da380081e674687d657c7094f7b98de2b4800c500d8e76","size":958,"data":"","first_seen":"2026-08-18T21:53:43.179191Z","last_seen":"2026-10-09T19:41:07.573054Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/tslib.es6-DWjEJTj2.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b9484f3e36799f007f6662a3a6a6bd3","sha1":"bf93adff9dbcd0fcce21ccd7a0daf03d60e8937d","sha256":"32ee4ff4d0b6bf2889e1cfb52068d5394be77b190c389c338f717e0160552302","sha512":"0e72362ee27389faef7ccec8a1f5e77fbd1ac7bc5099d8df08135eb958cdad27443b387739126ec8b769bb4d3a052b103a0007e937a5d14273e2e387ccd26805","ssdeep":"192:WMR7fANffyVkzGR7dbMBN67sDKRicaZJ7b/CFC4ZTF/Pbu+cSdxGHuRzeQCqdI:WMRfANnylR7dbMr6IDvn/CFhTtHHf6QC","tlshash":"1d22c7ddb2e0f0a153a76671c42f884ff3399516a95c64407334f4e2b9b486e826bf38","size":10227,"data":"","first_seen":"2026-08-28T20:20:00.007584Z","last_seen":"2026-10-09T17:27:54.745374Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/waitForCallsStatus-BAeZSVDK.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67b56e3dd579210d4f69e893fc032677","sha1":"9b4b3823cadb82ceef4e7788731bf0c0eb2319eb","sha256":"c91537301b63b6eac79a33b61314e8bec6dbf39432dc44930181a9b2278574b3","sha512":"6fa48081e98bfa52546f6911831f2035c0e950158e88d2ca9547315c2b09cd3147fb8efa7b9add81473216007bd3eea9ed5ff556c2c2ae378ba438286e24c574","ssdeep":"192:WzAsdZRwnRceb42/YRozmK+EQEOErEtEeENE9rEbQea1DAcGBynXeNvGUGi:KX0Ka/nmlEQEOErEtEeENE5EbQDlG8nK","tlshash":"83f1e8c5e7746072cf4cf49e60552120d6b0b518b8ad006c7ae9c55b2be98ccf9ebf29","size":8048,"data":"","first_seen":"2026-08-28T20:20:00.080546Z","last_seen":"2026-10-09T17:27:54.744767Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-MmM24a-0.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0e8f31274830514a2fc34c599fbe4c6","sha1":"9542dabf1df17bb7eeb238d09ca3c5d8fcd74d1b","sha256":"25bf0c8e710aa29ed6b083c7a5eb8be7d08cac87c4b633c83641912c0c04e02f","sha512":"2d70a7a4854234cc1f92ba4891d40aecd9e5f4f29fe3a1cc745898d4c4336f7f7578bdc2a1cadb46e8728af32ac2ac89436975bd01b098906dcbf281c53914c1","ssdeep":"768:7no6mQ769hjKJOdPIS2jgSOm5AbI+dwNFNd:7jz7Y+JOdPZ2jd5d","tlshash":"78b2c7c8b2d1f46613e7a475d02f480bf3367851781d4518f324e8f2b8b9899962bfb9","size":25501,"data":"","first_seen":"2026-08-28T20:20:00.035687Z","last_seen":"2026-10-09T17:27:54.773873Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-DzUDarxn.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f5b0cda3e9393c6c3d09449e8cd75a0","sha1":"9271fd7555d701c2cdac47e3b5c6d182ac995a47","sha256":"ae8f9d874bea18f2ddceba5a22a91e70a032d55c0fca5b1c710d6a4c05ef70ef","sha512":"fd41053134e66ebd9699c14ff1b8da92d5551af8845a80a37c4924083291503c49d7b00c77d9e4b09d943fc182c1dacc2576bd731b04473a84bdb3a77e0a6674","ssdeep":"1536:dXfZUwHBwe4hA8zx5I499r801PgQ5QZK300X:xZUwHD14P91gQ5QZIX","tlshash":"30732cea7291f06243ea50a6406b0806f33edd76585d041cf3b4d9da7ca0ad9c6b7f39","size":76199,"data":"","first_seen":"2026-08-28T20:20:00.003756Z","last_seen":"2026-10-09T17:27:54.735103Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b1e3bebeb9b534325d8280164b6e586","sha1":"ca754b1cf276955d3319131869a4116aceb081c7","sha256":"cfd204bf26395ffd7aeeb5bc454ac22fd9aff507d243edbd2413e34f74478493","sha512":"dd2bac367d2a215ae181a9f4cdf7c377cfe59c8f9ca2a3307eaec3510ae47ff5c8b94cedac5c8c92b3fca6afef1933ab002504c7927951b2728bf5a89fa496a2","ssdeep":"","tlshash":"e4d02288843e90a668b3f593224b230233b500cb0e54bc293a2dcb010f2c11f12f59cd","size":244,"data":"","first_seen":"2026-08-31T08:34:23.27788Z","last_seen":"2026-10-09T17:27:54.776201Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-CoS6E-3x.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f395e295166b24ad02144b6478f006d7","sha1":"229ca4b939bf7412c0be7cab6e1662d70647f5bf","sha256":"cce179e6001063ba572410a73c843457967a4cc88fe45a8337ade05bdcb2dd24","sha512":"e728d3764836ca46a4d48aec0ba2d602e5867cf4bdbd120a3c03a599394016d157e2837eec8b9581a2e279b488d388e40f7b71b3542b260632d29fa723a4b23e","ssdeep":"","tlshash":"22113b9436c9b029231bd420d4afc047e26bfa44455e4574e30af6d17e750bcaa6ab38","size":933,"data":"","first_seen":"2026-04-18T22:55:55.026497Z","last_seen":"2026-10-09T17:37:07.604385Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/src-cpFLh9w8.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5864d63d0ed31a2038592d4f23a23d97","sha1":"84a4f319924a81f5be5b7025146dfb3b30f90f4e","sha256":"6b2bb09712f010891f061e9be0496be450059870e279c4b6c28d35376508af27","sha512":"49cddaa9a6d14accb5ce7ea291111f6844b8bffcc74e2899a0bf4b630890e3c42beaa4116b3526bc9b12ab3ceff29de35e0796e8b1255751814019a9fef6e5ec","ssdeep":"3072:p7jAEXIXF1zdiTB9t58I4v61YXFHbPduCB85jQuyZ9:p7sEXIXF1t2or","tlshash":"24d31ba133aff121c38db256d03a1507f32c4454980ed42c7a95e5df3aed9a48aa7f39","size":134927,"data":"","first_seen":"2026-08-31T08:34:23.176089Z","last_seen":"2026-10-09T17:27:54.749649Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/react-dom-D0bYJXHM.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcfbe474855339f8e96701109cced8de","sha1":"84382e36a0b7a8fddb9921d60cc4162944f5241c","sha256":"ad42dbb1831a3a4d5937ba3e32c5336545738d7766bfe657b9037edf4f473cb2","sha512":"a30be6633d2a9df3becde0a9f05fd6a0c28bee48cbb67b309a73f68b8b272bad0da6498f2539907df7dc38d82fcb9401a8b78a2e6012a68088e94f847db41a9c","ssdeep":"3072:Kr8h5bf3LbKbv4worU0B3jo3a93AR+yei:Df/IOxc3a93zi","tlshash":"83d30bec31aab6526ba356b500af1a07733929131c0c4860b211fd9f77f644691bbfed","size":132720,"data":"","first_seen":"2026-08-28T20:20:00.10789Z","last_seen":"2026-10-09T17:27:54.771386Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/utils-DdckVfQr.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df4570c614f988f7cd32e97673436c6","sha1":"d0c4c8099e9c4d7adf49fec60681383048450693","sha256":"9da4a5844ce0c353763e535d32f12575874b8f118553a0e309f639b90a0a2188","sha512":"7acc82725eb4349d39ca8e0b6ce0ac1cb9f9aa586a2300d82cc800cc572425511b0d88f96c4916d475109b4e445eae24c4fcfaf421b50aa8e2d7ab8614f49311","ssdeep":"","tlshash":"7451218c3795f16383d719b384ab940bf0798932049c0964e254986375f9bbcc9ebd3e","size":3079,"data":"","first_seen":"2026-08-28T20:20:00.030805Z","last_seen":"2026-10-09T17:27:54.77197Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/clsx.m-CsnoUGnw.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dea32ccd32537385c3740957e757383","sha1":"2262f8f906457ecf987863aba7eed7b3ea13db29","sha256":"0a24e52bdb1f50ed77fa45341c4bd147116e9879eec6ded23c605740d7908471","sha512":"9ae16bf9528d210f4742a53c05fd304baec40c759d1cc56dd9ac864b42194e09566c1a55f15b448e1b74a53e788d8928f531aea96b561fa09641ebcfd7589ae4","ssdeep":"","tlshash":"0df0d4ec24c0e07277ee11c181b99f89d021323c47dc76295600fa7e80c46dc111fe53","size":480,"data":"","first_seen":"2026-08-28T20:20:00.016131Z","last_seen":"2026-10-09T17:27:54.736216Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/custom-9aBUr4UI.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67aadee6000b19cb2f96e1862f909d75","sha1":"18f5c21483c2f86fbe2aba9b2cc3635de8aa5d56","sha256":"71bb7d8268893043a096e4b42b4011968df8b9f78d224b87fd0b46d0de1af641","sha512":"2e5367f9f9c6664cf5e64a1aa1da821fe79d28feaac4c549187f39d5859f95bfc5e17b57e69fe493dce361c9a6d1c355f87af913880eccff2b4a3ce8ccb50ae4","ssdeep":"","tlshash":"86d02b879032b074722ade48de3fb92d8556ef0859c30cd47ee052b473a35b808a5d0d","size":270,"data":"","first_seen":"2026-08-28T20:20:00.056238Z","last_seen":"2026-10-09T17:27:54.719558Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index-CPSuwh_M.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1eac4ee9d6127ba4e473805fc5f3e2","sha1":"e570b155824a2a06a5d2e6b3f90ebe710ad0dbc7","sha256":"3ee2d7f3a1513964677aba03224621996c1ea8e491e7f61e3ac23ad4b52bcd24","sha512":"d72687792e3bdcb96cd744212831b8463df0480464f1f7b3ac9ce2088ebacef085fdd2019e172b97740cf373267a8ef1290892f62ef3517d061a2a0f2f65038a","ssdeep":"12288:NrU0VL7P3GfSmElPuPK38wbXSLmQD2B7bHhUHSu:K0VXmElP138m1UHSu","tlshash":"87653a8ab3b57422835e5a65483f100ef37db91c4c0a402cf668d8fa7da9584a77bf74","size":1427704,"data":"","first_seen":"2026-09-22T20:49:57.172049Z","last_seen":"2026-10-09T17:27:54.777831Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/Badge-DDTjNAvL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d74df20b311a22905bd0eae22b623c0d","sha1":"942eec8b5381018b94ac1880b37f84e5498d5970","sha256":"990c5d9551c1f685bdb1747a9d05cce25bdbfaf1c8d61ce3416a0600afaf7baa","sha512":"1934dd0d2b10bb585c22506d456e4d49719fd7bf173043a869a3afc0614226faec65b7c70856f6c98185b3897219fa0e544794c2d5332a844127843649543b1d","ssdeep":"","tlshash":"b8800033000ac8aa20c00c88823283228ab28383e3c2802a20c2b322030023880282a2","size":29,"data":"","first_seen":"2026-09-22T20:49:57.111107Z","last_seen":"2026-10-09T17:27:54.766237Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/safe-buffer-DvCOg_6b.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"083192bd2e8dce174eea29067ec886b0","sha1":"125e5ef8652631f465bdc524b0ca4208f1d76ad6","sha256":"127816880b95b40c02ec6f1fcaa13290dde83214c4713e0554b587bb69b4ed04","sha512":"a24ddfb62f0bd197c977963bfec4f954c1bf85b2efa7cf29a2d1bb983c3c2e0a0e480831e44ef0de0fc806e5be08cf3311e305dcff1980e33d6a6c27d530d19b","ssdeep":"1536:SEbB2RjLJNveyzlN0OIO4GG1XKKB+cFs1:t2FJET0co","tlshash":"4d637580b3b8701387ad7ea0081b604ef278fe6d585b142cb165d4f7bcba5449a6ef74","size":71637,"data":"","first_seen":"2026-08-28T20:20:00.125895Z","last_seen":"2026-10-09T17:27:54.768418Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/ConnectorUtil-CtJC0F0Y.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02c5e96c20ac932da790a0712b6f53bf","sha1":"4aa880c162378d1157f2a6a6ba554f873dc29dfd","sha256":"4a440bc0322c2d5898fa5e10b92c691db539f7f9c0f3ffa8be10a1137fca3592","sha512":"a782743b370bdd1fae60a609d359e2ef1843a28b943af18d22c9e1cc51000c3e6b7b7740c743b273b6648b8ac0d47d6772eb58db0611872f9d31598acd6d90e5","ssdeep":"96:1lakMAaao5zbSsSgM067EKTx4BPTqc/e+uaIaov4gQtc+q9KnV+WgUjg/a3:1laDAaao5zOsSgM06+TqcW+fVov6yKnl","tlshash":"8b91548463cab5317b07a154b09544f370645c54952d19edbfec81fda683fc880bdfaa","size":4522,"data":"","first_seen":"2026-08-31T08:34:23.266338Z","last_seen":"2026-10-09T17:27:54.734509Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/FavoriteButton-S07aho1F.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1383b6eac559122169853ec44ac0203e","sha1":"f3141ed7083e08117f110ad6ef1a85f2f32e06fe","sha256":"2b030cf585cde13699ef1119dfd6d14f80d0bcca0aa40463345af4fc6d6ccc35","sha512":"0f7c5498828b50f802a623ad74eb206f1cb9a6d7593b76a44b36792399f2cf3369948374a7f961ed148e28682daf12fc3c580ecf9fe80d1543410262da1b0212","ssdeep":"","tlshash":"ab3153469a5536f424574fa09122c60951ae6168bbbf06243584a8f473320f4f517ed6","size":1504,"data":"","first_seen":"2026-09-22T20:49:57.134784Z","last_seen":"2026-10-09T17:27:54.755552Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-BGh-1Oah.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"587556607e87182f1d1cb7b7056e513c","sha1":"dfb2baf1d516f05b92243b089af35fe069aececf","sha256":"289fb96532cbc06aa1c73d60eae89acea0a95c25bc2c6b1b84d30da61537c63c","sha512":"5f2e5f6f567d4e66097b3395976f58d0d192343490dba4753e311041599bf2e39ced175d5eaa8b0aad4e470dfdf7f2898e9c89f111df47242bcbb1129a4384bf","ssdeep":"768:ejpyJ/0wZheTw8h084K8m8v8R868N8y838585fKXQ8yFckBtYcad:ejpyJFTvi0M5q8BeBSqQKXQ8yVBtYck","tlshash":"8b4395d632a6f47943aac71abc282b50e330144da004553d7df5a8fbe5ca8448d6ffb6","size":55691,"data":"","first_seen":"2026-09-22T20:49:57.091918Z","last_seen":"2026-10-09T17:27:54.752839Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"setting chain datamap[actor:server1.conn0.watcher14.process7//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 preview:map[kind:Object ownProperties:map[abi:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj110 class:Array extensible:true frozen:false isError:false ownPropertyLength:26 preview:map[kind:ArrayLike length:25] sealed:false type:object] writable:true] address:map[configurable:true enumerable:true value:0xaf88d065e77c8cC2239327C5EDb3A432268e5831 writable:true] createEventFilter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj106 class:Proxy type:object] writable:true] estimateGas:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj109 class:Proxy type:object] writable:true] getEvents:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj107 class:Proxy type:object] writable:true] read:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj104 class:Proxy type:object] writable:true] simulate:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj105 class:Proxy type:object] writable:true] watchEvent:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj108 class:Proxy type:object] writable:true]] ownPropertiesLength:8] sealed:false type:object] map[type:undefined]","filename":"https://h1liquid.xyz/assets/config-BKJC_Lnd.js","line_number":1598,"column_number":547152},{"level":"debug","text":"Wallet did not respond to eth_accounts. Defaulting to prefetched accounts.Must call 'eth_requestAccounts' before other methods","filename":"https://h1liquid.xyz/assets/useActiveWallet-BdFIc7_K-DggiyHje.js","line_number":2,"column_number":63422},{"level":"debug","text":"eth_accounts for base_account:map[actor:server1.conn0.watcher14.process7//obj115 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://h1liquid.xyz/assets/useActiveWallet-BdFIc7_K-DggiyHje.js","line_number":2,"column_number":63326},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:HTTP error! status: 405","filename":"https://h1liquid.xyz/assets/dist-D0rXznZ0.js","line_number":3,"column_number":602},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:HTTP error! status: 405","filename":"https://h1liquid.xyz/assets/dist-sNckxKuW2.js","line_number":3,"column_number":597},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:HTTP error! status: 405","filename":"https://h1liquid.xyz/assets/index-CUao1WyN-C4wB_l4q.js","line_number":4,"column_number":602}]},"http":[{"url":{"schema":"https","addr":"h1liquid.xyz/charting_library_v28.5/charting_library/charting_library.js?bust=v8","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.603Z","timestamp":1791566804603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /charting_library_v28.5/charting_library/charting_library.js?bust=v8 HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xM1tT%2BONhTpDyiDP3d1bpn9DlUTNxYN9XCcgKb1Chn%2F2VNkTwqsLm%2BuyVVYfReMS%2Fm%2FNmiXr9DtJSuQXKrmfznUvudx%2BsQ9IhM3ke3Kc40nB7d2agJoGm6N%2BlH1OIq4%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"7745a16c441ffebc023ccbbb657662a1\"\r\ncf-ray: a47f1790bcff8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52851,"size_decoded":16130,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52850)","md5":"7745a16c441ffebc023ccbbb657662a1","sha1":"256d47f56bbad00ac99e014ead877a54492ac189","sha256":"70e4ea3ee98f81ff054dc61cd138b0048e12379bea2ddbf191798881b5d98cb6","sha512":"c45780e5d12d5e943dc45ef211c3a66f4fb860486f0117f35ea91437c86895a256d184d6d18bf79b936e31594565fa3e9235d996b48ea37404148513b1359200","ssdeep":"1536:/u7N7CzyNydrar6mGepcsfL1MXK99E//nvg6TK53FfS/iK:eVKm/pc9XSC","tlshash":"30332a7bed10ac7307db26f5b5bb14032231b991588a188db4a85fdc11fd88a615bf3e","first_seen":"2025-03-20T22:15:27.312338Z","last_seen":"2026-10-09T17:27:54.718765Z","times_seen":117,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/custom-9aBUr4UI.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.665Z","timestamp":1791566804665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/custom-9aBUr4UI.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FRAXXtwQbh9IyCyycKi9YaMiAkrQ%2ByK2IgzuF0Dm6OnAjY%2FlBCeZSab5zlduVxsEPvRxd3%2Fy%2BBdwZ%2BZD%2FUlQE1CHnekdYD6d%2FBclLRR%2BupR1k06oXOuWn0DGeqT9gQ%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\netag: W/\"67aadee6000b19cb2f96e1862f909d75\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17911d518deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":933,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67aadee6000b19cb2f96e1862f909d75","sha1":"18f5c21483c2f86fbe2aba9b2cc3635de8aa5d56","sha256":"71bb7d8268893043a096e4b42b4011968df8b9f78d224b87fd0b46d0de1af641","sha512":"2e5367f9f9c6664cf5e64a1aa1da821fe79d28feaac4c549187f39d5859f95bfc5e17b57e69fe493dce361c9a6d1c355f87af913880eccff2b4a3ce8ccb50ae4","ssdeep":"","tlshash":"86d02b879032b074722ade48de3fb92d8556ef0859c30cd47ee052b473a35b808a5d0d","first_seen":"2026-08-28T20:20:00.056238Z","last_seen":"2026-10-09T17:27:54.719558Z","times_seen":19,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/preload-helper-Czpn1I53.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.614Z","timestamp":1791566804614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/preload-helper-Czpn1I53.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c05GVJILQcAH7tKcRG5qpyyp1woIpuNhKz%2Bd%2B7ZxTIOAU2sni0PW8ivQHkVFirBWHP8wYq5WBeeHUPwnbWsOq2QJwoWAQWvHXf6MDXR8bY3mPc7dBlLPBaXPYc93j5M%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"7d0daf8c146c057015a6f463d2110afa\"\r\ncf-ray: a47f1790cd088deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1196,"size_decoded":1424,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1196), with no line terminators","md5":"7d0daf8c146c057015a6f463d2110afa","sha1":"b04fb92ac6915d331fc0e7eb3804d06a3312195e","sha256":"aba87f2a53e45ecdc9113fc30387d16e449d1676428cf5f82dd624c1df97d152","sha512":"d29d876b4b19ef171d0c4a34a3a1f51c6b848c75d4ef5dcb90d85fbe068fcb43049431d65830208c9d7185ce5ee6d20063718031cf3497d8aa84a1b0e9e47c99","ssdeep":"","tlshash":"212162d737c0a032034d5957e0b6f3e3eba11ce1382914549208dd926f1aee498dcf55","first_seen":"2026-07-09T15:21:19.993345Z","last_seen":"2026-10-09T20:02:55.496332Z","times_seen":2297,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/hooks.module-DV1cbjRL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.653Z","timestamp":1791566804653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/hooks.module-DV1cbjRL.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0rKycbDkOR2Ol0Hr6hvEy%2FyKLgyC0KVGWYTsj0tWpmMyfIQn2Fk4g%2F8ySpAJOlzmL14v5zkA1tTTeno81Sw82Prk5j4GlYhQfkD5zGbNRiG604aBHJ9MczWSq3Q5Ag%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"d8e0ca490e55fe4a69b17a21e06b6540\"\r\ncf-ray: a47f17910d448deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15245,"size_decoded":7242,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15245), with no line terminators","md5":"d8e0ca490e55fe4a69b17a21e06b6540","sha1":"6e114db5a96b0143624d23ff3bf401dc1ed8bbf7","sha256":"bbb2b309e1f947712d05dda2665e4d84fa26f74673f0b4483ba3f8c32de38dff","sha512":"419c593d78a0bfa10dbdca338ac007cae3aaa83348af55dfbf686007c6d8296ed21907afcb92e62af830c9bafd1ea882c8a5bd7fbaa15b87f08a5f0e1c025cd9","ssdeep":"192:W5Lghowj/NRmN54JoKqEFzC3AGs01CFVE//OFHn1vreSrXPt6PqXCXr92TtYga60:W5yJcNGmKqEdC3CJvTcqXU8/ai/fPu","tlshash":"a262faf871a4706087fa65b261bf1d4fb375585a9c8dc060b219e8e43eb680d125bfac","first_seen":"2026-08-28T20:20:00.118837Z","last_seen":"2026-10-09T17:27:54.720998Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/apple-touch-icon.png","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:45.898Z","timestamp":1791566805898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:45 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkF%2BEZw2MB4jEhFiEoSJOzv8ygpPLGcPuRqdNtlukPJkunNd8mtiSVxaWH5tgnpiwCcmEL5ON8B3YDyXu%2FgmJWFr1d4jntvVeZYOBpHVTrsN5m%2FaD%2BilhvVZwUGsKWs%3D\"}]}\r\npriority: u=6,i=?0\r\netag: \"a039e7ff5ce3ce12a8e75fd8044bea76\"\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 298\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f1798da098deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7469,"size_decoded":8156,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a039e7ff5ce3ce12a8e75fd8044bea76","sha1":"b99423dbd1b5532b3a72ca6549d102becf7e367d","sha256":"3afc37880910082a38dfa95411f9b8d8d8147f6d0ffabbcd356e907535510ed1","sha512":"0cc2490332fd9d4248f2de63aa2a8804c03a21b7e2c16afa0fcf07fb1e156349dea1b30d13b6cf22c611be4a56b4f9ac1803d169dbf252d2f1ff7bdad3c56360","ssdeep":"192:5ye0YNI6K1EC40TvzxrmF1KV0uDdd+TPEyleLmMiijS0m:ggIb1E2TvtrmH80uJd+2mDijS0m","tlshash":"c3f19f438b7e12d188aed4576f4b3a8e1329b3088545f5cb1a4fb43f56206e84ac3953","first_seen":"2024-07-12T04:40:06Z","last_seen":"2026-10-09T17:27:54.721729Z","times_seen":2292,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/parseEther-CoC_3cRp.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.662Z","timestamp":1791566804662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/parseEther-CoC_3cRp.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkzubvgFgOfS8g75GqpFzrKiZ3XR7vm1VaPO7HqHBPMzlCAvrY0iqvkW2aP5hE%2BUhAtPEUBPCL%2BqzPyhG6SgBni1QBRqZP%2BxbNmg4oC%2BQOXnQv%2BuEE2S19%2B6Qdfsjak%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\netag: W/\"0dada5d76937e6d46e34c915145f023c\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17911d4f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":1244,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (781), with no line terminators","md5":"0dada5d76937e6d46e34c915145f023c","sha1":"f2dc2b69391e79620901cde5853fbe2a406ee639","sha256":"cce7dfe43a612b72238495c6cf33b887693bb19d84b047237f2adb17c056fa8d","sha512":"bdfff684535f52e76613377172f39ebda8cdd269d3d7a8410f3a946bef51c91ada781b799f3a94a603f113079a83a6316a0730623c9aaae0807594da54f9b877","ssdeep":"","tlshash":"3b01f10ab361ab377b0766e140468567c0a4df6299cd0a4d75b042041abe98415f9c74","first_seen":"2026-08-28T20:20:00.124894Z","last_seen":"2026-10-09T17:27:54.722472Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/lit-Cut7AUVH.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.702Z","timestamp":1791566804702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/lit-Cut7AUVH.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kN%2BEWcBIq0bsf9ikCjdBJ%2FnjfPU6yuHK7HEHY%2FmT2sWCU%2FPWqu1apMWOFAggLo9C98z10j7sAT7EonuWgyZKwMJa3tAuTQ18EUocxPcntcEEY9cflWmzKd%2FTvrVvsg%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6d3bc1d6d1365829633b25730f378954\"\r\ncf-ray: a47f17916d8c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15017,"size_decoded":6866,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7517)","md5":"6d3bc1d6d1365829633b25730f378954","sha1":"2ad9a8fea653b63c392b29e38f31bdb1ed8113fa","sha256":"0e28452eabb457165cc8a2c11e8f2b853288fc192a426e2f4c1118473f9bcb05","sha512":"78e1f98cebde8bc1e8eff38f12ff52ab272cc026567578359f4334c2b093022c6554d230719a9ee25b83f41ecb94958a71dd62b25a38572b47d3e69c456c2905","ssdeep":"192:XKf5gagmpeo8Wb9u7ww9mGLi5KKolFyBjbrKYC/qYV5rMzJMlCaOvuj1AKaIO9f:XELgmQmb9unrsjHK1q0QanhAB9f","tlshash":"2362969572e9a4b35ad9c2969c32061be39130e8383d542c7678b8ef546ce42b0fdf71","first_seen":"2026-06-28T22:57:56.040411Z","last_seen":"2026-10-09T17:27:54.72311Z","times_seen":18,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/favicon-16x16.png","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:45.900Z","timestamp":1791566805900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\netag: \"430813731f507a9659f44585c56b98ce\"\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 298\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZ13blTcU90rbFRW9zsOTPIoH%2BYvN4g04x0696wXal6JT6BU4qglZqgwhKsj%2F9NMcSjIrpBxxqlXEgVAxsoiD%2FX4uPUVflPN5KlHvlIFix77%2ByDC4GuDaEoLU%2Fl6EBs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f1798da0d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 456\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456,"size_decoded":1188,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"430813731f507a9659f44585c56b98ce","sha1":"5963b8a8e95c3f3cd28bc0482adca9b5f08c79dd","sha256":"1528450e86bb1743e45c8016ace29d0725759b9a77a2c9f56cd3b41247e1d065","sha512":"d69d3b3c021e4352758b22323fdd44ac7e1b6fa4bb7e357d8afa105053f9f1b8f766a1e67eeef31e2c62853594081a890cd7bd1a5639c40fc81a4812b3d1f740","ssdeep":"","tlshash":"86f054c11ba72c73dd48662ab24f5408851b830d0a05143d2a063c15949c74c4054c8b","first_seen":"2024-07-12T04:40:09Z","last_seen":"2026-10-09T17:27:54.723715Z","times_seen":2363,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/esm-B25tgIBd.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.657Z","timestamp":1791566804657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/esm-B25tgIBd.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0OtVJrl66JlYGt3kIAoytTsPwwgogNSVxnBqkesJv2cm%2FNICykIUNesm4reTO3qfJ9kjEEc7oVu71VfPaQqcjXVXj1oa4f1%2FH75DHSTRsE%2FbXmYKXmL46XgB9v18Rg%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"1c66fd46eee69fd567d398d48a2d38cb\"\r\ncf-ray: a47f17911d478deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7837,"size_decoded":3867,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7837), with no line terminators","md5":"1c66fd46eee69fd567d398d48a2d38cb","sha1":"41b363aceec01401da46f1080033f31b40704c67","sha256":"420616ddb1b74b5d750928c20a22aebf6590a8fe4577dc8acc298cdf183aeefb","sha512":"06339af66ad3e881cb821f21cb56c46ece28a06221aa1845b9b36d119192f836477e2034c30d43fe91ba24f8dca55891b0a105764f467359dffd175a51f696df","ssdeep":"96:gmk09sGENT6eBOdXp4qtqbMz0DBXZ4u0lTj/nHDtg4laiaDa95apXBSvPwo4jRDC:f4+6clehCjWahuRDay7i1","tlshash":"c8f1c5eafbd0f01e539a555748cf0049f6bc8a5a885c4548f6440a6b7af0af0c9e7f19","first_seen":"2026-08-28T20:20:00.153304Z","last_seen":"2026-10-09T17:27:54.724355Z","times_seen":19,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.885Z","timestamp":1791566808885,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://h1liquid.xyz/\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/images/logo-privy.svg","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.842Z","timestamp":1791566804842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /images/logo-privy.svg HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMWRAc8a78WjG4df3fNLZDoKrtAgQyw1dUSJvk56fAvX5zXpA%2F89%2BzwRIAaqr%2FRlDAlRmnxUOaVRgpfU7oYJ8J2IN8jlP3dhNUjxdKZBj%2BsdRhS6N8HdPih4flIyGEM%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"766f2387956b714ed1187970e6e993a9\"\r\ncf-ray: a47f17923e048deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7389,"size_decoded":3915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766f2387956b714ed1187970e6e993a9","sha1":"e84d850478d7cf66241b7789eb6361e79cf25a71","sha256":"639d8879178dcef27c985ebc8a8682fd45fe70642948aad298a3f827d0f3119d","sha512":"b0542709b9c518694be9b86d3cb2473d73595ade80ca898c62f6c39c201cd148fcad56b9e1ea6c43bb5252e2a8fcace1e5f385531b2a880c4ca3bbf98a92caa6","ssdeep":"192:niL+w9lkDvs9r5VoGGckX7NoBpJKPPzruVvx17avPz:niL+KlkDmYL6BpYnzq/Vaz","tlshash":"6ae1d6fa35a453e8c502e3f1ee17b4696e6f28fa3bc042a6c360ed9567250798d4ccc0","first_seen":"2024-12-21T19:32:48.64242Z","last_seen":"2026-10-09T17:27:54.725559Z","times_seen":365,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/_esm-C_nWy398.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.619Z","timestamp":1791566804619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/_esm-C_nWy398.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2Fh84FXOlQE2WCRlWJA%2BOARs7A9vjnz6JXLkC9FOcxrpbTFe2o5Vy9mEzDxXHXzEkfefuJAP0Jf6JTsdGpZ%2FDjtcIuI7jzHKif6hqIg%2F5hAMH96XMeKZA89pdMR2hHI%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"1a6bddf9a8fc0809fc601828344a7f22\"\r\ncf-ray: a47f1790dd198deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111549,"size_decoded":34951,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"1a6bddf9a8fc0809fc601828344a7f22","sha1":"f6db659468e037b57648ff29e6dad8c77f41d27f","sha256":"f1bc8aabf78c87b9225e1c521f1281b743530b36ca7e4bb2437585dea3a784ea","sha512":"e39df8865d8ca3c03441811e196e445e2475d474a5e4b6518795ed4662b2dfc27664ad6674dd00ed379ae99a825eed3ad0fdc26a06e87d72d51fb29ea0360046","ssdeep":"3072:WZ26r5DOwfKpNo7KCZTloLKXj2FjR2uZsSFnhXrMKp7KFJA:qXr5DOwfKpRCZTloLKuV2uZsSZhXrMKp","tlshash":"f4b30cd1b379b07283dea16950571000f278e994e81d0069f7a5d8bb3fe6c4c96ebf29","first_seen":"2026-08-28T20:20:00.059598Z","last_seen":"2026-10-09T17:27:54.726137Z","times_seen":19,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/fallback-DSSCfTcf.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.672Z","timestamp":1791566804672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/fallback-DSSCfTcf.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EYg8ddqS1YwUYx%2B3tCkAKaC%2BBBqkE5LslwUuLZ6XWCQaFT%2BYITuIzepEE4TtapJx0Hcmue%2Bv7z21SDSXbT%2Bbspfst3unxAKoSkrz4czdsgJcFL8BpqRJDESGOf62Vo%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"e2f5653ead622a05a8cbe9ca7150babc\"\r\ncf-ray: a47f17912d588deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1985,"size_decoded":1759,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1985), with no line terminators","md5":"e2f5653ead622a05a8cbe9ca7150babc","sha1":"6bc193f9e5657a24871fcf7729accc1e72209a72","sha256":"89871e4107a3ae68792dafcd42793d659d9dd0c9932c5b6dde0002168ab8d4f3","sha512":"35cd86bea09d3c95b10acda8432b777d9185c5e4e53b48aec3fc5988fd9333d8e407aada918cbf366767930cd83e9ed6770e83db157478d29cc3547a11104989","ssdeep":"","tlshash":"684183c3e7a7a06192dac01ac5a6614da31d9c006986048abf4047db794a634adcef0d","first_seen":"2026-08-28T20:20:00.011744Z","last_seen":"2026-10-09T17:27:54.726681Z","times_seen":18,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/WebCryptoP256-CknDIIUL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.696Z","timestamp":1791566804696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/WebCryptoP256-CknDIIUL.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=of6LPRpUPGcTsVoH1nzSGlnt4qKjvMPvDKhPhY5WVcp3llhTPqeQsOLuRE3YonprhXQNBZtLQLrmo0jRtZgDfES38gCevAvuvOT12msKI43d5pTvPObq7BY4KdT2Ffg%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"4e9c12ab1189015744250ae51b7a9290\"\r\ncf-ray: a47f17915d828deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90801,"size_decoded":27351,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (24598)","md5":"4e9c12ab1189015744250ae51b7a9290","sha1":"3dca9cf947c20d799d8707f504a95f6366e40ece","sha256":"3be588b71fadeec9e37d80ffcde4f8cdcc68de35a81fbb03e6cbd5cd37addf9d","sha512":"294c1b3d6e354df5433cf809a060011bbd9cc992ae16eae3be4890419960a2dfeaed99abaa80565f42016b1706d49e7cbf953a349a140773ea48edff735215c2","ssdeep":"1536:gze8MTLRlydYXOgxg0Wj9apZ2jWFcZoorEO0SmWq1T:ieVTseq/WFp9Wq5","tlshash":"e493f9d56295b0a28ff6a1ea51138000f174e961ccddc805f3f4e8b63ee998987e9f35","first_seen":"2026-08-28T20:20:00.050407Z","last_seen":"2026-10-09T17:27:54.72722Z","times_seen":16,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/utils-Bpv4vmSW.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.612Z","timestamp":1791566804612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/utils-Bpv4vmSW.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOlcYm3sjLHUNs%2B3Oa93nY22AG7wpo%2FypnDeOAuO3IbX%2FcF8vqn8FaVRewLpriH2QjzfrHSd8k9pjmCkkSakKdevCaNkuUfY%2FtlsHmMaI%2BTcW42i6oCJFAbiSbSvZIU%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"ab0616d0a3faf2cf078e3317d3e4be24\"\r\ncf-ray: a47f1790cd078deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2194,"size_decoded":1753,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2194), with no line terminators","md5":"ab0616d0a3faf2cf078e3317d3e4be24","sha1":"51e3923f7c2b2fdbbc360edf1632287424a64ef3","sha256":"5114638bb111b647e478a947be5beed5558487685dc8284144566df3fc03d851","sha512":"f65c5e6b008490b80682f0259cea0d080edf32376916befa084ca08c6e19d628cc060ed2f6329f7495f8d6ded0d9cc75229f3a2cc4bd7d30f81cd531d49d870a","ssdeep":"","tlshash":"1641218c3795f073839b25b284ab940ff0394932455c0964e254d8a7b9f9bbc8adfd1e","first_seen":"2026-08-02T04:18:49.593692Z","last_seen":"2026-10-09T17:27:54.727884Z","times_seen":125,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/images/blob.svg","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.841Z","timestamp":1791566804841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /images/blob.svg HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FvdDC51CMbuhPSE1R5lfUWlg1CB40C%2Ff%2FtR7qjHNigCtuksGHUycvK%2FsXeMysE21I6wVLosMHeOtJX5IxVu7pCPTG5pENnNh2mG%2FgsV987o7VDAkgAqjGhZqydqrYY%3D\"}]}\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\netag: W/\"7a2a182d39aaa114c0821cf84beb2049\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17923e018deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":1129,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a2a182d39aaa114c0821cf84beb2049","sha1":"c15ab65dd1ac7bdf3d1a24328601e9265b80e949","sha256":"3f2ce77f23ca1c8f506c6387d418c25076f1d19d3d4e99c90ec4ad16b30388c3","sha512":"031972ae6492aef34e9cdc73506afd3a65fc29455bad852afe70b7ac427273bd08e950401b36560981d61bc4330a2dfca39214c9569670aedd3848e28991f2eb","ssdeep":"","tlshash":"20f0d37af21889d3c608dfe0979954661b0be5f20a40c4ae47405985f49521e45d6cd6","first_seen":"2025-09-23T03:58:38.555369Z","last_seen":"2026-10-09T17:27:54.733052Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:26:43.972Z","timestamp":1791566803972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0NEVggnk5hHMuiAgA%2FZOROLXe5jILv87EmnZ%2Bhy5K%2BtdCSdaX10pZ72OC0a8kWu8gJNGqa50DGM7KMAdR1JrkgSfRP8TquehLFP2AvMOb3mdRTiqSQMk7SFTHR%2B4V0%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f178cfa978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91622,"size_decoded":12760,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (40342), with CRLF, LF line terminators","md5":"fd2afca19e465e156298d190de264663","sha1":"235546dddf6abcf2754df56eab15a7f4fd382d34","sha256":"31cbf87d6c22589d809455164c067c880f431fcb7fbf54c322b59502ee84bccf","sha512":"9c6a0029d060e31f69f23ba1703d9035d9ea50ed86505fa621d00ae2997fc66697907f1bb25c63fe4b8cc73dce06aab99f2137de9f2ca9e6558403412f94eaa5","ssdeep":"768:UurcGIksJ07GoMCzWfgmd9yxMoK1nUeg1E/yFdz06xltB62LTnPPgz5GP3UcQwMM:UurcGvNGoMQWfvm","tlshash":"539378b48254265e451377c8f431b7ae721372bed6c70adce3b562916facdf08c09896","first_seen":"2026-10-09T17:23:36.353828Z","last_seen":"2026-10-09T17:27:54.733691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":391,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/ConnectorUtil-CtJC0F0Y.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.707Z","timestamp":1791566804707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/ConnectorUtil-CtJC0F0Y.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=381W73tED6yFSImbod1rCZDYukd0fs%2BdiZXf2NODH3aneRrkcP7tCawkSeVBp7WihYxg13VvmfcPSSHiM148O1c8Y0I9aJk7w2Tn11oJP5jCssJlpnXwRjO%2B6Dni%2BZg%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"02c5e96c20ac932da790a0712b6f53bf\"\r\ncf-ray: a47f17916d908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4522,"size_decoded":2640,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4522), with no line terminators","md5":"02c5e96c20ac932da790a0712b6f53bf","sha1":"4aa880c162378d1157f2a6a6ba554f873dc29dfd","sha256":"4a440bc0322c2d5898fa5e10b92c691db539f7f9c0f3ffa8be10a1137fca3592","sha512":"a782743b370bdd1fae60a609d359e2ef1843a28b943af18d22c9e1cc51000c3e6b7b7740c743b273b6648b8ac0d47d6772eb58db0611872f9d31598acd6d90e5","ssdeep":"96:1lakMAaao5zbSsSgM067EKTx4BPTqc/e+uaIaov4gQtc+q9KnV+WgUjg/a3:1laDAaao5zOsSgM06+TqcW+fVov6yKnl","tlshash":"8b91548463cab5317b07a154b09544f370645c54952d19edbfec81fda683fc880bdfaa","first_seen":"2026-08-31T08:34:23.266338Z","last_seen":"2026-10-09T17:27:54.734509Z","times_seen":14,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-DzUDarxn.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.636Z","timestamp":1791566804636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index.es-DzUDarxn.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaD14YxzGRAm4YF1Rby7YXWcpBNv7C598w9OYnhGCf22geC3fIYvVfwJc5MNeqVu4XyrO0ihZtragnDsfRIAKoBY9Mca%2FGcYhW%2FlNbTPHEbauVOXB7QaKx%2FQPHqOkew%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6f5b0cda3e9393c6c3d09449e8cd75a0\"\r\ncf-ray: a47f1790fd2b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76199,"size_decoded":27690,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64046), with no line terminators","md5":"6f5b0cda3e9393c6c3d09449e8cd75a0","sha1":"9271fd7555d701c2cdac47e3b5c6d182ac995a47","sha256":"ae8f9d874bea18f2ddceba5a22a91e70a032d55c0fca5b1c710d6a4c05ef70ef","sha512":"fd41053134e66ebd9699c14ff1b8da92d5551af8845a80a37c4924083291503c49d7b00c77d9e4b09d943fc182c1dacc2576bd731b04473a84bdb3a77e0a6674","ssdeep":"1536:dXfZUwHBwe4hA8zx5I499r801PgQ5QZK300X:xZUwHD14P91gQ5QZIX","tlshash":"30732cea7291f06243ea50a6406b0806f33edd76585d041cf3b4d9da7ca0ad9c6b7f39","first_seen":"2026-08-28T20:20:00.003756Z","last_seen":"2026-10-09T17:27:54.735103Z","times_seen":19,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/inject.css","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.593Z","timestamp":1791566804593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /inject.css HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ildXME5c4YLmmxtiy66QAqREGSd%2BjxrFESiMir4Pd9m6hLZ5OjcFwJCrh76I3iYJdkSj9GaYO%2FVf5a20PIheYAt0OmZ6KwCyzMZC1WYjFjBiACT3l8RRSMeCxKFrqBs%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"2e34ad65f7d028794ec6b14be9b0e181\"\r\ncf-ray: a47f1790acf68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2852,"size_decoded":1747,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"2e34ad65f7d028794ec6b14be9b0e181","sha1":"2b1ae8c8b7495ab56295ce90a41c716faaaaea20","sha256":"235244f2469bdd040b533206c46eb2193e02889aded73c6727e33afdeffd36f1","sha512":"27f76b6623fb04d788655d6c8fc976a25e9f2acbf4d1a85d86f322aa801bce12b32ada42ebec5316cc667ccd303e545260e560cc9132ad1a0a7a73b618e254a5","ssdeep":"","tlshash":"0c51e17786dc612342be03837397e7babd766011ef983e6928e4b31807455e75824bb4","first_seen":"2026-09-22T20:49:57.06611Z","last_seen":"2026-10-09T17:27:54.735682Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/clsx.m-CsnoUGnw.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.650Z","timestamp":1791566804650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/clsx.m-CsnoUGnw.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHdcCiS%2Fio2F0tmz0tSlhnJVcPowjf4D%2BxOUF7LWsHPHzByU69s1uRT2utBXIZuZow0dVNVfCLD%2Fj4JTkWo5GfTv1ALKC5J69%2Fy5T9iGh4fEHH3l91rGadEd3lOrlFo%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\netag: W/\"2dea32ccd32537385c3740957e757383\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17910d3e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":1044,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (480), with no line terminators","md5":"2dea32ccd32537385c3740957e757383","sha1":"2262f8f906457ecf987863aba7eed7b3ea13db29","sha256":"0a24e52bdb1f50ed77fa45341c4bd147116e9879eec6ded23c605740d7908471","sha512":"9ae16bf9528d210f4742a53c05fd304baec40c759d1cc56dd9ac864b42194e09566c1a55f15b448e1b74a53e788d8928f531aea96b561fa09641ebcfd7589ae4","ssdeep":"","tlshash":"0df0d4ec24c0e07277ee11c181b99f89d021323c47dc76295600fa7e80c46dc111fe53","first_seen":"2026-08-28T20:20:00.016131Z","last_seen":"2026-10-09T17:27:54.736216Z","times_seen":19,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/series-B1RbB_xp.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.681Z","timestamp":1791566804681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/series-B1RbB_xp.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxKcz3Is0as3rh00BT2xLShf3v8aUiA6dghNX%2Fev6rKxhp%2F4qg%2Bw%2B%2F16bUHvaNW0TF75fEBA%2F54q4SWhetRaVwcWjOwRbziYmGH92jHTTUf%2BV4q4t3izyRcJPvAEEtw%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"f9103f2061c30c32f9ad6f57f82f2371\"\r\ncf-ray: a47f17913d668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33695,"size_decoded":14221,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (17295)","md5":"f9103f2061c30c32f9ad6f57f82f2371","sha1":"b612907cbc6be54187446f565c2408c758a66db6","sha256":"7b5afefec4fd41ba3f566885191761f41f47c71414d8b9ebb397a23d75c60ab1","sha512":"2fd5f0210e35c8d0779e652169c8ec9c81c27374379f0bef9faec511442e0f3f7770cb379ed03f2fa45dc51497cb5449a5a21d5524d5f364a4693af868444b10","ssdeep":"768:xtjo/x5+FD3lmIz2VAvxN3C7++/Z+hV7J:xtjoDKD3l/bvxNS73/+F","tlshash":"62e23b67f2b43a71a29f9eda8077c20db7ae5010d40955b4fe228c4c39618d171d7fb9","first_seen":"2026-09-22T20:49:57.0443Z","last_seen":"2026-10-09T17:27:54.736885Z","times_seen":3,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index-CPSuwh_M.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.605Z","timestamp":1791566804605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index-CPSuwh_M.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FprbRv0%2BIPnhXQ2%2BZ5Z9nYkbPbAszGJqQS56%2FjZeQ%2FFZ6nb8NrYl9U5rlYP%2Brc%2FHJFEWhVfe%2F6ZIHRZawtGDoe1i%2FliR4OxEjrw6W0nQ96qFhvzYTNrkHm9Jt2p7DQ%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:35 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"4b1eac4ee9d6127ba4e473805fc5f3e2\"\r\ncf-ray: a47f1790cd028deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427704,"size_decoded":331773,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60580)","md5":"82c390b976a05275b67c1fc4d825de04","sha1":"f745cedc83056231ceb2aa96a732b96682e94b2e","sha256":"511b90e2d06f6702575e1cd113ffe20ba895136fe948aa8724287dfe4b64dbfb","sha512":"60f68e19130965fc4de69f5c500666593ce379952de5fb096f4867c6ce33038895d47ba578a3aa79cee972f18793fd495ef14b37be8aa38ed17375c81f709928","ssdeep":"6144:ekjvO2YIqJ0W2LY0Gywh4WwlBqCfXf92SJa+b6CZzm/se2lREQbWWq4lWtYGVqcV:NrU0VL7P3GfSmElPuPK38wbXSn","tlshash":"052509c9b2b47412835e6e61082f644ef379fa1c4c0b402cb625d8fa7daa545a73bf74","first_seen":"2026-09-22T20:49:57.123715Z","last_seen":"2026-10-09T17:27:54.737636Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/trigger-BhKAUSZw.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.655Z","timestamp":1791566804655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/trigger-BhKAUSZw.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oatuscl6MaXnL6nfPJB%2BcCjgItZum7OcmYKCTubqRWrgLP3fOa29PlXtjq1x8ENCCXOEyKNDaB4y5mLGqGFDCygPbgKDi2Y88Gg%2BNO3mjh8OGyaa5yYLS6vOaW%2BzYeA%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\netag: W/\"9f6c108150f6073a53f2c9241b438508\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17910d458deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630,"size_decoded":1035,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (630), with no line terminators","md5":"9f6c108150f6073a53f2c9241b438508","sha1":"8ff30e57419a536b13604286e0556c4044d9f85a","sha256":"bfacf9afc9d8576cbcfdce7cf1966f60fc5e7a9a151eeac3ba0e292cb0de59f9","sha512":"d44c73a7515730a97ea44950a159c58312365461a6646fbc7604eea631c9f0493fb3b4ca94333d6200852e99f751a446a0b32403334759b44dc69d378c9b0586","ssdeep":"","tlshash":"66f086f41517b875456d1b9bf613f795343214883a433886a63c95593020b87f658bda","first_seen":"2026-08-28T20:20:00.023419Z","last_seen":"2026-10-09T17:27:54.738387Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/ccip-DA1sy2b1.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.616Z","timestamp":1791566804616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/ccip-DA1sy2b1.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yk2m4ucum8wXUGqjKPm96fP%2Bfekd5tUBE1O1Ua320vy%2FO2a27R3MmBIZ%2FoOmQoICR92oqiZK8bBmP5BuZJX2ONGvywftvaOzkNyS%2B0Y7DX%2FCxcDLNkwrV%2B0clp8G32c%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"ea33ab5c90e2aaca02fffb7677b2ecb4\"\r\ncf-ray: a47f1790dd158deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106649,"size_decoded":31573,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20509)","md5":"ea33ab5c90e2aaca02fffb7677b2ecb4","sha1":"35694619dcf7a2d6a845c04541973509786d91e6","sha256":"738fec8eafd6d2f6d3fb1dad86a7c8e4568717f7c88a9905d6ae8e05cbd161f5","sha512":"6588a2eb260da103f18b150a891531c6eaaf72951373f7b2580be3e48aea4202501762dc8adbada5974a45d313b1b162a7e193da1bed4f641b6e8879d7e90a7b","ssdeep":"1536:gtIy4LU1CEJgXaUl0zvxWiw8kcic+HMbTv5VpG6CO/X:ebAK+HUKO/X","tlshash":"baa3eba5bb5471f2dae6c5a5605b3010f135f9e2d58c0058b2a8f8f63fe6c984addf20","first_seen":"2026-08-28T20:20:00.010592Z","last_seen":"2026-10-09T17:27:54.739527Z","times_seen":19,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-B3-21qHn.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.624Z","timestamp":1791566804624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/dist-B3-21qHn.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WO0XbfDSKdOtCm9Hp64T80EuJOrvecLVqe8C8bPO2ga1Oa1wepsMkVjKN%2F8XbNcLsbYzCPitZVcA49VKj%2FdSJ11WCE0xvAwZQa54XyLmc28liIRywdrW%2Bul1Wjz80uQ%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 301\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"7e767b70e3f0235e890b20dc07634b11\"\r\ncf-ray: a47f1790dd1c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1193,"size_decoded":1371,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1193), with no line terminators","md5":"7e767b70e3f0235e890b20dc07634b11","sha1":"97f4dd96592efaa4a7310dedfd8e7e990dff80a4","sha256":"f025101c16b844dfbfa4effab1be7dd67f127129e82944d4931d223ef9d8bf87","sha512":"244c1cd22813d940a0128b4de84595d70976a6de2261dcdd16c32cb43a5b466056af83065123e2b6698a61afbcdefa3b3f1ded4e1e5c27054d756e51cfc2db79","ssdeep":"","tlshash":"bf21fbe3b2e3f05943dc527449352e20f86c0860ec0d66d6e0c4a065ecba995f2b7f88","first_seen":"2026-08-28T20:20:00.022519Z","last_seen":"2026-10-09T17:27:54.740281Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/construct-url-BRCVK0XS.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.658Z","timestamp":1791566804658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/construct-url-BRCVK0XS.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UG9ksKEA9UB7ZjRhjtf7fj1QLk1jQatoqVvNXK621%2BTxXVKXkD9w2iuoHUJqqZ4j7Fg4kw%2FBrLGy96hZoaK2k60s%2BwAvBvhq%2FtC9pHMuuBMa97Dn1WRf4MuBvX4WqPE%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\netag: W/\"48fe03e66ad4a84da3fe900353fe13d8\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17911d4a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":969,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (319), with no line terminators","md5":"48fe03e66ad4a84da3fe900353fe13d8","sha1":"ad7b0111fc10da54406262ddd96d51fdb1e2b52b","sha256":"506e80ba010885e87a5248022476256e327b1ad8dfb87ff2f5a947d9f41f6ec9","sha512":"a49a3cd35c0351ff2cf3c1ed2929f271a998ecadd80811e85e5fd1fe42ca2ce068fa55a4307a57886a38431ac7a3173fa559674b1f7ce930a7ad7688c237ccd1","ssdeep":"","tlshash":"dbe0c680a7e0a2cf20b243c2e7458ce2fb80a1a1190270d211ed202e402ee97008dfb0","first_seen":"2026-04-12T21:47:54.737265Z","last_seen":"2026-10-09T17:27:54.740919Z","times_seen":109,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/config-BjFIFa1T.css","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.597Z","timestamp":1791566804597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/config-BjFIFa1T.css HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTey%2Bdi%2Bv7ssgy%2FDiqI7lapdfSACAtZNvvECr%2FDCq44pYKa4uj7NKLOTG6KSLnHVKM1PBF01td02TRhvegXxdMvfuq5WW4z0rguKtSlLtcgGKMYC9bXRepe2f89Kjnw%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"95f63aadb70874f3d72d27adb89ca76c\"\r\ncf-ray: a47f1790bcf98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24757,"size_decoded":6623,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (24756)","md5":"95f63aadb70874f3d72d27adb89ca76c","sha1":"da83dd6f0d190b6e3db56325184afbd84e072496","sha256":"2c3f7a0117aaa7e707075fc597467770de933c4abc4647faa017b8be06413b7f","sha512":"7e303bde7c497618957485e038c2a65cd78075dfa77199814764777ebed0db0f6eabfe6a0accc65cdc2ddde3d0f446ccb33eaeaec1f1bd1fa1988854978b15c8","ssdeep":"384:DT+BKhJ+QE3NUFrsoQmWuHQ4OwFLJaBSsGb2gcMlZ/Ja:DT+BQ/ZFrso5vrLHsGplZ/Ja","tlshash":"39b29665e351623aff6bd970a689faee20546112ca3343ecf5d2e33085cf5a31a71e44","first_seen":"2026-09-14T13:15:58.568818Z","last_seen":"2026-10-09T17:27:54.741492Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/useWallets-3r4yfFNg-DR-InllO.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.640Z","timestamp":1791566804640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/useWallets-3r4yfFNg-DR-InllO.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aD%2FDSnEBj%2FDFosFqVzwmPb%2FgeLv2jRwhbi%2BcyvAhKtN20QEHbp1BOHLdSwfQ%2B3ZQL845Fak6y%2BTvRuS0OOdJ5WynQZ2xci1afvHgDIWjfm%2FQqMQAc196aX1cFsOIC6E%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\netag: W/\"f4c35a83bd25e876a6004bc85f412c45\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f1790fd318deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":1187,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (765), with no line terminators","md5":"f4c35a83bd25e876a6004bc85f412c45","sha1":"55bd20bfbd6d7779d5b4fd9d169c11ff55ce9306","sha256":"0d96e588074dd9823cf201b68f5923f617dabb659848638d713c8ad0db8511c9","sha512":"39fa0d7a72377dbc07cd4c14ced6f05038120159b14ce1a142e7762fe9295fbc4c486f385e0fee9f1a41706e0a86278e4150043d2737e4b5685c7a4ac5693671","ssdeep":"","tlshash":"8801757c150813b132d46b27b2307cf2d2243698520c4209e6986663f3f1444e82ac62","first_seen":"2026-08-28T20:20:00.06543Z","last_seen":"2026-10-09T17:27:54.742095Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/LineChart-CAqvmFP3.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.674Z","timestamp":1791566804674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/LineChart-CAqvmFP3.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OKoXE%2BHUIQR2HlSXVfl6TRRKywjTLuE%2FiNI%2Fev7EJ93GyNq%2Fj8MCaI%2FtrRrRrXGdksJLYTizi32z3Ju5ErYLDExlQKj9s%2B7GGJlS%2FFfe94UPA%2BKcjb%2BoOojxok3Eg4%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"f0829813701d403439c06975da02872f\"\r\ncf-ray: a47f17912d5b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367248,"size_decoded":97440,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46659)","md5":"f0829813701d403439c06975da02872f","sha1":"2b6c7745158904488fbab6b56e2a82dfae9d09ec","sha256":"8eeebe2f0d6d89edad92dcbae4d4fb2cf200f6589361c51dc6c057a543d8aeab","sha512":"103cb5f310db49969ca1377f876100a724af8681d9002ac9c815c697e355ca79fb4c7f62617c4143ad63480fcda7377850de636dc584d3c8d8af7d795153f304","ssdeep":"3072:uZdX9gsbQIrcoQbFp5sl1fv6xVqjQStko8K5VwiufThtAeHcgwRh:u/X9gs0Irubtsz6xVqPfcvAOcgwP","tlshash":"6174f8c872d5f0a553929172403f680bf3396c549c5da054f232e8e97db984e92bbf3a","first_seen":"2026-09-22T20:49:57.090534Z","last_seen":"2026-10-09T17:27:54.742737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/browser-CVrmIXXt.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.685Z","timestamp":1791566804685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/browser-CVrmIXXt.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTniFFc4H4U1Wewq3%2F15H0QN5EfEJyvCwlW13eLMZEQ9iKeJLUKo1TCHht8VOFrgVQdMdlJvIu0OK2khLhplpM8Qx5p34vD2bJgQG5hdptgyzrGMeT4XlcQk9WBag%2Bc%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"88ec0df820e0067cbbb5c92b11ea5183\"\r\ncf-ray: a47f17914d718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5417,"size_decoded":3002,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5417), with no line terminators","md5":"88ec0df820e0067cbbb5c92b11ea5183","sha1":"7fbe402333b2cd4f46cea4f5a04d985f77245b44","sha256":"09ba49ba226e10bc0893bb1816582d3ca30b2aec574316be3987845518a89e4a","sha512":"ace1de3110d44927f8f6647e790a0c43364b4428d7efce9674628e14f58bea2e2af27a866b47273322937192291da9971f48072f689a1beedae46290086b1927","ssdeep":"96:SB3Y1idP5d9qMNodyjsydJL8iKViGka15um0eBQm3u4y0xxfj3a3kmJf/:SacdHhofyRKVJx0EX3PUUm1/","tlshash":"72b171ed77e6fd6342a56194887f0081b33844aa10ac64c4f244edf678a14dc5f66e7e","first_seen":"2026-08-28T20:20:00.01738Z","last_seen":"2026-10-09T17:27:54.743432Z","times_seen":18,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/waitForCallsStatus-BAeZSVDK.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.626Z","timestamp":1791566804626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/waitForCallsStatus-BAeZSVDK.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnIc%2BEaohHx3qnoGuLcqLQSchIqKNmEgcXZtufuLy8yNCVHG0tlJ4gVicOmrIksQEkiY%2BMSK0g0jg0IQCWRPdYR8YPCK1w0j0RLvmwjeMLWmDssKHLx0fUSFp3GePyk%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"67b56e3dd579210d4f69e893fc032677\"\r\ncf-ray: a47f1790ed1f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8048,"size_decoded":4089,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7255)","md5":"67b56e3dd579210d4f69e893fc032677","sha1":"9b4b3823cadb82ceef4e7788731bf0c0eb2319eb","sha256":"c91537301b63b6eac79a33b61314e8bec6dbf39432dc44930181a9b2278574b3","sha512":"6fa48081e98bfa52546f6911831f2035c0e950158e88d2ca9547315c2b09cd3147fb8efa7b9add81473216007bd3eea9ed5ff556c2c2ae378ba438286e24c574","ssdeep":"192:WzAsdZRwnRceb42/YRozmK+EQEOErEtEeENE9rEbQea1DAcGBynXeNvGUGi:KX0Ka/nmlEQEOErEtEeENE5EbQDlG8nK","tlshash":"83f1e8c5e7746072cf4cf49e60552120d6b0b518b8ad006c7ae9c55b2be98ccf9ebf29","first_seen":"2026-08-28T20:20:00.080546Z","last_seen":"2026-10-09T17:27:54.744767Z","times_seen":19,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/tslib.es6-DWjEJTj2.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.622Z","timestamp":1791566804622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/tslib.es6-DWjEJTj2.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFuhVRVYawOgdBmlyszi%2FYLtRaWppeYlyMFd3BSZN5aSRc5YxNc3eGN%2BOl6BAp3gy6QHun0vx1bN9viBpoodkvYJYNeQNGaNBJb%2B3zxC7oCHya4BIfwFQ48OCqtOQZM%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6b9484f3e36799f007f6662a3a6a6bd3\"\r\ncf-ray: a47f1790dd1b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10227,"size_decoded":4656,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10227), with no line terminators","md5":"6b9484f3e36799f007f6662a3a6a6bd3","sha1":"bf93adff9dbcd0fcce21ccd7a0daf03d60e8937d","sha256":"32ee4ff4d0b6bf2889e1cfb52068d5394be77b190c389c338f717e0160552302","sha512":"0e72362ee27389faef7ccec8a1f5e77fbd1ac7bc5099d8df08135eb958cdad27443b387739126ec8b769bb4d3a052b103a0007e937a5d14273e2e387ccd26805","ssdeep":"192:WMR7fANffyVkzGR7dbMBN67sDKRicaZJ7b/CFC4ZTF/Pbu+cSdxGHuRzeQCqdI:WMRfANnylR7dbMr6IDvn/CFhTtHHf6QC","tlshash":"1d22c7ddb2e0f0a153a76671c42f884ff3399516a95c64407334f4e2b9b486e826bf38","first_seen":"2026-08-28T20:20:00.007584Z","last_seen":"2026-10-09T17:27:54.745374Z","times_seen":19,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/core-DbOVPjVG.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.698Z","timestamp":1791566804698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/core-DbOVPjVG.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZs0hQPpJMT1SduFG56JtEtxnsomOW8%2BYxBJC2YNFTI5MgaawHCbPucytPcWHD%2FfDa8guGdNlgaWRiE5mijraQt9VEc8sDt7OBa9kgM0%2F6fX8TlIlUpxpGpqFxQj5o8%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"d2e008bd83602bdf4bde51e400c3dee5\"\r\ncf-ray: a47f17915d838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334054,"size_decoded":93203,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"d2e008bd83602bdf4bde51e400c3dee5","sha1":"06336acebc3516c37e05c75604b563bb3292f2f6","sha256":"a78687b3a70d49ab4b806b9d514816fbed4b6bf2a92cab3e253ab8380a0804e1","sha512":"71817611696a1d0734c93449a5c8c684a3c4b8cf672b5bd6a695b15c320e26b24257794fddc08ff848dd9e1816c5c39f08fe8aba7baabd3c7043a2f9daecfa3a","ssdeep":"6144:BjfZGPWD9UtZLUT4mQoKDvto0t0jg0f74aa:BdGYUtRRwff74f","tlshash":"d9644d527366f43643ddc25aa8352600f3399898240a443dbeac7cefeac94845a7ff71","first_seen":"2026-09-22T20:49:57.121402Z","last_seen":"2026-10-09T17:27:54.746003Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/secp256k1-CVTd387I.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.617Z","timestamp":1791566804617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/secp256k1-CVTd387I.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il5N6TDE0hYFEB0vvlMgqkce0e5W2d%2FxxE09sTiUW67HAydxeXKydbRko%2Bhl%2FaDLlbPRT7Rm8CHaCvxIlig0Fvkxkeafdut7xgaboR3TF3dBhurZZ41pCB2PLx0W5HI%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"0ef756abe88ee117246f49b2bf15862a\"\r\ncf-ray: a47f1790dd168deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29927,"size_decoded":13152,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29927), with no line terminators","md5":"0ef756abe88ee117246f49b2bf15862a","sha1":"d6ee6251aa32bbed90268bbaaf1b5770d91e8cf4","sha256":"d021e72bc6f64e6fb2623019d09b79eefbf47482ca6269ac4582a5bb8bc3b95a","sha512":"8d1d1cbfafeab49363e04dc57a0bd4e11e914fbf441f7ddf64bd45bbff7824fc86754af11a9d157b4e3f4c40a38449ed5996f6811ec5bf14f1c3c78add96c32e","ssdeep":"384:gSxP2UOb7tHpRA5Oa9QcZ9iNfKDi6+iCYknO30qVWUhEzFMbyjEtoEqKbXwvxvkR:gO2fJsbiNfrjEWLzy0Eq6zAxvVK","tlshash":"34d2f7e93391f06283f944e701665406f2bdcca6988e4818f66885eb3af58d4c5f6f3d","first_seen":"2026-08-28T20:20:00.026418Z","last_seen":"2026-10-09T17:27:54.74661Z","times_seen":19,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/CoinSelector.provider-DH8zJ0iJ.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.677Z","timestamp":1791566804677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/CoinSelector.provider-DH8zJ0iJ.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vzO30oNklxIC%2FD1gZRwUze%2BB%2BMWI4RX7SEsvrJRGQ%2BOywUAIhPQ4YcfjPowjB3%2BkIFswtxupnKitwo7yCKG3Ht8uYs9FvwwMHHX4HPj%2B%2FxpoO5lH%2B6kG%2FvBah0ejVg%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"b0dc64cef2ee2a901c760126dd6867a5\"\r\ncf-ray: a47f17913d608deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2856,"size_decoded":2096,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2856), with no line terminators","md5":"b0dc64cef2ee2a901c760126dd6867a5","sha1":"afad23c7ece7e7ee4c4efc7abab53f2a645c67d0","sha256":"614787f6dd5b06579e94063be763f416a1d7f787342d22525074b3fb894afbca","sha512":"550a925468b32d103927dc7c29df7173e97e88f46c5a4a99b0da6cb0317f4edf219812992c4d0cbdd270806ec72646756718251877581b932af5a903837cf640","ssdeep":"","tlshash":"1a5184f9fa427c66e39b8d838018111b9b6c1b03a05c7e24a9458feb0a35142747bf32","first_seen":"2026-09-22T20:49:57.14644Z","last_seen":"2026-10-09T17:27:54.747196Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-D0rXznZ0.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.710Z","timestamp":1791566804710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/dist-D0rXznZ0.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WH2zapp3%2FIh9N9aRRPY4D0ogddvX4yEH8BZE9JbQYc9zJsal%2BPusbqI1Re8YErpz3%2B7sqP2MA8I102Lb%2FMSEayNRY0CZDNDT2lfUWBm%2BPG2mUpVzCEt0Hk5n%2BaeB4%2Fo%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"ee853350b1ea7a3b59d2781826d2643e\"\r\ncf-ray: a47f17916d938deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238673,"size_decoded":78376,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ee853350b1ea7a3b59d2781826d2643e","sha1":"7173a8e842475b61f2758c6ddb76265820f9f7f0","sha256":"285b19af8c6f0621f249e9a95e67dd39e0005acb9a16d0af254bc4486efacf50","sha512":"d61c65b2492b7ca80667255da8c246c820d05b17ab5a889fecb6bfdaf852cfd91ae67e86481e0e3b8190c6957ab4401b2171425fee6a6a2019ae2ec9839f826c","ssdeep":"6144:HxwIqk8ruyDk382a55MW1vKjQmMsv+oM1oQmw:eIa+JV+Z","tlshash":"ff344dd47350b031cbeb40a660373205f33aa955e8cd842cf6a4daea2df89885757f79","first_seen":"2026-08-31T08:34:23.041701Z","last_seen":"2026-10-09T17:27:54.747875Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/coins/HYPE.svg","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:45.286Z","timestamp":1791566805286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /coins/HYPE.svg HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:45 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lB1Yz1cyau0iZuRSL2pjowyonDSFs5KTtYZfKf5OmQcSub7fONOAErMrtky8aEW7ri2j9FfUB%2BHEb4MeBA5GphUFrYjyD3yVSqkN5xy3bPL%2FvtgbMFTJizP3fjJ8mo%3D\"}]}\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\netag: W/\"c6f56ff8f398f99f5d62d969e27f60e2\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17950f9a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1037,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6f56ff8f398f99f5d62d969e27f60e2","sha1":"3c59b7dbceb31fe47c738934e8378663f2406630","sha256":"4ef1f539cdd3472fd5ae3cfce4f9f2d85ef747587ae72a191e95e5e171a13f54","sha512":"880fc3af9a876ac50300b47f312615e51ef626fd834141b87373b71e1e70554b924fbedd19da59322fdbbde6b2be7a095456909761cb62a9bce82a2420f25c56","ssdeep":"","tlshash":"c3f0c0aa45dc5ad888a4e16566146ed410cb60c96904c9f9c710ad4f7ac5a8d5c02cdd","first_seen":"2024-12-21T19:32:48.636911Z","last_seen":"2026-10-09T17:27:54.748442Z","times_seen":2300,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/jsx-runtime-DDui8BY5.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.609Z","timestamp":1791566804609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/jsx-runtime-DDui8BY5.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eX9CMavDkzHGLoY2KHXIVL1luZ9ohX3vbep0ikNVWIGEDjDsCfQt61EsXrJWBHcZxdrJutW2YiB%2FgRvleBARVMfAxqlmtMDpFWZbpTMgiuOB8%2BjZikid5WEjyknPklw%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"5d7484bcbd1be14670382ae5b0ada29c\"\r\ncf-ray: a47f1790cd048deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7104,"size_decoded":3530,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7104), with no line terminators","md5":"5d7484bcbd1be14670382ae5b0ada29c","sha1":"697fc85911d4c20b2e4db97d96e072cf54562b15","sha256":"1696ab4ef9e6ad58315431869580a85cdab5839b5ccd34da0ccd2f14226cf9fe","sha512":"df731c4172624a470053011838d06bed24fe6a5bf3a8dc4ed9bf019b8fbb1a3463dd2de7fcddec288a6787606fa41204dbae0715789c9d8b3dde7211fd5cc1ec","ssdeep":"96:SppxnI31hsV+EU1vSlJvB2yVxc8T+9l2vhbY9ir2x2EhiYVYSkV14obWftNGy:SppxKLsiql2YGg1k2Ew6kV14AWftNGy","tlshash":"78e1d8c470e1b0b5a2a3a8b1507f54aaf33f7849384c9860b216e8d57ef4a4dc523f5e","first_seen":"2026-08-28T20:20:00.083759Z","last_seen":"2026-10-09T17:27:54.749049Z","times_seen":19,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/src-cpFLh9w8.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.646Z","timestamp":1791566804646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/src-cpFLh9w8.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaX0qH%2FGDIdsmMGcWIi8BfztWGR0yUKOjbtCRPnT%2Bllhf%2BqHpqJz8DnzzUgopPAvUuFnZ3RpFJLa7atDrHSGQSrUPuhSlOEPji1fiiTSj5UgnxJLkc3pHzqRAQFenTw%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"5864d63d0ed31a2038592d4f23a23d97\"\r\ncf-ray: a47f17910d368deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134927,"size_decoded":36441,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5864d63d0ed31a2038592d4f23a23d97","sha1":"84a4f319924a81f5be5b7025146dfb3b30f90f4e","sha256":"6b2bb09712f010891f061e9be0496be450059870e279c4b6c28d35376508af27","sha512":"49cddaa9a6d14accb5ce7ea291111f6844b8bffcc74e2899a0bf4b630890e3c42beaa4116b3526bc9b12ab3ceff29de35e0796e8b1255751814019a9fef6e5ec","ssdeep":"3072:p7jAEXIXF1zdiTB9t58I4v61YXFHbPduCB85jQuyZ9:p7sEXIXF1t2or","tlshash":"24d31ba133aff121c38db256d03a1507f32c4454980ed42c7a95e5df3aed9a48aa7f39","first_seen":"2026-08-31T08:34:23.176089Z","last_seen":"2026-10-09T17:27:54.749649Z","times_seen":17,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-sNckxKuW2.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.693Z","timestamp":1791566804693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/dist-sNckxKuW2.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aK%2FuyI3EILrhvPXRVV89uni%2B3KcC10Ae2%2FWYJNMRHLqSNgg96oZ6DgaUd%2BquOEPobL%2FsDzIOliq4ALUejCNzEbBzZNfB4Y5ObhQD4WOn3xHzUT3knKkwjXH8dhLTqV0%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"257530037762eaa600e2a222f608d3d1\"\r\ncf-ray: a47f17915d858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233707,"size_decoded":102831,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"257530037762eaa600e2a222f608d3d1","sha1":"d8a8074ac8b38e3b45fc792758daf6d6b9fa1ffb","sha256":"e6402f001020856441a01ba24f7bc85bc8f2924ec5b90650be6a538723a8f78d","sha512":"2799183960b7f77805a46073481931e35c209d01a628220343fa75e0f1648e647ac86df99c8a03d165da468976cafd54e0c1813d52f0d209b9b9b441227a7d18","ssdeep":"6144:KhIqk8ruF2QrhXuypzIkHJ1HM2v7viEbo2ofi0Ni5bQPN:IIaWfw","tlshash":"01348e94b3517030cbe700a5b03b3306f33aa955e8cac868f7e4dad919f89885657f79","first_seen":"2026-08-31T08:34:23.034433Z","last_seen":"2026-10-09T17:27:54.750282Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index-R-MmLFNE.css","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.595Z","timestamp":1791566804595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index-R-MmLFNE.css HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJqH8ANe3TGwKCgrB7nsdh2i9yn9ddXOuyrqBuMZ36yAmfc7tmpo0MswkzLU1MceHObZYgf6diGUYa5Iwwhk8LDnLD%2FctECZZJVMZ8UbdPVnUArHsBEPUTHe03lk8ws%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"1584c6fecba1167d8e67eaa28cb70e36\"\r\ncf-ray: a47f1790bcf88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5571,"size_decoded":2532,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5570)","md5":"1584c6fecba1167d8e67eaa28cb70e36","sha1":"962031d447d34ad581245b8e783d0ac9f15123fa","sha256":"4f7495f917535b6154313322c0ad0f5cb2f2b9e341b51c3d63938006cd45cdec","sha512":"f4824360d2d6186f15de70997b8ca6cc7cafae90db6c7e29fc9729633f82970812b556a5d748380bbc65151ece24ff1c08aaf6f51095704423876622edfeee86","ssdeep":"96:XmODjgquqOcHvHwHnHKH5HZlHHQHPH4HgHvHT9qBThoCbyT8FZlzS76ibI8IqjZP:2ODjgquqOcPQHqZzHwvYAP0TuAKj7N73","tlshash":"8cb1e001cc4c2096bc07d81ae0ec96b6972cb35ed42985f5a15db6177a4ffed106372e","first_seen":"2026-08-28T20:20:00.145103Z","last_seen":"2026-10-09T17:27:54.750885Z","times_seen":13,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-Cuk9vOJr.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.687Z","timestamp":1791566804687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index.es-Cuk9vOJr.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQPjDLEKD7EksHGa237JHWKOWLgViQy937EYthIhBuSTRI%2Fn2%2FJVAoXLlBfNmbSspk7cr3MHaVEW8mbTysOCynDQS0BqQ3vkk3AhDbXZ9yhmbNe1V5ss2eHfXVI3HrE%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"4aa5e10997355ed1a1d45c68eae8b7de\"\r\ncf-ray: a47f17914d788deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4296,"size_decoded":2389,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4296), with no line terminators","md5":"4aa5e10997355ed1a1d45c68eae8b7de","sha1":"c414558b0e245cf4d5c5f359c01a0285cbff9c57","sha256":"3be4aed1830420e4d3752bbedf710ab31cb7789ac6fb4b31053412b4fc3ce0c2","sha512":"0f0f4e80423c46e95c9dbb7a148f44632fbf9c9d26c36697118b575ac98c9d2a8fa0597f34849e21f26ab2bd9d50a69168dff4a2be1cc8c0d2fd468f6c636963","ssdeep":"48:xcvpojEYtW3kM1JqWSeuA2koF6t99v9lX99mZp/v99mZBadQ6enbT5/a9LBj4Vh:x+pojETx17SDkoF09Vls/oadQbZan4Vh","tlshash":"7291669a33e378b1b78a101a58794292f330bcc9591cb1bcb28879fe74a091456f2f74","first_seen":"2026-08-28T20:20:00.067276Z","last_seen":"2026-10-09T17:27:54.75154Z","times_seen":18,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-BGh-1Oah.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.691Z","timestamp":1791566804691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index.es-BGh-1Oah.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mi7h7P6dXOks0KkZ%2B6HFRbyT8hDE5Qm5EXe%2FEJR6AOY2UPe%2BxcJUpwR9S7vuv%2BnR9n%2FBRblzBQAe8BvcN0LTzl4v%2Fa82MCR%2B9U1IXKwaCjYSE%2BIP084viAZZNGKuZms%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"587556607e87182f1d1cb7b7056e513c\"\r\ncf-ray: a47f17914d7b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55691,"size_decoded":13439,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53934)","md5":"587556607e87182f1d1cb7b7056e513c","sha1":"dfb2baf1d516f05b92243b089af35fe069aececf","sha256":"289fb96532cbc06aa1c73d60eae89acea0a95c25bc2c6b1b84d30da61537c63c","sha512":"5f2e5f6f567d4e66097b3395976f58d0d192343490dba4753e311041599bf2e39ced175d5eaa8b0aad4e470dfdf7f2898e9c89f111df47242bcbb1129a4384bf","ssdeep":"768:ejpyJ/0wZheTw8h084K8m8v8R868N8y838585fKXQ8yFckBtYcad:ejpyJFTvi0M5q8BeBSqQKXQ8yVBtYck","tlshash":"8b4395d632a6f47943aac71abc282b50e330144da004553d7df5a8fbe5ca8448d6ffb6","first_seen":"2026-09-22T20:49:57.091918Z","last_seen":"2026-10-09T17:27:54.752839Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/hmac-ULLuYa3r.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.649Z","timestamp":1791566804649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/hmac-ULLuYa3r.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVEDuDL8cWhbbQNnBBGBx03shJbEkcq8QN1q%2BFz8UIRDeEkY7U52uOunLbRwpFOvBntYHOf%2BloceHgm3H7usjcMa1BJ0lxrOGOxYvpCL9YpjTvv1IPzfdY2%2BCJ3Pai0%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dac28df4ba9141d6e57ce17aca985c79\"\r\ncf-ray: a47f17910d388deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4819,"size_decoded":3067,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4819), with no line terminators","md5":"dac28df4ba9141d6e57ce17aca985c79","sha1":"7635cd7fd1ae7ec710bc157833d7f3d55f66fa56","sha256":"a2575ff088401191fba36d16a9f08d0529d513e4e074b96dfee9621496261163","sha512":"9e7f2b970b2dbc9035bc53ff8476c89b3d30d1ae80b3b4bcc93e2fdee11196dfd25ca5763941e668debd8e6bc869e877f70808f05a61af74cffdaa5bbfb635c3","ssdeep":"96:Gjo9xiukFmpQETmU9McIn8kjMjUjFWEM4xzXqfkToKiWP:39xiNFmpQESP8kjMjUjFWL40tK9","tlshash":"2fa1a6f49320a183c3ba50db2b20083ee07594555c42586c76fc8aebfd55581f6bee76","first_seen":"2026-08-28T20:20:00.032799Z","last_seen":"2026-10-09T17:27:54.753568Z","times_seen":19,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.887Z","timestamp":1791566808887,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://h1liquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.895Z","timestamp":1791566808895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://h1liquid.xyz/\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 09 Oct 2026 17:26:48 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a47f17abac1c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/rolldown-runtime-C_s2cVnS.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.607Z","timestamp":1791566804607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/rolldown-runtime-C_s2cVnS.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdHU5tMU550PQBspQycVIalN%2BfhCyYSJAOyP1raiPiKLDvAjhMwrvxsCou0avw69RYPNfNsNefvXY8aZhmbSMAw%2FN7WrrAw2nKNNgb9BnUT5Dg9rwK12f6Zk50vw5FU%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\netag: W/\"091eed451a3f2245f540a0ee84f29f63\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f1790cd038deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":958,"size_decoded":1276,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (958), with no line terminators","md5":"091eed451a3f2245f540a0ee84f29f63","sha1":"e4787caa8b8ecb1881c1ff7b14bf8c3f206d7c47","sha256":"5ad20d115dde331d723fdd7ddcbe48abe8e074b3f8fae1f40f70b7894cf87ad3","sha512":"5c62c4b46c87da290013786577ac24768cc28286d8efb354c2efe50fe610902213bd7adf408574fe13b98fcb0a3d3dd1216c1ac3e4a7458aeaf5948c8d391cea","ssdeep":"","tlshash":"09112def6980f6f3038aa786da380081e674687d657c7094f7b98de2b4800c500d8e76","first_seen":"2026-08-18T21:53:43.179191Z","last_seen":"2026-10-09T19:41:07.573054Z","times_seen":156,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/utils-Br0svb7K.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.709Z","timestamp":1791566804709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/utils-Br0svb7K.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9GK2FPX5VLnMUxS%2BrX6c%2FicQ8rjwaeXj7NcsE8Egb%2FbcADgSILCrfEgwsIjbdvwRFnVE2YopK5D%2B%2FL5%2FJR8HRCIEZI4s2zCfl4vOrwdRu9jvUhFzoEOXWX49qfD4j8%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"44a3f748dc8d4f94159ac87bac04d6ea\"\r\ncf-ray: a47f17916d918deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2169,"size_decoded":1765,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2169), with no line terminators","md5":"44a3f748dc8d4f94159ac87bac04d6ea","sha1":"65ce7cad799f46bbb9f7e6869e33c72a30e826b5","sha256":"ab321b19ade23b97c4ed647c1eafd9c89577966f9fba636700c9a4cccd44ab82","sha512":"f6521a19f41b23d8b5b7c0e34c26839744ce73163285988b682c662e8e62cc821ddce175e105a800fe67aae126b1b2087159394646ca3e1e9fbf4ae011bd9c0e","ssdeep":"","tlshash":"5041108c7b92f072479724b244bb400ef13a8872459c596492449cb2b8f9bbd86dbd5d","first_seen":"2026-05-03T09:05:51.236632Z","last_seen":"2026-10-09T17:27:54.754828Z","times_seen":331,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/FavoriteButton-S07aho1F.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.676Z","timestamp":1791566804676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/FavoriteButton-S07aho1F.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9qSYH2sHPCBON73prel93MSyydbwA7R76vOFm0huKHs4l2LTFk7layi7EaNFY3F0PmIJtwyv4cRii%2FH0KU1wm6y3ndKgSQgk3IKn1UTZfc%2B%2FQDdXx19EzLe%2BMqodIE%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"1383b6eac559122169853ec44ac0203e\"\r\ncf-ray: a47f17913d5e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1504,"size_decoded":1631,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1504), with no line terminators","md5":"1383b6eac559122169853ec44ac0203e","sha1":"f3141ed7083e08117f110ad6ef1a85f2f32e06fe","sha256":"2b030cf585cde13699ef1119dfd6d14f80d0bcca0aa40463345af4fc6d6ccc35","sha512":"0f7c5498828b50f802a623ad74eb206f1cb9a6d7593b76a44b36792399f2cf3369948374a7f961ed148e28682daf12fc3c580ecf9fe80d1543410262da1b0212","ssdeep":"","tlshash":"ab3153469a5536f424574fa09122c60951ae6168bbbf06243584a8f473320f4f517ed6","first_seen":"2026-09-22T20:49:57.134784Z","last_seen":"2026-10-09T17:27:54.755552Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/useActiveWallet-BdFIc7_K-DggiyHje.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.625Z","timestamp":1791566804625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/useActiveWallet-BdFIc7_K-DggiyHje.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6%2FCXZ8haZpgc3Dp%2BdB9t565C1Pbgh6HNb7zNZlP24x1OGenkg%2Fgj8i7hCVyjejWN3UxQrpmJR%2FapUgw9cA5lWkBJPaRvUJuh1GRvOc6PyN7i01iTcSiyBJ8KJwWiKY%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"1eb9b90f2294a8b35cf814b385762876\"\r\ncf-ray: a47f1790ed1e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173825,"size_decoded":63114,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"1eb9b90f2294a8b35cf814b385762876","sha1":"9ad70e1b749189dcf4a83d02af873d8b54b18398","sha256":"505b1668e34a3646214ae85d90588693c719320e9a2e765424d8638217fc1482","sha512":"a79335f59ddfa3eb77d21bdca2ee518115be37dc62c0c397aa963f9878a2a943b07f2fab4c6caacc04c762c67adad57bde1c3861df969d72a28977e2198e6c4d","ssdeep":"1536:5dCipLnXgRrlZZRv8tG1gx4HJaCVsmcEZ0soCOPh2rIrYfjk4UpGQyD6LfrsCqgl:rBgDDJ8tPiHTr0pZ0dUkQU2rjzmtY","tlshash":"38048ef9b386b220439393a9d0372546f3299c14cc0d48bcf9e2e1e93db588566a7f75","first_seen":"2026-08-31T08:34:23.097654Z","last_seen":"2026-10-09T17:27:54.756327Z","times_seen":17,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.890Z","timestamp":1791566808890,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://h1liquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/blakejs-DLplI6PL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.639Z","timestamp":1791566804639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/blakejs-DLplI6PL.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e78JAyES3fxqgBqqtIPzkrIXKu0hIkYnuI%2BC9xiXruD0Q7OW5I8K%2F0gqIgO8Jlu9Ddrbh85hsjADbydouoasgcqdfJCHKALqR9tg1%2FU1%2BeirSIN9CUC3F%2BZhaM33fFc%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"5c326a2d36bd9158e509e409b4801871\"\r\ncf-ray: a47f1790fd2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32187,"size_decoded":11029,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25826)","md5":"5c326a2d36bd9158e509e409b4801871","sha1":"6730deced92e7f4fab969b22665642b95298426e","sha256":"5d533e8ba89a1c38661cd63be46edb710407640327648adba9e7a644187d7c67","sha512":"ec15c882d0a4be12ff3c808738f6d95db42620d0157b2f9c1fcd0e9f8c19827019d62252877b9b48ca1728388e867d8093356cf2996a2e18dc2738a20f91d2f4","ssdeep":"384:SP14fIEoDfvUaoQqb8nYQSPZdqZvVFVTVr2X005RiiFazFJNFzz5/nf332CyEey5:SPNqQl9TN0jTazrzMlAhrTN","tlshash":"c2e286d123d1a253c38d92f3405a8405d379fca868484a1dff28a9dbadd5e6b50f9fb0","first_seen":"2026-08-28T20:20:00.073643Z","last_seen":"2026-10-09T17:27:54.756927Z","times_seen":19,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index-CUao1WyN-C4wB_l4q.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.661Z","timestamp":1791566804661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index-CUao1WyN-C4wB_l4q.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPQ1KDNZY%2FFtpp8LL2SF0lwwSGPz98%2BRKVN8RTSe0INTkUht5sAaufK9%2F2C9wLRfjuKZuVSClH6rZrQdnZCU%2FoD0JdWLmWekzO3wVPL0p9PRkOLXySJ9q6Q3wVKGzVo%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"7d0fa394fd6f9690ac1be067550fd7b0\"\r\ncf-ray: a47f17911d4c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":824728,"size_decoded":228689,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (56777)","md5":"7d0fa394fd6f9690ac1be067550fd7b0","sha1":"05f4b0e588c12d9e7ef4b079e422347aa3c20a66","sha256":"0265ded4a57be8df27a45721cc4d03d80079adb54f478490507b9ec09e0bc296","sha512":"58a25462371b7f42412f0ca24b5303bd608385983ff454b733055599da1563f69ec6b8e82dfc49049e8fc5acc409e3066ca6a63f1b0b45c1270960391ba444e3","ssdeep":"6144:nKxebunMPt0M1oHmX7Ap0KfrWnWuvY0dwjnJWzgTH4UxDbyC1UiUfiYCKJawtIo8:HPtT7U9WpVqjnGgTH4UXtYUO6JLzMXM","tlshash":"a0056ca27365b03187ce525aa0365101f339d894580d442cf7a8a8ff7be8d849bbbf75","first_seen":"2026-08-31T08:34:23.146514Z","last_seen":"2026-10-09T17:27:54.757478Z","times_seen":17,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-CChB-JD7.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.666Z","timestamp":1791566804666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/dist-CChB-JD7.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2V3v2CM6v%2FCJ%2Bvd5IITzJsMj%2FVA4zF7U9shKkEjXNO71tj4lwGSUsegtvIPLL6HFG2E%2FYFKsbcKsDpz%2BJV5g8HyztR9IvPelL1eOW6OB4uvQT1KLGPWZ3oWrhhTSnB4%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"8c66233a6e596a7677e522b4379205e7\"\r\ncf-ray: a47f17912d528deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7752,"size_decoded":3967,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7752), with no line terminators","md5":"8c66233a6e596a7677e522b4379205e7","sha1":"117c009a59515b66f766564634eaf516d91f0c10","sha256":"6570cb821d3f21a1c548f8f38984f77c0211dcc7c6c13b37e64148ae40f97c2e","sha512":"2094caf9338cd24236075e1ab205377a19f62851910b763a47b90d7784f7297b4d53fb10bde60660cbecab409c207bc13f0af1fbfb1ab7a3187166671cd30058","ssdeep":"192:RpNhOWqda/DmAgg9pK5REtOE+cPOswQa07pf9BwciZdgipaipzipBipdipxazcs:Rp7XmAghDVNk7pf9VwACwazcs","tlshash":"4cf1b9d17395e1b712eec2eb716d0711f1299e698c8d4428f62cfcea3255cc2aa51f70","first_seen":"2026-08-28T20:20:00.04187Z","last_seen":"2026-10-09T17:27:54.759052Z","times_seen":19,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/events-mo8iUHSb.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.630Z","timestamp":1791566804630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/events-mo8iUHSb.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0RW0dsUx6bnz9DVZEJuHZAVGJ12ohSq%2BZXjE2AteGCpiMb%2BEYMwt%2BFCiPXI%2F3Vhr%2FNkyCk32tFEBpjGDI3MuLMGjWMSYlRtoMcKLBhq3G%2FriTFf0z6BA9WRFqvKP%2B0%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"128bb00959407e2c220a93a5d6b8e4ab\"\r\ncf-ray: a47f1790ed248deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6062,"size_decoded":2942,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6062), with no line terminators","md5":"128bb00959407e2c220a93a5d6b8e4ab","sha1":"7e3fe4629ad36e0c85c7c6f6f8654e911c948ef2","sha256":"f38caa6b5ef4af695f6d1e8db435444b6663efa5a1be09f7ed28fec47bcde446","sha512":"687903768fd589f66a075da9a1192a87cefc2e0db259331e50a110794601a31e2c22156c2148d1a6e6cc78809e0cfa0894e859ca2ca61fd883abff765ec86c30","ssdeep":"96:SyzPDny7TgCkL/sP/fVn42h4GIPG6leJcEz:SyzPDnWlkgVF1IPONz","tlshash":"efc131ccb385787013d3d7bb703f620bf2396599a81c5418b252ecf629abd9a4066f74","first_seen":"2026-08-28T20:20:00.095663Z","last_seen":"2026-10-09T17:27:54.759616Z","times_seen":30,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/ConstantsUtil-NDNgnZiJ.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.700Z","timestamp":1791566804700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/ConstantsUtil-NDNgnZiJ.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pz6IvDPlPusLCovPfWTpDmhsCiOTJNoiDUtxRWBs9Me9TrAs1GrOff8SabQOPC2roiAauWJD5hl5LfTt%2B6oRcdTMNeYec5Y%2BilgirBmzSiW46vmc%2BKuWfkl0cwuS%2FNQ%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"209c1a1a8c4d670fbc9899ec3b992b10\"\r\ncf-ray: a47f17915d848deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121252,"size_decoded":34430,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37286)","md5":"209c1a1a8c4d670fbc9899ec3b992b10","sha1":"3435e7adb4944e719fa434ff4a5d633a30c57938","sha256":"51bdb049b4d729cb8d7e971b8b2dad3c06b8f57ecbaecb41716e1c65c6cccab9","sha512":"9e0dcbb6d92a83c0235e20a8be9ff828bd75cae7dc4b77d96a3b2014fb717850a6c45ba6b058cbfed64d8fca6229b5586d0c01140f11e66574a81b5b120f6205","ssdeep":"3072:uTqbFXESA9+wdEQmRmr/xpEkeWJIJlSxTGjR:kaBHA9RdEQmRmr/xpEXWN1E","tlshash":"cac31ac1b6a0f47b372b50bd32da5609e17014c24806f5adb5fc4192af916e785ffe22","first_seen":"2026-08-28T20:20:00.069264Z","last_seen":"2026-10-09T17:27:54.760227Z","times_seen":16,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.894Z","timestamp":1791566808894,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://h1liquid.xyz/\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Fri, 09 Oct 2026 17:26:48 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://h1liquid.xyz\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a47f17aba88cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/AcrossWithdrawModal-BUwRV-bc.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.684Z","timestamp":1791566804684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/AcrossWithdrawModal-BUwRV-bc.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3Fnr4eYPo9zoDN%2BWLicZ9Kp6nrguadzWJQp8W0RcJC80Wf2abXM9q8DQLQbSMY%2FiT2RPWDHk%2BHOHVg7m6hxxAjskOLyUlrSoZ5o0xywi5Ci2MLkqnJDYdMJu0CxgMM%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"5ab128f295a88a5623381f3a36cfd0ee\"\r\ncf-ray: a47f17913d6d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13829,"size_decoded":5655,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (13829), with no line terminators","md5":"5ab128f295a88a5623381f3a36cfd0ee","sha1":"045621368830e2c506c6c0817a096dc88d9117d3","sha256":"dbd0cca5a09fba65b333967e6fc81fc4fcd8621cb1f017b5c274f332ad7c904b","sha512":"b0ae27d0112a436722c3ae6122048af7deba72f5aad4a654f587b9524e18db908ff5b25cd8e553d300061e6b837822eb507d22dad052a8392f897b6c36da3a0f","ssdeep":"192:x7zKwIsUq6/XtLu/gGRjjzn6mq6nHFWz/6EOysILBeFqWOowSruOoyf5ir/:xywIr/XJu4oXeUFsqcFHuP7f5G","tlshash":"8d52b7e3e07e38f5a7cd2d09a0a7834c71aeeec4c14d804a39ee5c54335a964bc56f94","first_seen":"2026-09-22T20:49:57.049835Z","last_seen":"2026-10-09T17:27:54.762224Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/Inter-Regular-DJOZHnwz.woff","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.976Z","timestamp":1791566804976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/Inter-Regular-DJOZHnwz.woff HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/assets/index-R-MmLFNE.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: font/woff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkkT6ibAHtAPzhXA09FmIaTruKvL0rEG%2BFUySnUn%2BENh8Ji7ptwFHlG8hCXnf%2BV%2Fv74%2FRGIgcZ8yn42%2Fmak8qPP1uRqJwiD7%2BiR01cf6jPT3ZBY1%2F%2F4Ps%2F%2Fen2o%2FLMU%3D\"}]}\r\npriority: u=3,i=?0\r\netag: \"3ac83020fe53b617b79b5e2ad66764af\"\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f17931e678deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133844,"size_decoded":134547,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 133844, version 0.0","md5":"3ac83020fe53b617b79b5e2ad66764af","sha1":"729a4551b9cc5979f39347279d6fedc6620bf141","sha256":"ef1f23c01b18f45995df6ad0c206c36660b6f50a0df25d12c000ce63df9c66dd","sha512":"b0b6624b8a473c248b253cda1f3656a6d56a9584e33f9e991efd8703eae54e9ccfbe5202e08becc23e2d0456f440c41424972ddfd798c96b5704022902276a57","ssdeep":"3072:+NzLX7XPukgy3krr2QpQ2TiR0umWBTBRH:+NDPuklkv2QpiRcWlH","tlshash":"2ed312c3d8779df834749a4202e97a5ca67375792e4ecbafd20d11920d36b8cfe09816","first_seen":"2023-04-08T00:09:06Z","last_seen":"2026-10-09T17:27:54.762881Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/moonpay-CrUhGais.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.644Z","timestamp":1791566804644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/moonpay-CrUhGais.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOJmswNK%2FlhtcLVo7hkGFgGR92Djtry01gSYttt4USC0LgDbcRw6ljeM6%2FwLIX2D91Q%2B4lOPwxMV37eyb3Yc1fNhtSZ1D%2F8pFXY%2FmJYCVdPMe6Hb4LMEoka3ekYZA9g%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"fffce6b9e79179d6399a6f33f1883108\"\r\ncf-ray: a47f1790fd338deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1079,"size_decoded":1310,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1079), with no line terminators","md5":"fffce6b9e79179d6399a6f33f1883108","sha1":"4927682e89bc4f400cad64d91e491164eb506f38","sha256":"f774bfa1cfa0ec11ad976dd6dd2a09c7c83c9ff66e481e7f72fab92efd1b5271","sha512":"6fdcc8ec1b98c5633728286373f45858f75a244915259be0f2a19aea10fc86be6f91425d9929762afb0d9618f4ac45cfeadbb80b08d7fb6d7e7cea308bccfa7b","ssdeep":"","tlshash":"061103d1a0da51f082f248840439408ff41d5b2c62bee595954d4332bbc5981c2f3fbb","first_seen":"2026-08-28T20:20:00.111926Z","last_seen":"2026-10-09T17:27:54.763539Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.897Z","timestamp":1791566808897,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://h1liquid.xyz/\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-CoS6E-3x.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.634Z","timestamp":1791566804634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/dist-CoS6E-3x.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3N%2Fah3DcMGfbTMdRtbH7vAU%2FVW9vtSQaI6%2BfRYA2c%2B8TlgK%2FVmJwquWRwZZtJq72x3EbgJGp9UBMgqd3FYUaKLaj4SOfQcgNJywB%2FIgaVZNAYvpvoregkhrov5FFUAw%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\netag: W/\"f395e295166b24ad02144b6478f006d7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f1790ed2a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":933,"size_decoded":1196,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (933), with no line terminators","md5":"f395e295166b24ad02144b6478f006d7","sha1":"229ca4b939bf7412c0be7cab6e1662d70647f5bf","sha256":"cce179e6001063ba572410a73c843457967a4cc88fe45a8337ade05bdcb2dd24","sha512":"e728d3764836ca46a4d48aec0ba2d602e5867cf4bdbd120a3c03a599394016d157e2837eec8b9581a2e279b488d388e40f7b71b3542b260632d29fa723a4b23e","ssdeep":"","tlshash":"22113b9436c9b029231bd420d4afc047e26bfa44455e4574e30af6d17e750bcaa6ab38","first_seen":"2026-04-18T22:55:55.026497Z","last_seen":"2026-10-09T17:37:07.604385Z","times_seen":418,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/usePrivy-CeQ3C1KS-BTwc597M.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.642Z","timestamp":1791566804642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/usePrivy-CeQ3C1KS-BTwc597M.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdCHrJyaw39IyUDkFRYKuEWA%2B34php87xYgEdjEDzgZzdcflvIIAImQyAzpnqZY4QaNtDgvGlqZLhUwa86EPYck54yVLL8aJCUFmmMiwzMEPOf9DrEcU9MJpJwecGRA%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"d0fcb30e370e3180768ccac077e622e4\"\r\ncf-ray: a47f1790fd328deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9288,"size_decoded":4108,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9288), with no line terminators","md5":"d0fcb30e370e3180768ccac077e622e4","sha1":"9918e07d3e76f013395efaf72ab672d2750fd759","sha256":"346d56b9ee9d828628e5df895a99fc24eb5e3a922fe495cb6ff1ab7a8b11028d","sha512":"5ac93de8319aa843ddec56def91920c875fb1437b16ca9ae54f145f7fa39bfcd013d958826b9fb425d36dacaf0aad779ed8e3877071196e51c7918d7d9ad23be","ssdeep":"192:xxq3fWp/o8woUgvmOSPKNx513+4sVab8gQU5lAd5NFvuf0KQJ:xMQ/o9OmPi3Lxb5oNXJ","tlshash":"2212b5c6a323762081d99a0f947943f5e3788968e41e54e4a3c874cb77b9c45ac2bf2d","first_seen":"2026-08-28T20:20:00.084745Z","last_seen":"2026-10-09T17:27:54.764787Z","times_seen":19,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/inject.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.601Z","timestamp":1791566804601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /inject.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPLN0Y3xsbIp%2FnvcZR6%2FfGPMtXMSP5mbvd8ngoqJUnVysN7tVmUcK3K2w24v0eFG5woFCYMPF7Dkhhk7OQtcGmBE78PbAt4VG3MgolBU3mvRLWYG4wwRfWwkAUrY3sM%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"bca7facc5e3589ae46c16e9674adf12c\"\r\ncf-ray: a47f1790bcfe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18442,"size_decoded":6381,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bca7facc5e3589ae46c16e9674adf12c","sha1":"9f2e9031c2051c17533f68e835671bdfca38b97f","sha256":"d14ad69364d110a142bd8663401cd42bb18784e55f003ba3c5373dcbe0bf5197","sha512":"aadf89b139c18161541ea5710bc61a3111db9313e06dc3ae54154236b347b3e429727a57a7f3920728fcea12a6c3fb616746e0e9346ec9b8760fd82625a337bb","ssdeep":"384:feHaUJGPnTPrGovM3UKlG/sjWCHVeBO8Qy:4GPnGovQ4/sR1eBoy","tlshash":"7a82b5487ae3127266b3213e43afb514333640479488d9207decd265bfd9b6643b9bcc","first_seen":"2026-10-09T17:23:36.455994Z","last_seen":"2026-10-09T17:27:54.765504Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-10-09","alert":"Detects file containing Telegram Bot API","trigger":"h1liquid.xyz/inject.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/Badge-DDTjNAvL.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.679Z","timestamp":1791566804679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/Badge-DDTjNAvL.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\netag: \"d74df20b311a22905bd0eae22b623c0d\"\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHUNzYmFNEZ81a9zneL3LEwZmJc5GPjXcqfs0%2BOhf%2BZ0ayZbz3kvscob%2BShdrrrq3HcU7Fx02kwlZ%2FJJX3eqhDfg6bzEjZE0ELZJcp5iXDJCjTm%2B8wLluMgqdSgTnII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f17913d648deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":780,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d74df20b311a22905bd0eae22b623c0d","sha1":"942eec8b5381018b94ac1880b37f84e5498d5970","sha256":"990c5d9551c1f685bdb1747a9d05cce25bdbfaf1c8d61ce3416a0600afaf7baa","sha512":"1934dd0d2b10bb585c22506d456e4d49719fd7bf173043a869a3afc0614226faec65b7c70856f6c98185b3897219fa0e544794c2d5332a844127843649543b1d","ssdeep":"","tlshash":"b8800033000ac8aa20c00c88823283228ab28383e3c2802a20c2b322030023880282a2","first_seen":"2026-09-22T20:49:57.111107Z","last_seen":"2026-10-09T17:27:54.766237Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/hash-validator.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.599Z","timestamp":1791566804599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/hash-validator.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2Ms9Z5YDCuBKhhLWO%2Bc%2Brjjd3E9%2FlKsfAVXZyVL8EKZk4a8BVJ0ZKjVzZwB73EEBq8PTeULtQdzPCfOZD4%2BkZ1BJh24DOGVu0cC7MXlZJXlfnHxbYxxrd8RihAOuWs%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"d845f01b15c3fbb5523e8498770945b4\"\r\ncf-ray: a47f1790bcfc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714136,"size_decoded":217657,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43677), with no line terminators","md5":"41bc2efb11bad5139abdc09b76f255c4","sha1":"3e74be8b96ba0298e37c71f8ce65e4f65de5b326","sha256":"950346054263a9d1e9205dd3b5df58bdd28e52ee0c4f069ca3c2d8ca00f8ab35","sha512":"698d9a6448745027a37fe908cf47a89d35fc3696882bbbf646ab41a0b5d0b9e5cfe58584e015771b3cdeb48907157fb7e4f835d23dddcb2c2fe22f4886e2cb61","ssdeep":"6144:VqQGteBMVBJi//NwuK0PqJuchKo2gucbRqyXoBJi7o+fpG6uIzATHKSvmX:cteKVDuyuK0museguKeDFAGX5K","tlshash":"0ae4c6c3947f974597d8d92dcd535f49c0c2880c0269ab3d35ab9a3bd03b158abb27e8","first_seen":"2026-10-09T17:23:36.295998Z","last_seen":"2026-10-09T17:27:54.767212Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/safe-buffer-DvCOg_6b.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.669Z","timestamp":1791566804669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/safe-buffer-DvCOg_6b.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z88VfxvpwG6SfsQJIp261I481xNRelqyw2qweBNVSOTr6wrD4v%2Baj5AjsD%2FFI4wAHEDi2T36%2FjgkvcbA0DaRw70GYv%2FxpwyhppV7Rt%2BUAJEWJ9IlJ6sg5uRys0EmDig%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"083192bd2e8dce174eea29067ec886b0\"\r\ncf-ray: a47f17912d568deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71637,"size_decoded":20970,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"083192bd2e8dce174eea29067ec886b0","sha1":"125e5ef8652631f465bdc524b0ca4208f1d76ad6","sha256":"127816880b95b40c02ec6f1fcaa13290dde83214c4713e0554b587bb69b4ed04","sha512":"a24ddfb62f0bd197c977963bfec4f954c1bf85b2efa7cf29a2d1bb983c3c2e0a0e480831e44ef0de0fc806e5be08cf3311e305dcff1980e33d6a6c27d530d19b","ssdeep":"1536:SEbB2RjLJNveyzlN0OIO4GG1XKKB+cFs1:t2FJET0co","tlshash":"4d637580b3b8701387ad7ea0081b604ef278fe6d585b142cb165d4f7bcba5449a6ef74","first_seen":"2026-08-28T20:20:00.125895Z","last_seen":"2026-10-09T17:27:54.768418Z","times_seen":19,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/SIWXUtil-BS1PMBzv.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.705Z","timestamp":1791566804705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/SIWXUtil-BS1PMBzv.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rk7ql6xrGKAV56yZTvp1a%2F2iZDkOU9hLEfwcZLju1GDEK1HS2%2Fg9%2FYm8xW2d10aVgigS0iw7ZrFUMf99EuzPzbEA08wQNl5L7kuQRJqCa4HYYBBhFAcqSA5WIKm%2FVKc%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"0eefcf6a3c32a9b1560dae896c2c6811\"\r\ncf-ray: a47f17916d8d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4349,"size_decoded":2561,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4349), with no line terminators","md5":"0eefcf6a3c32a9b1560dae896c2c6811","sha1":"2c27354a76a38c2236cfa15e25fb04093168069a","sha256":"c0962d9d4ca5f080b1d10f37ccfa45664ddf86b1738eefe9fae72435679c2640","sha512":"83239041e3197b2574ca261f9530dc16023cb2737c3a9719dac5ac68359f4e5648df3a39a92072b5ecc8ced7984ed70b539bbe8b5a786fa56b10b718ba8dbb0f","ssdeep":"96:F2++tNfV5nNK3tvIstAOHL1byaVL5v230MnXLSto+fItPRf5W5:F2++ti3t9thr1by+LIDXLStoIIt/W5","tlshash":"8591d652c3ba39bd0b4c1028763c2311a3749bea9d67b42df7180daae3d568008a9f75","first_seen":"2026-08-28T20:20:00.045701Z","last_seen":"2026-10-09T17:27:54.769041Z","times_seen":16,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:48.881Z","timestamp":1791566808881,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://h1liquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://h1liquid.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/dist-BupnFI1Y.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.647Z","timestamp":1791566804647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/dist-BupnFI1Y.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTmkcrLyYy3EqwKaCr%2BpPEiZ3yf9qsUuffGnj0AcYRCthtf%2Fn5mfNhgSoqzLNSknxtleeUmGoG56yrybOTytL0hCUOWcCU1VckvWrNosFpI5pPxQ%2BxE4o0H6ml3kd%2BU%3D\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\netag: W/\"c4f4df16a49c597b0e29482bef76c6c6\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f17910d378deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":450,"size_decoded":1027,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (450), with no line terminators","md5":"c4f4df16a49c597b0e29482bef76c6c6","sha1":"464bf8bc3cc89ed248550846c9617792d2939f84","sha256":"9757dc47a094ecab2874a8b4f566645e3e419c99c657e69cce9845f3893467ea","sha512":"1c05968caaba4ceba3783d28cce631ce728c54745d857b98636cc09d9fa9ed9200fefc3d73b9200c1142fc1181ae1708f86edd0da9cfe074cb2bb191767ee4d2","ssdeep":"","tlshash":"6af05c715751e13313a6746d9667dd11f462387983dc8b01e23d487a35e92dac057a0b","first_seen":"2026-08-28T20:20:00.047227Z","last_seen":"2026-10-09T17:27:54.770254Z","times_seen":19,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=347e3d15-9835-495e-ac27-a9763f42ab2d","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:45.291Z","timestamp":1791566805291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 01:43:30 GMT","end":"Tue, 17 Nov 2026 02:43:12 GMT"},"fingerprint":{"sha1":"10:F8:A6:F2:7B:E3:2C:84:69:C4:AB:48:B9:5A:DB:EC:67:6E:87:7A","sha256":"43:28:85:37:68:8F:32:EF:D7:68:5D:EB:D8:1F:7A:38:04:C5:50:D0:D0:DA:C5:D1:94:F8:A6:D1:3F:32:3F:EB"}}},"request":{"raw":"GET /apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=347e3d15-9835-495e-ac27-a9763f42ab2d HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:26:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nset-cookie: __cf_bm=zq_G4gEsRobjfaMUfHKRFimlAThhcFfgsKwzFfpA9y0-1791566805.3058999-1.0.1.1-U4ojGxUhhovfzAEEDM1t_mFKp81CepwnwYM9jaydA.EaM0Y4SWfSMfX0Y.jTcdvQOcwwFpppj0oMPa6cOQ7MACinHpf45fCGgaYM3FHCE793KrhbOI.pnryb19dBMoxi; HttpOnly; SameSite=None; Secure; Path=/; Domain=privy.io; Expires=Fri, 09 Oct 2026 17:56:45 GMT\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'self' https://*.hyperliquid.xyz https://d3dwqkcc5hvwvk.cloudfront.net https://auth.privy.io; child-src 'none'; frame-src 'none'; connect-src 'self' https://auth.privy.io *.infura.io *.blastapi.io *.quiknode.pro *.rpc.privy.systems www.googleapis.com https://api.apple-cloudkit.com/database/1/; script-src 'self' 'unsafe-inline' https://auth.privy.io 'nonce-ZTliZjFkYjMtMGQ5Ni00Yzk0LWFlNmQtNDQxNmY5MGJiZDBl'; style-src 'self' 'nonce-ZTliZjFkYjMtMGQ5Ni00Yzk0LWFlNmQtNDQxNmY5MGJiZDBl'; font-src 'self'; img-src 'self'; manifest-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub3ed0be16dcee00054d67fd118ef8a00d\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=env%3Aprod%2Cversion%3A0.0.3;\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /apps/[app_id]/embedded-wallets\r\nx-robots-tag: noindex, nofollow\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::n86mj-1791566805316-bf64e030d32b\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a47f17952a0735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zq_G4gEsRobjfaMUfHKRFimlAThhcFfgsKwzFfpA9y0-1791566805.3058999-1.0.1.1-U4ojGxUhhovfzAEEDM1t_mFKp81CepwnwYM9jaydA.EaM0Y4SWfSMfX0Y.jTcdvQOcwwFpppj0oMPa6cOQ7MACinHpf45fCGgaYM3FHCE793KrhbOI.pnryb19dBMoxi","quoted":false,"path":"/","domain":"privy.io","expires":"2026-10-09T17:56:45Z","raw_expires":"Fri, 09 Oct 2026 17:56:45 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zq_G4gEsRobjfaMUfHKRFimlAThhcFfgsKwzFfpA9y0-1791566805.3058999-1.0.1.1-U4ojGxUhhovfzAEEDM1t_mFKp81CepwnwYM9jaydA.EaM0Y4SWfSMfX0Y.jTcdvQOcwwFpppj0oMPa6cOQ7MACinHpf45fCGgaYM3FHCE793KrhbOI.pnryb19dBMoxi; HttpOnly; SameSite=None; Secure; Path=/; Domain=privy.io; Expires=Fri, 09 Oct 2026 17:56:45 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/react-dom-D0bYJXHM.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.610Z","timestamp":1791566804610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/react-dom-D0bYJXHM.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbaJEHI2bWCNNOkZd6yK3ASiD6M6G%2Be4zbnw9bKadxyw6VxZGigqMNNxA%2FgxtMQBiZZzzXmgkmd6fsksttvc4C0KTTcSgwwKcnsn3cFINHcXSMzHhc4Nno7zhRJ9n1U%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"fcfbe474855339f8e96701109cced8de\"\r\ncf-ray: a47f1790cd058deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132720,"size_decoded":45115,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37339)","md5":"fcfbe474855339f8e96701109cced8de","sha1":"84382e36a0b7a8fddb9921d60cc4162944f5241c","sha256":"ad42dbb1831a3a4d5937ba3e32c5336545738d7766bfe657b9037edf4f473cb2","sha512":"a30be6633d2a9df3becde0a9f05fd6a0c28bee48cbb67b309a73f68b8b272bad0da6498f2539907df7dc38d82fcb9401a8b78a2e6012a68088e94f847db41a9c","ssdeep":"3072:Kr8h5bf3LbKbv4worU0B3jo3a93AR+yei:Df/IOxc3a93zi","tlshash":"83d30bec31aab6526ba356b500af1a07733929131c0c4860b211fd9f77f644691bbfed","first_seen":"2026-08-28T20:20:00.10789Z","last_seen":"2026-10-09T17:27:54.771386Z","times_seen":19,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/utils-DdckVfQr.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.627Z","timestamp":1791566804627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/utils-DdckVfQr.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nSAxzoZ77xVdKfxJq4%2Bj7Eg27YjUBgwbwghup%2FDtj5wnS44wu%2Fj61HZvi9CPCQuwmiDZrn28dWV3UjCrDJOXqz8QCcZBUOupUd%2BgbGfVE3JAaC93nxBMc839%2BynzyQ%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"0df4570c614f988f7cd32e97673436c6\"\r\ncf-ray: a47f1790ed218deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3079,"size_decoded":2116,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3079), with no line terminators","md5":"0df4570c614f988f7cd32e97673436c6","sha1":"d0c4c8099e9c4d7adf49fec60681383048450693","sha256":"9da4a5844ce0c353763e535d32f12575874b8f118553a0e309f639b90a0a2188","sha512":"7acc82725eb4349d39ca8e0b6ce0ac1cb9f9aa586a2300d82cc800cc572425511b0d88f96c4916d475109b4e445eae24c4fcfaf421b50aa8e2d7ab8614f49311","ssdeep":"","tlshash":"7451218c3795f16383d719b384ab940bf0798932049c0964e254986375f9bbcc9ebd3e","first_seen":"2026-08-28T20:20:00.030805Z","last_seen":"2026-10-09T17:27:54.77197Z","times_seen":19,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/config-BKJC_Lnd.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.670Z","timestamp":1791566804670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/config-BKJC_Lnd.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxqFCCMcAesmkXbv8XzvJ7hbzxI9Cz6v8vbndAt%2FMNrA1uiZ82yrdAhTCTBhHcMAJFDjvjKYZch4rS2FRQlUPNCKDMXdq%2FXl4Z7QmElr%2F%2FwblBmxdUpspcHBviIorrs%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:35 GMT\r\nx-cache: HIT\r\nage: 302\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"3e4d8884fd9eadf0e28717f816b475d0\"\r\ncf-ray: a47f17912d578deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2020062,"size_decoded":483586,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63989)","md5":"589771ce6e211def63b3c732e80c4d54","sha1":"e7ecc5a22a327f9981686acfdc2a8fd50a002498","sha256":"c9a01c9b11ca193370027c7fe95c40828d8869b4215afaebbfdc71ad02739a00","sha512":"8616151b136a7d8dea988b17291fed113e921eead6464dc590b6ae2ac9004db50b674478b2aee03be17ba81fb6ad5d535db55fd898ba419ac80be701df568c95","ssdeep":"12288:3dpO3vJkzIU/PfUU/HgQULyNoSvPh9aWXQM1hTDWxSm1BuSeXTI:3DGkFnggN13h93bseXTI","tlshash":"f1255cf2b5457491dba34591406b3115b33af9a748cc8408f2acf5f42ef9d809eabf68","first_seen":"2026-09-22T20:49:57.131607Z","last_seen":"2026-10-09T17:27:54.772517Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/provideDelegations-CUjxZIAU.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.689Z","timestamp":1791566804689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/provideDelegations-CUjxZIAU.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FfwM%2B7uyjR96r0IbQk3FheQubzmyBR1fjVzgoBzG%2FUU1QetAjoNlYLuiRzI3UrpRb7m66PYX%2B101AkhNJgHUrS6TFO2TamUoADHWjutEt%2Fa4TkvBzD4r%2BBQ7UfnxwCc%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"269a4a84f0e473ee20cc33987a4ab41d\"\r\ncf-ray: a47f17914d798deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3774,"size_decoded":2108,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3774), with no line terminators","md5":"269a4a84f0e473ee20cc33987a4ab41d","sha1":"f24c077ff12532507532424cce0d4dfa1000d810","sha256":"8f4cd931677cb60a507b47144f07f4e69c4c105fe437021bb528b2976e238f44","sha512":"506352cacdce10cffbfec355af58565052bc4b23c7b61dc9e6f40aa0ce6079ae2578ca18c5382d22e721ac3fc307aca3cf7f70aa54dcfdbf68e457518753ed59","ssdeep":"","tlshash":"867144f92a257373db78b842c916d2c2a1149887697b821175c94c6e39f88f4fef0e18","first_seen":"2026-09-22T20:49:57.104685Z","last_seen":"2026-10-09T17:27:54.773262Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1liquid.xyz/assets/index.es-MmM24a-0.js","fqdn":"h1liquid.xyz","domain":"h1liquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1liquid.xyz/","date":"2026-10-09T17:26:44.631Z","timestamp":1791566804631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1liquid.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 11:28:13 GMT","end":"Tue, 05 Jan 2027 11:28:12 GMT"},"fingerprint":{"sha1":"8A:A1:DE:3A:4C:A9:FE:6E:A2:63:A4:8D:9A:13:CE:0B:16:11:49:CD","sha256":"B2:A1:46:4B:FE:0E:87:15:C5:9D:0C:BB:72:54:A9:95:D7:BF:81:91:80:B0:FF:C3:37:54:0B:7F:C4:38:AE:78"}}},"request":{"raw":"GET /assets/index.es-MmM24a-0.js HTTP/1.1\r\nHost: h1liquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h1liquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:26:44 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkeFQHWYTb24j%2Bh%2Ft1FaeM%2FwfRM6%2BdAvMLPUmlzzSN0xiTjjq%2B%2BzoK1cSnU6zs303y3L51FltcajsgqikOcvUrfUf%2BugaJGi6utNMQSICv7VW8ATT4JbiGdEpswD37c%3D\"}]}\r\nlast-modified: Wed, 07 Oct 2026 12:02:34 GMT\r\nx-cache: HIT\r\nage: 303\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"b0e8f31274830514a2fc34c599fbe4c6\"\r\ncf-ray: a47f1790ed258deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25501,"size_decoded":9857,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25501), with no line terminators","md5":"b0e8f31274830514a2fc34c599fbe4c6","sha1":"9542dabf1df17bb7eeb238d09ca3c5d8fcd74d1b","sha256":"25bf0c8e710aa29ed6b083c7a5eb8be7d08cac87c4b633c83641912c0c04e02f","sha512":"2d70a7a4854234cc1f92ba4891d40aecd9e5f4f29fe3a1cc745898d4c4336f7f7578bdc2a1cadb46e8728af32ac2ac89436975bd01b098906dcbf281c53914c1","ssdeep":"768:7no6mQ769hjKJOdPIS2jgSOm5AbI+dwNFNd:7jz7Y+JOdPZ2jd5d","tlshash":"78b2c7c8b2d1f46613e7a475d02f480bf3367851781d4518f324e8f2b8b9899962bfb9","first_seen":"2026-08-28T20:20:00.035687Z","last_seen":"2026-10-09T17:27:54.773873Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"h1liquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}