{"report_id":"2ba2fec2-5dd8-43c6-ae9c-836f35194784","version":0,"status":"done","tags":[],"date":"2026-10-10T22:26:33Z","url":{"schema":"http","addr":"liamdialysis.com/","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"Google LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"liamdialysis.com/","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"title":"Dialysis in Jamaica | Liam Dialysis \u0026 Renal Services | Portmore, Kingston","dom":{"size":71402,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48494)","md5":"5918faded7bbb33525eaae0db30e8a2c","sha1":"7e5ef4a3856cbfdb75075737b69037452ee69f97","sha256":"49d7d6bd97cf743565b8bd7373cc5e02f248ea348dfa41a85c4cb3c26803265f","sha512":"4f216bdd1c9bbcaa04ab33544f69541b5efc9cba53d0cc025ecd39f7914fe4a7fd931bc24c8bb20f21a696dc058f063a3a000677a33039134a24df5afe6e6326","ssdeep":"1536:3Id9IPfJ3IIDOzdXwl5vs97Aa4s7p9wCw3qI2XU+1:3IzIUdw7vk1Pwe1","tlshash":"d763c4319454253b920b0ad9f675236f72b7838bdf1f2504b6bc47884fc6cd9ee26298","dom_hash":"domhash8866f3ae5aee5108292721ddb6bb622f","first_seen":"2026-10-10T22:26:42.982453Z","last_seen":"2026-10-10T22:26:42.982453Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"liamdialysis.com/","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"Google LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:26:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":9149,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"liamdialysis.com","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2021-11-04","domain_rank":0,"first_seen":"2019-03-15T09:25:24Z","last_seen":"2025-10-02T08:47:05.77035Z","alert_count":34,"request_count":17,"received_data":5621949,"sent_data":13044,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":6,"received_data":229414,"sent_data":3466,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"liamdialysis.com/assets/index-DjtTZ9_m.js","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c22ed1e7288001a8b01614fa6793196","sha1":"b0eb776c0d805431b77af2c79569e15017a89ce8","sha256":"33eed1eb5c9b9179932d85699d6ba07d12a2abc5d699457e3000b379015b0fcd","sha512":"d5ecb0ca001ba89f763cb55162dcb959737e9583c6f2bb27654f5328c16e9c744250c3782519a9de03ed542c2732ae13bc43dee355d6a8ad1ff671088a543885","ssdeep":"6144:9UuCyRmfxH+l3R94k0m4jW8Kfpn9ekZhcV9SP0kow3gAm1q8+cGl1YwKp7Ad5TTY:7P0TpjWEB","tlshash":"b3744b98b159b76aee6306d1406f1117b12e2e37a80d4870f068ecb9377448a717bfed","size":353768,"data":"","first_seen":"2026-10-10T22:26:42.995626Z","last_seen":"2026-10-10T22:26:42.995626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:wght@400;600;700\u0026family=DM+Sans:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.438Z","timestamp":1791671159438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Playfair+Display:wght@400;600;700\u0026family=DM+Sans:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:25:59 GMT\r\ndate: Sat, 10 Oct 2026 22:25:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8465,"size_decoded":1372,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"22089546e48dc88d2a5e634314753b5b","sha1":"07bb3a2c5b4028399a77b85bfb7c886a03a1375f","sha256":"065d2c4281aa3e79affcf4c468ae629ac16625fd32bf4c88105553cf825e6023","sha512":"19917514acc646bd7596ba0a4d5264f46aa5fb8c0eb6b0c311541b5183038d241c0bb94c1f643c25a6bd1e03f1797744be1581ab6a8c3b24b3c4bb96eb66add5","ssdeep":"192:Jwm+Ewf+rwY+Owx+5Hr2om/Ur2vrr2btxr26Zr2om/er2vNr2btfr26qr2om/drh:iAe45L2R/W2v/2bL26F2R/Y2v52bF26X","tlshash":"6402cea10467a510db475cc222cebf32ae5f615070449a79affe188cac9fc2e9365b0d","first_seen":"2026-10-10T22:26:42.98527Z","last_seen":"2026-10-10T22:26:42.98527Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/dialysis-doctor-patient.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.906Z","timestamp":1791671159906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /dialysis-doctor-patient.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 240524\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:25:59 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 53068d06982fee9622d068d214a4abe9\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240524,"size_decoded":240914,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x845, components 3","md5":"f2a7c80b1655d8f368cfc0c66c185ec7","sha1":"5c208ecd286bf7a74acd9ec5730164df02c997f3","sha256":"656e67a2caf670367abdc01f97c08a5ab9a5a79dfb4f7196232e6fd51cb3bbd6","sha512":"aa5fc0af01ed1b6d08e11132fd5808ee9eb8d40a7795dd3737d1ad3256993b4ac6e49fa571f6e71115dd0b3619bd4a231998f26ed930ac8fb644b8a8f8376729","ssdeep":"6144:or3MvVy5As0hiwewyvU/0MKftHVj6Nndw:w3M1smiwOwMl1j6VS","tlshash":"f33423158b2c67a38076a43836fce538ac708b2588e8f455757a7724374220a3e97bdf","first_seen":"2026-10-10T22:26:42.9864Z","last_seen":"2026-10-10T22:26:42.9864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/kidney-cross-section.png","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.907Z","timestamp":1791671159907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /kidney-cross-section.png HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 926421\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:25:59 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: dde43ae8aa39d7c222d068d214a4af00\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":926421,"size_decoded":926810,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"534298899b32b33fe07e69e7f8e2c57c","sha1":"8710b7f6364a78b9afe85f8c49978bb524a87198","sha256":"536489996c489bb9019efadc7d8db7edb83a430eb10c9e9f84ee97eb17a54966","sha512":"ec8d2fdf30f0bc87d575b41df9b82efa3ccac96436e14a1545f9fefe02c7bd8061de845590e9db07ca21baf7a5129626c10439acff3cff1bc25e7dd88063facc","ssdeep":"24576:p26elgP9Ex7NIfRhxgapYCWRvdVW0MqjLzunfrJ85NZc37o22lKSM:pRsSax7NoOaiJdVWfuLqfrJTo2h","tlshash":"311533cec0cc2d13d9e01155b7ac8965caa8f768e672300c099cd9e7a39f6147ea0fd8","first_seen":"2026-10-10T22:26:42.988925Z","last_seen":"2026-10-10T22:26:42.988925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/dialysis-center-new.jpeg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.908Z","timestamp":1791671159908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /dialysis-center-new.jpeg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 74019\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 84b86a3a8de6551522d068d214a4a217\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":74019,"size_decoded":74408,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, datetime=2026:06:08 23:58:57], progressive, precision 8, 1080x616, components 3","md5":"de53d30208a6080fda7457a20cebafb1","sha1":"803815490421f8f3996479fe4cf4fa592fcdb36f","sha256":"5ed37885d808ca999bfc90028a7580952dc3df59a5df397a32f6dbee8e9909c1","sha512":"711b172d59d39dd24e8d8ede3d02d4a3f143c4d309ed65a9c45f075797dbf866aa4147583b12bfb30cb831ade65074f7a495c60f71b43f533c048057397a892c","ssdeep":"1536:/cZaX7kHaZZ96kb5/USW9GsP8ujmC/2g7IcYT/CEBzxnm:UOk6Z9D5bTsVs8","tlshash":"ce730262553d2452d73ce6fbcabd0f2f2ad80884cdc7410aa450afbcbac4655ac4e6b4","first_seen":"2026-10-10T22:26:42.990173Z","last_seen":"2026-10-10T22:26:42.990173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/mt-tourists.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.910Z","timestamp":1791671159910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /mt-tourists.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 641373\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:25:59 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: a786a1be412165ab22d068d214a4a52e\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":641373,"size_decoded":641763,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"5d334a4aafd66ef18278530c43cca046","sha1":"3ea935b3b8940ca42860a424879d2614e9f24e8a","sha256":"1f6658d7a031f5c685d171059b4aa560fb04cd2aa19e66cd590ab9d16584f245","sha512":"6395960197efcaaa81c5a9a25c6bdd3c06801c7c4438b392a98943a71b04cea4b4e112500daf10f1efbc4c9abbd884b6f3c15f4cf6ea7a440e9b9e71cde8f0df","ssdeep":"12288:jcQ8fWRlv3PTTlxceyNbCFaQ//avnoBaJfamTWrb9RfCsL9SI:jUkqNbCF//QdUmiT7MI","tlshash":"6fd42304718fd40a0f4dcf948b6981e25b30cdfe928b7afa751976130f72978879a35a","first_seen":"2025-12-17T02:58:10.115165Z","last_seen":"2026-10-10T22:26:42.991505Z","times_seen":4,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/photo-father-daughter.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.916Z","timestamp":1791671159916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /photo-father-daughter.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 192831\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 4191e0fe9ff264c322d068d214a4a18a\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":192831,"size_decoded":193221,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"f92b4977d502250bbda886f0be54fec6","sha1":"ac061352a89239eacf8e93a52f5880c917ffa707","sha256":"395ad700c4d2c3e1d4d973f825ed292f28d2b07568b03d749410e277bfc8c246","sha512":"e154a8c051129b257cc1e4007a148dab4a1fcf528f07a502a5beb95654150a5260f676a7ae9fe6dc03755e00b4ff5c8a7002c135fa9dfbdea6bd2ecc06eacf8d","ssdeep":"3072:HU2wVRP9xr3M2p29Eer2S9xsPXxz7EqSIQqPaCax/0oRvZHq9rA/Pw:0XVdNpktrFxixzI0QdCa6oRRKlAQ","tlshash":"841423e3ff29f42da7980148eca9101dae2d00d516746783a9c955ec091bdef8b6bc07","first_seen":"2026-10-10T22:26:42.993242Z","last_seen":"2026-10-10T22:26:42.993242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.976Z","timestamp":1791671159976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://liamdialysis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:53:57 GMT\r\nexpires: Tue, 05 Oct 2027 15:53:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455523\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-10-11T00:45:16.915772Z","times_seen":75191,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":29,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/assets/index-DjtTZ9_m.js","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.440Z","timestamp":1791671159440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /assets/index-DjtTZ9_m.js HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 353768\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 10 Oct 2026 22:25:59 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: d8f77fa44d610b6c22d068d214a4a2b4\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353768,"size_decoded":354178,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36942)","md5":"2c22ed1e7288001a8b01614fa6793196","sha1":"b0eb776c0d805431b77af2c79569e15017a89ce8","sha256":"33eed1eb5c9b9179932d85699d6ba07d12a2abc5d699457e3000b379015b0fcd","sha512":"d5ecb0ca001ba89f763cb55162dcb959737e9583c6f2bb27654f5328c16e9c744250c3782519a9de03ed542c2732ae13bc43dee355d6a8ad1ff671088a543885","ssdeep":"6144:9UuCyRmfxH+l3R94k0m4jW8Kfpn9ekZhcV9SP0kow3gAm1q8+cGl1YwKp7Ad5TTY:7P0TpjWEB","tlshash":"b3744b98b159b76aee6306d1406f1117b12e2e37a80d4870f068ecb9377448a717bfed","first_seen":"2026-10-10T22:26:42.995626Z","last_seen":"2026-10-10T22:26:42.995626Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/mt-family.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.913Z","timestamp":1791671159913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /mt-family.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 340414\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 9e244d95b86b52f022d068d214a4ab5c\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":340414,"size_decoded":340804,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"9b260028c14e4e4c40d518008bca1c40","sha1":"4aac8edeb8ae6c60c87e6af13207e034bf6ea5a7","sha256":"d55d32fb870123748bc82186e6b98e80de08e33b8b849e7b888c41d9f853eb8d","sha512":"b80392ff65bfa2e67d8d5ba16849849908f7635f8acaea985562b2e65b23418cb8810c253c2f4425e692984dad9e93d2c98b9936a8df0b4fda66db802ca296d4","ssdeep":"6144:8AG2SXZo1RilzoYI9izG8v1vHv9OO9jC+TwY4GB8Boh:8AGfXZo1OzoZ8lFOO/Tz5B8Kh","tlshash":"7a74233941969eb2cf6b3c3173c3b8699a70430cd6c6eb89eb0a5fd43526d62d2507e1","first_seen":"2025-10-30T10:45:58.78654Z","last_seen":"2026-10-10T22:26:42.996979Z","times_seen":3,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.970Z","timestamp":1791671159970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://liamdialysis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:53:57 GMT\r\nexpires: Tue, 05 Oct 2027 15:53:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455523\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-10-11T00:45:16.915772Z","times_seen":75191,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.973Z","timestamp":1791671159973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://liamdialysis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:11:15 GMT\r\nexpires: Tue, 05 Oct 2027 16:11:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454485\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-10-11T00:45:05.135678Z","times_seen":40914,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":44,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.974Z","timestamp":1791671159974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://liamdialysis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:11:15 GMT\r\nexpires: Tue, 05 Oct 2027 16:11:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454485\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-10-11T00:45:05.135678Z","times_seen":40914,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":49,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/logo-original.png","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.902Z","timestamp":1791671159902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /logo-original.png HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 496217\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8225f50034d2d06722d068d214a4a8d2\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496217,"size_decoded":496606,"mime_type":"image/png","magic":"PNG image data, 1668 x 2388, 8-bit/color RGBA, non-interlaced","md5":"efa2c6514d82623c5b31cba8373aca0d","sha1":"a492d70394c603ee8a6a37b77e3077f36c4a95ac","sha256":"20ffd3b893a4b3a771708de13fd79e63dc87e18524e282ad570a2b30340c2aae","sha512":"4d7afced6da999c87fc74f9d3e686c8b4f4d67dac799030caed63bb146cc7dc69a44a89863e84cc249fc9307e08cc2853476c580e3612da29eb48c7902da364b","ssdeep":"6144:vZ7e/UdoIxMA6J5BnrYpm2pT33ab9O5ZpNxbD+M5W5mtf1XcmC6iehnvWoefh5Kw:vZeaHUBnSpTa5CpjH+yemWuvUbG0ee","tlshash":"4fb424dcb2715126b2ed361070730f5e59252826b4c3e94dd5a3e0bb6a12b773c34abb","first_seen":"2026-10-10T22:26:42.999038Z","last_seen":"2026-10-10T22:26:42.999038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/photo-patient-man.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.917Z","timestamp":1791671159917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /photo-patient-man.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 185950\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: c8f8a223c7efa5f222d068d214a4a4a1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":185950,"size_decoded":186340,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"1ab19677a101ec812ba2946759fa99e2","sha1":"1326fc4a228dc6ec9d70f15ef87a7b5569e09871","sha256":"accb308908c379b46957f000ba0ece7b380af35cb8053459dfe757c7e846f068","sha512":"d5164aa97f905a06d9eb563b5fadbc2479256abd0f4308549e3854de44911d8961f583f24460e445404987c6f184d9c119e1a751155471c876e9e712df604017","ssdeep":"3072:O07ovevehCLooPo0gRALez/tBly77USxUwHKqixHp/oM8SOLHeAw6ySEQYbFn:O07oveveh8lVcALCw779x+nJ78dmrQEn","tlshash":"8104137f2dd28e00e726beb84ca06234147bdd2e46cb839da550c6cc7fade545e44a9c","first_seen":"2026-10-10T22:26:43.000301Z","last_seen":"2026-10-10T22:26:43.000301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.967Z","timestamp":1791671159967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://liamdialysis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:11:15 GMT\r\nexpires: Tue, 05 Oct 2027 16:11:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454485\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-10-11T00:45:05.135678Z","times_seen":40914,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":25,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/logo-uploaded.png?v=10","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:26:00.507Z","timestamp":1791671160507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /logo-uploaded.png?v=10 HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 496217\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 36b8a9fb47b78ac322d068d214a4a893\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496217,"size_decoded":496606,"mime_type":"image/png","magic":"PNG image data, 1668 x 2388, 8-bit/color RGBA, non-interlaced","md5":"efa2c6514d82623c5b31cba8373aca0d","sha1":"a492d70394c603ee8a6a37b77e3077f36c4a95ac","sha256":"20ffd3b893a4b3a771708de13fd79e63dc87e18524e282ad570a2b30340c2aae","sha512":"4d7afced6da999c87fc74f9d3e686c8b4f4d67dac799030caed63bb146cc7dc69a44a89863e84cc249fc9307e08cc2853476c580e3612da29eb48c7902da364b","ssdeep":"6144:vZ7e/UdoIxMA6J5BnrYpm2pT33ab9O5ZpNxbD+M5W5mtf1XcmC6iehnvWoefh5Kw:vZeaHUBnSpTa5CpjH+yemWuvUbG0ee","tlshash":"4fb424dcb2715126b2ed361070730f5e59252826b4c3e94dd5a3e0bb6a12b773c34abb","first_seen":"2026-10-10T22:26:42.999038Z","last_seen":"2026-10-10T22:26:42.999038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:25:58.704Z","timestamp":1791671158704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: private\r\ncontent-length: 11367\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 10 Oct 2026 22:25:58 GMT\r\nexpires: Sat, 10 Oct 2026 22:25:58 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0; expires=Mon, 09-Nov-2026 22:25:58 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 6f4015ac66ebbf280829cf235ddd5bbd;o=1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0","quoted":false,"path":"/","expires":"2026-11-09T22:25:58Z","raw_expires":"Mon, 09-Nov-2026 22:25:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0; expires=Mon, 09-Nov-2026 22:25:58 GMT; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11367,"size_decoded":12156,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (404)","md5":"ea5b6611032544bf231cd415240e2841","sha1":"dbdb0d0bd289dd337b040cf44b9e2fd58b95c143","sha256":"71ca54d24d6638fe663e9d75c256e33ea33681068876edf061febf9e811dd70a","sha512":"c2ad0cec64cea583df3e12af1d34364a9e125d68a4dfedb5cc5c57e36f4e522c79a24e2a6dffa1eacbff60fd1ba9ea2f8dc15d295dcb6d64a3dee7983be22301","ssdeep":"192:W/z2h8FdSjvOI6CVei9eyu6yx+yiXaoyzS3xVjvFI6jzi1fX8IA1fpmV5KZy1CzH:qz2sLIdagIpD2","tlshash":"7c326362cc704c1b994601b1b5f933a5a72486874e1c7e51ba5c096d0fcddbe86fb3ac","first_seen":"2026-10-10T22:26:43.001564Z","last_seen":"2026-10-10T22:26:43.001564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":44,"connect":13,"send":0,"wait":205,"receive":6,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/assets/index-Rw2KPZPy.css","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.442Z","timestamp":1791671159442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /assets/index-Rw2KPZPy.css HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 106135\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 10 Oct 2026 22:25:59 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 2678d5ea14f2f54222d068d214a4a5cb\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106135,"size_decoded":106538,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0f3bc43ad415b7e565988e372e618e9a","sha1":"a6d09ad43060c61ccd31c8c1a640ca75391956c0","sha256":"2c20e489635157959b1933bd597db6e65feed1b0c7cc89eddb5159eb519c9722","sha512":"6f3863d3625053a4fcd557bfa7a625d67d7e3b8b4a03cf8b1e1012c1915e5f68efdf3cb5de8203f26799f4994548924bfab468a04bd343240e8a3d02f72049cd","ssdeep":"1536:wWCMQVh+kXoyjX/aXkrdZCv1G+fKFZIHI4:wWCMQVh+kXoyDaUrzCv1Gh4","tlshash":"aea3c755b22ce53dfc33a4a5a78cb59d6104b091dd3642e8ea43b232c5c7bf75e62a0c","first_seen":"2026-10-10T22:26:43.002695Z","last_seen":"2026-10-10T22:26:43.002695Z","times_seen":1,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/logo-uploaded.png","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.900Z","timestamp":1791671159900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /logo-uploaded.png HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 496217\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: c9a06b14c024576a22d068d214a4a5bb\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496217,"size_decoded":496606,"mime_type":"image/png","magic":"PNG image data, 1668 x 2388, 8-bit/color RGBA, non-interlaced","md5":"efa2c6514d82623c5b31cba8373aca0d","sha1":"a492d70394c603ee8a6a37b77e3077f36c4a95ac","sha256":"20ffd3b893a4b3a771708de13fd79e63dc87e18524e282ad570a2b30340c2aae","sha512":"4d7afced6da999c87fc74f9d3e686c8b4f4d67dac799030caed63bb146cc7dc69a44a89863e84cc249fc9307e08cc2853476c580e3612da29eb48c7902da364b","ssdeep":"6144:vZ7e/UdoIxMA6J5BnrYpm2pT33ab9O5ZpNxbD+M5W5mtf1XcmC6iehnvWoefh5Kw:vZeaHUBnSpTa5CpjH+yemWuvUbG0ee","tlshash":"4fb424dcb2715126b2ed361070730f5e59252826b4c3e94dd5a3e0bb6a12b773c34abb","first_seen":"2026-10-10T22:26:42.999038Z","last_seen":"2026-10-10T22:26:42.999038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/mt-returnees.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.911Z","timestamp":1791671159911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /mt-returnees.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 172730\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 51ab8e7bcee616b222d068d214a4a845\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":172730,"size_decoded":173120,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"10dc03fa01f79e180d7296212e7d94d4","sha1":"af35a6a3e925f41fe7f2bcc373302af1af7fac05","sha256":"652c4129d18a9d3ac7b145a983648c428a8edc7f857be22284b38e55a4b55fdf","sha512":"315fb41d44e41e5f83fdf5310cb935a0e630f81bd87c3393fef82fc1eb8d9d023749ba7b58d603f31ba6a0f728d8b77c89111ef40912b2a86fe387afefd0fcf6","ssdeep":"3072:q02kfZEgkGz+8mO08mnkO0mlmHc72XxM+PFPVPtvBu8D2zdOdYcBlhLw9i6hj5WP:q02cZEjGoOfkm863F91Ju+NBlZwg+G","tlshash":"6af312d64b4f54c1834433cb6a68800986bbc21ae41b73963f5ec0e0a59372dbd6df7a","first_seen":"2026-10-10T22:26:43.004607Z","last_seen":"2026-10-10T22:26:43.004607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/photo-patient-woman.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.915Z","timestamp":1791671159915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /photo-patient-woman.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 138246\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: cb42f6aeaaf00b3422d068d214a4ae73\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":138246,"size_decoded":138636,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x800, components 3","md5":"da5ab7cdd88430aa7f77231172dde959","sha1":"d3c77be19fe3aefa5ff40b7a0f681e8333623896","sha256":"abd6ef5b00f0f81edfd00b3a978f1d8f16ac203f53a61711d9a4472bd3f1dcb3","sha512":"2c2bd82b0ad11def0044a166240b6b77188f2918a23c095a8d77dcdd71fd6e4fc8592cd468947f619538b5a5c7ad1d0e1bb06334b65cc0f45f75dde61c9c8161","ssdeep":"3072:jbsF49iKl++7OfhcQ2jeXKcoczOfEmdYtvv+zIZ9pe3W:jG4H++Sfh72KKcLkEjGIZ9pem","tlshash":"bed312c085fff01981a4121c2d724a1bcabc57b067f01a7f0e7d9635d78a0aa6c57f9a","first_seen":"2026-10-10T22:26:43.006384Z","last_seen":"2026-10-10T22:26:43.006384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/photo-couple.jpg","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.920Z","timestamp":1791671159920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /photo-couple.jpg HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/assets/index-Rw2KPZPy.css\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 246297\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: bdedc9f3bce4a2e622d068d214a4a7b8\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":246297,"size_decoded":246662,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1280, components 3","md5":"d9ac8f9300f50d93b53a65cc37fc7d61","sha1":"8a25f9a7337c48718f4d0182c89ab23225faa7e5","sha256":"48cc96d5af08fd864f273a0a719e77fae8b562432081872c12c2ed5a5064c423","sha512":"c3f944834a6bc3a8fab31f9257f67915ed25df528a5e96087711ca3b36b4e79a43554f6fcd55a01235153e6fc6f1bad21218fab7cfc1b3f8114b46b75793f870","ssdeep":"6144:nl1xpgxU2otlIIkWga/VY/cyzXmeh8EgvYtFJBDdwYa:l1fgxU2EloWgmGPK6VJcYa","tlshash":"f3342378a403f3db03ba08cda6759881e672188f3d2d3daad7835d5b5feab570d44902","first_seen":"2026-10-10T22:26:43.007697Z","last_seen":"2026-10-10T22:26:43.007697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:25:59.972Z","timestamp":1791671159972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://liamdialysis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:11:15 GMT\r\nexpires: Tue, 05 Oct 2027 16:11:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454485\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-10-11T00:45:05.135678Z","times_seen":40914,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":37,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liamdialysis.com/logo-uploaded.png?v=10","fqdn":"liamdialysis.com","domain":"liamdialysis.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liamdialysis.com/","date":"2026-10-10T22:26:00.506Z","timestamp":1791671160506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liamdialysis.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 01:49:57 GMT","end":"Thu, 12 Nov 2026 01:49:56 GMT"},"fingerprint":{"sha1":"1C:44:06:E2:47:CB:B3:D6:2B:EE:C0:18:47:DC:8B:DB:F8:A5:5F:50","sha256":"8B:91:97:51:77:85:D7:6E:F0:57:59:0A:A5:5B:AD:75:6D:11:D5:58:EC:10:C9:88:45:FD:B8:BB:D6:6B:6A:1D"}}},"request":{"raw":"GET /logo-uploaded.png?v=10 HTTP/1.1\r\nHost: liamdialysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liamdialysis.com/\r\nCookie: GAESA=CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CrYBMDAxMGRkODYwNzc4YTUzMTEzYjMxZTIzZTNmMGU1OTk1ZGUxMmVlNmE5ZjJlOTc5MGI1ZTk0N2E4NzRiYzVlYTJiMjc5ODY1ODYxNDlmM2IwNWVjNzU1MDlhNWNmNGFkMDk1ZjUyNjk4MjFkN2Y4OTk3MGRhMzNlNmFmMzAyMmYxZDlhZTE0YzJlZGIwOWZkMGZhMTlkYWNkMzQyYmU5NTJhOTUzMmJmZWFhNTY5YzgwNWVlZTEQm5Gxv5I0"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-length: 496217\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:26:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 02:32:38 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 15be2d3c179158ef22d068d214a4a57c\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":496217,"size_decoded":496581,"mime_type":"image/png","magic":"PNG image data, 1668 x 2388, 8-bit/color RGBA, non-interlaced","md5":"efa2c6514d82623c5b31cba8373aca0d","sha1":"a492d70394c603ee8a6a37b77e3077f36c4a95ac","sha256":"20ffd3b893a4b3a771708de13fd79e63dc87e18524e282ad570a2b30340c2aae","sha512":"4d7afced6da999c87fc74f9d3e686c8b4f4d67dac799030caed63bb146cc7dc69a44a89863e84cc249fc9307e08cc2853476c580e3612da29eb48c7902da364b","ssdeep":"6144:vZ7e/UdoIxMA6J5BnrYpm2pT33ab9O5ZpNxbD+M5W5mtf1XcmC6iehnvWoefh5Kw:vZeaHUBnSpTa5CpjH+yemWuvUbG0ee","tlshash":"4fb424dcb2715126b2ed361070730f5e59252826b4c3e94dd5a3e0bb6a12b773c34abb","first_seen":"2026-10-10T22:26:42.999038Z","last_seen":"2026-10-10T22:26:42.999038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"liamdialysis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}