{"report_id":"2ca3e374-fc3a-41d6-aa0c-a0e83296018c","version":6,"status":"done","tags":[],"date":"2025-12-20T17:13:47Z","url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"title":"Just a moment...","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T17:13:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"news-hypxrliquid.xyz","ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-28","domain_rank":0,"first_seen":"2025-12-20T17:13:54.076592Z","last_seen":"2025-12-20T17:13:54.076592Z","alert_count":42,"request_count":21,"received_data":530452,"sent_data":11325,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-12-14T22:35:23.199507Z","alert_count":0,"request_count":4,"received_data":202626,"sent_data":1908,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9dfc4757f9729551d0d40f308902cdb2","sha1":"8b2678808eed3fc4c3bb2631ed81ca233ebbe8ca","sha256":"32c2d267385741faabbeb464f255ccd26891a7323cf3e14b582835d393f82b5d","sha512":"e3b90543442cbd96d440dc14698180aaa5201812080b427af75d09755f219e7d144d5b0502dd00718861655438504460148f47cbe4c29d04288b483573fbdd40","ssdeep":"3:N/BKL1XEQ3MXn:eL1UZ","tlshash":"5b5504c054c031745530cd01d57df515500544005c1d4c31715d04d41f7000001105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.570445Z","last_seen":"2025-12-20T17:14:00.570445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/?__cf_chl_rt_tk=tiWH7tRRbKeudr_z5qS90fMiQnhZDC1E1ss_wKXiMB0-1766250801-1.0.1.1-BXyJsXv98wo4bAc00ZQgvb.IdburWeMXT3bI8mtIkEY","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T12:22:48.649902Z","times_seen":784295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c52e3c121ae6","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f313511d7312e3e84f954e45c2245c74","sha1":"1f50f291ee7eaa963459d1c816ca72b75418a190","sha256":"38efe9ef880a8616c2698d60d579f3f722e385090396dd8d396c871b6cee3c06","sha512":"4288d60cd54b975dd0f2103fad27310e402d5e35b75f471c78afbfa72f9e689f7c3b3d4d9fb93a0ee5bc6587010d9aff42f5ddd7bdc14dd073efee844c52a41a","ssdeep":"1536:iyPcQV2rYG5YmC5Auy9CNBhDBIJkKMPgLheapOlt2xXaNTCF0zHsuZbFsB0F:i1Q6YG55C2hw24EXNkMC","tlshash":"83c3f7ce35cf7a8a036ba47850ab35ca62ab7c80704c9d4de911d8f578c436971b7db8","size":121050,"data":"","first_seen":"2025-12-20T17:14:00.569405Z","last_seen":"2025-12-20T17:14:00.569405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"238f7c36ffa666666508d72ce271da07","sha1":"e9286b966669f282b38fc65b0dee369527f38314","sha256":"a60f0f9969e977a30482fe016df3ea970fb9514aa6f14cbd6b8ed510083f8f88","sha512":"364b927985349a6ca4cb4e1a25311b52b4d78fa10a3c2262abf099aaa15871bb0e3c1b8b9d02bb911e1bffbcdeab272982e9d32c442c06392137388cf2c6dd13","ssdeep":"3:N/BKL1XEQ33U:eL1UkU","tlshash":"5a5504d054c43074c530cd00d75c5c157105c400543d4401f15f04d51f3000040115c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.571982Z","last_seen":"2025-12-20T17:14:00.571982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f1b0b639a241e4b15236a155b574db31","sha1":"64599216db78406adb65b40a84e5ae88f0329a9a","sha256":"aa9eda1aa7b84438bb6f7ad0b3714468d14d58e7632587fcbd53d6115111a3e3","sha512":"f15c10c2a96304cd8d304e24e483c96c9aa690f3b1ded000bcc1e282301fda1d606bff56c094abff7cd467222c2ca87d9c307178d60897da3ccb500536d94cd6","ssdeep":"3:N/BKL1XEQ31:eL1UU","tlshash":"085504d054c430744530cf00f75c54155105c400543d4407f35f04d41f3000040105c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.57292Z","last_seen":"2025-12-20T17:14:00.57292Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9d87c6baecdc1633bc668ffdbfa7945a","sha1":"df9423d4c7cad53f22dced233be0e5458e2056bb","sha256":"a3ecc58e9d63d9ce4da26dc550f98303d6fc9937cbce46f65364e15e4704dac5","sha512":"aa91f63c011d457fce32336936c767ea3c171b775e3039f5c44024e393923aa5cf8b4c16c36ec6638117c9d55fdf67de25ca534197c5d340600b3bb233b144d1","ssdeep":"3:N/BKL1XEQ3p:eL1Ug","tlshash":"7a5504c054c031f44530cd00d55d54157007d400543d4401715d0cd41f3400140105c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.573796Z","last_seen":"2025-12-20T17:14:00.573796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fabd37b0b8bd866dbc9d96a630f9df7a","sha1":"e514931db6cd1981ab8638a2e9b8e950fb526ad1","sha256":"74452098183f4b43e017a5e41cb57e438b370d3246dda9c74a3873bef71281e8","sha512":"2e34049c99440194e3ee4126eeaf7a8b59f23c8dd3ac05d2433c81559341604540e658eff658578483f487c5b841bafdb9e353aa750408ed5fc0a2fa071c5e18","ssdeep":"","tlshash":"eb61d9f3d9414675c7bb33d45c67e7a4b3b201972d06a061eed0d86cb896d0b82291d6","size":3340,"data":"","first_seen":"2025-12-20T17:14:00.574626Z","last_seen":"2025-12-20T17:14:00.574626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8294a1b911f8a7fe3ae1e0bd16340934","sha1":"6a07b4e2a5979e1ca90aae13b926db96f9bd4cad","sha256":"6b04cc097368986957471c0674c7b852432af3ad396d84fe6bdbff565ee68069","sha512":"c8119a54c434849574475996b9c03f9941f7bb49230cdb4cd32ff7aa0bfb05e4f6ffdb54390a242ab9fa11b8dc105ac3b2c846624b690068b0e19c4980f33f82","ssdeep":"3:N/BKL1XEQ3RXcn:eL1UEMn","tlshash":"a85504c07cc430744570cd00d77cd51550054400545d451171fd05d55f3000000105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.575681Z","last_seen":"2025-12-20T17:14:00.575681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/?__cf_chl_rt_tk=ZlLQ4Eh4yVacD7dMU.vqfoplJOOqcfQzs.e_ojIZ4AI-1766250805-1.0.1.1-vgTvjRkfZfOpZpl1SCiBbveBU.RPsYKkXIuNFxpFCAk","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T12:22:48.649902Z","times_seen":784295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6be90ad386a3a4a56cc0a02bd5b3adda","sha1":"9dfc0aa4dc4e482ecb97568a631fdd9e9dbe5a86","sha256":"8e456d47a044624dce70d2437ad0d9b007db15cdac626bc669c0d7772c231f6b","sha512":"5d4accff8103434417b7d5c3791c76846a127e5a33dd8e71ff13a4b2708d102a0228362f30097476f541f2faf2cfba3823f1f23234071eb9ff9f6f4789b0d5d7","ssdeep":"3:N/BKL1XEQ3o:eL1Ul","tlshash":"725504c054c1347d4d70cd00d55c54155005c500547dc401715d04d41f31011c0145c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.576687Z","last_seen":"2025-12-20T17:14:00.576687Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/?__cf_chl_rt_tk=Dok3ReGSDUb4kk9q_pNy.BHAnf54evuUG3Jo4yD8Y54-1766250798-1.0.1.1-qBSDXD2eYOQ0luXhjXcd_Wp.OP3hQ56Y.axlf6FKBpw","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T12:22:48.649902Z","times_seen":784295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c889e638786331aa839af8a6955f59f4","sha1":"b7143d7515d31e2b8b7fb026f3522b00e8cd8fa9","sha256":"74ea94f569e9bfe690c2efe227e79f5e2aa003a9972db2fe5bf2722d03e73134","sha512":"389d24dfca32d4986f26f180277af353f2a78568759d2a9ae7ae717f1b240a1db9cbfdef0f2eddd9eb220848877eaf26dfc119bf2f9cca2090ddb585e4033ba1","ssdeep":"3:N/BKL1XEQ3+XS:eL1UnS","tlshash":"165504c054c030744530cd40d57cdd1fd0054401545d4411715d05d41f3040100505c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.57775Z","last_seen":"2025-12-20T17:14:00.57775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"98b906c5dda063a35ef79d24897177f9","sha1":"94402cb9a55121ce28c6372f3581dcddd69144f2","sha256":"c1b65dab26beb5c226d6269ff99340b5c9136ba21cc3c5a071fa18da0c494600","sha512":"7a7681194e8f9550a8b20880d6a7c482e7274b1bd1036b3a0ecfadc19879acc57c1d06a4aa15099b3ec2014eb45807212fc5cb5ee6e4365494aca6721f3e9d17","ssdeep":"3:N/BKL1XEQ33S:eL1U4S","tlshash":"c05504c074c430744530cd00d57cd715d0454500541d4411715d04d41f3000000105c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.578705Z","last_seen":"2025-12-20T17:14:00.578705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5b9b1ac8520f7d3d1258ff8bdd1d1c0c","sha1":"09408fa3de97013cbdd540464a7d49aa36835bd7","sha256":"de4d4b68edb1add5184bfa00c92b970766fedddc1af96160ca7ecfb93c5e9f9b","sha512":"5b9a62e75d62586ebdac29f4250e7ec9f7ae1166179450a53e9ecb016e1e244b69c07792711d597c377d22299ca47c7db55ec19fb2462b6c12e90d794636a588","ssdeep":"3:N/BKL1XEQ3i:eL1UH","tlshash":"7d5504c07dc030f44530cd00d55c54157005c500d57d4405715d14d41f3000040505c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.579696Z","last_seen":"2025-12-20T17:14:00.579696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"698f2e83065e20b97d1989ba52dab0c4","sha1":"f278b951672d7fed70ddb75449a197d578f2f09f","sha256":"711bfc5978d5680a4d6f79fbcf0c9b074aab887e816877bb6bf0e018bae6ed58","sha512":"c836199bcbe8b481f698dfa64e10045830799ba313854df73d834903bd3f87b794ec545e01e7a5221bf6cc2da85409e5c617418ef54fa7789fdf25c4ee5a51cd","ssdeep":"3:N/BKL1XEQ3y:eL1UD","tlshash":"d45504c074c030f44730cd00d57dd53570054500541d4451715f04d51f3001000545d1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.58067Z","last_seen":"2025-12-20T17:14:00.58067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d07aaad15bc8328d152fa666d06d3779","sha1":"14186a8df2971070783bf3d8e776391ce3541962","sha256":"de855f08e328278b17abc151c27986fbf63ba20fcc1a33269f1ac286c262376b","sha512":"0507f0af99642c34636296f2838278b43f43e72408eaf1e7de0e0843144c061fd89222bf9acad7f045dbcd5c80f35224d06714416d83a0c25b78b3fd4f0c36d9","ssdeep":"3:N/BKL1XEQ3KT:eL1Uf","tlshash":"ab5504d054c0317c4730cd01d57cf5177405d400541d4411715d04d41f3400001105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.581754Z","last_seen":"2025-12-20T17:14:00.581754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cdb50b6fcf4d1792c825caf1563353d9","sha1":"db8847725527bde213024d0d8f2565d27b2949b2","sha256":"21d6f9aa6737ad6da59a26cf90bde4c8439eaa7b2e8ba46461a0bdadbd4846ce","sha512":"674e9b6f97277bf738b08620a669803de6d447bb43515483c4ea04c3c4005602e761f5f1d6370e7d802b2fa7338394894e38fb683daf37f67b6665098b683c1c","ssdeep":"3:N/BKL1XEQ3V:eL1UY","tlshash":"aa5504c0d4d430745570cd40d77cd5155005c400541f4411715d14d51f3001000105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.582746Z","last_seen":"2025-12-20T17:14:00.582746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3c1c6d587c2d2e7c8945cd979972df27","sha1":"2341f4dc28b2ac415f958ff955cae48977f16bec","sha256":"4c664d7e5374c51599f71e90ad8f6b3dbad32b89216adfdcc2d3b219169e5862","sha512":"c8e1d407a0365d7c545e6835da841642d1c99c125fcbec27dd5dceaa32537dc0201528a709b21c9fb1f33f9434573da62a655937203f0040f5115eaefca4eba5","ssdeep":"3:N/BKL1XEQ3An:eL1UNn","tlshash":"f25504c0d4c430744530cd04d77dd515500544405c1d4c13755d04d41f3040100105c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.583714Z","last_seen":"2025-12-20T17:14:00.583714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0cf16e39bbc83b036e27993f8c509fec","sha1":"ef5de5fb8a58df20cebbec345a23151fcb504c5b","sha256":"3f166b6ad9a3589c382b7fdcbd7337861b0a55c45c4c9a78f5ac9010ff1d4630","sha512":"417cca5361817419182d3aa270351032987162e54717fc143b6b548c7d04ae2090519c040410eb466430144242d486d116c70b9cfa6279a039793ba37f33b94b","ssdeep":"3:N/BKL1XEQ3I:eL1UR","tlshash":"ea5504c054c030f44531cd00d55c7c175007c400543d4401715f04dc1f3000040505c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.5847Z","last_seen":"2025-12-20T17:14:00.5847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0138268a52e5c0ff3d98cd7be62f9501","sha1":"2eadd8398064551337de8b107bbff46a38ca5018","sha256":"8a5a6c767db08bfa57dde8416a5e0b0a96f816b3ecc85ad7dcc8d3c5ce02e135","sha512":"faada3b2e0f420e31e4ed5d71966b893da45106b89581f4e53187e5d4321cb8eb8e55247deff596f9323a42b38c7299b1389dc09747c8ea63ceabcec8e4f3cb7","ssdeep":"3:N/BKL1XEQ3ZR:eL1UW","tlshash":"a65504c054c030f44530cd40f5dd5515d015d400547f4401715d04d41f3000040105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.585697Z","last_seen":"2025-12-20T17:14:00.585697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa1761dddb8e78c73e8d6ea2a9a0a55c","sha1":"e66a2dbb57e314beaabe080a32117cc66429e759","sha256":"43638ab3570b46801e71b4c02395f6e8929deb24f025fbe71ef7142cca60f643","sha512":"04c57b1e71593a5a66f9d1f1c740a0631b2a29469054e1c3417bdc9bb618025079dd896d0a088a46321b7562ef88958683b16dd897e4cfc9659c0f3795094e37","ssdeep":"3:N/BKL1XEQ4Jn:eL1U3J","tlshash":"ef5504c0d4c470745d31cd04d5541435500544c0141d4441715d04d43f3000000305c0","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.586582Z","last_seen":"2025-12-20T17:14:00.586582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2ca95cb769e00e44192d70c56417e32","sha1":"9e478b45bc0922d2ff89857384acce7e906fc19d","sha256":"6eeb83b071cb8963fb6ec5c8c300e394619217f8f1502663269c19266a4205a0","sha512":"18a63364d2231617b82403d0e3d66f64e1fffea684b68c454af4b30954cbffcc0e36731abc6dbf98a3eec10a772c49b0322b21ec558edef1d9ce661ebe7a506e","ssdeep":"3:N/BKL1XEQ3dJ:eL1UYJ","tlshash":"3e5504c054cc30fc4530cd00dd7cfd1550055c00575d4411715d04d41f300000010dc1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.587474Z","last_seen":"2025-12-20T17:14:00.587474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"902039439ddcc51e3ed8c5030175f60e","sha1":"b9b87a884671e4c8dc6f938f1689450089be421d","sha256":"77521433425905e8ca53c0cca1f0647dae2a726cb69c837d99bdcecc4a4d3c20","sha512":"32a19c5a47fdab089b334d4633b5b5e28389eb32de0d2222cb5630e5dceb5efd96e49bac3766d6bc060ac6c444017843fd0c53c3963235f33bf217b33c7e0367","ssdeep":"3:N/BKL1XEQ3o:eL1Ul","tlshash":"105504c054c030744d71cd00d57cd51550054400751dcc13755d04d41f3000110105d1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.588544Z","last_seen":"2025-12-20T17:14:00.588544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dcd362348a2e88c090865b280745af2b","sha1":"3661367beabd24d8bdb5a536d57bebf934871ead","sha256":"04c16a9449a005758f53debb85402dfe7671f8942a570b84c4afdf1a7670320c","sha512":"d3da3e29932547c50f5bf08ace11751fcb3761e86bd917c99ac56eb2907241d23b57e7647ae8a3f597077777fede240fc470c9745e2bba7bcb78b4870035d79b","ssdeep":"3:N/BKL1XEQ30ST:eL1Um","tlshash":"355504c074c430744d30cd00d57dd515504544005c1d5411715d04d53f304410010dc1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.589462Z","last_seen":"2025-12-20T17:14:00.589462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"28e56db2dfc199f079d904899e8b00f4","sha1":"0811ec020d71f0a5bc905989d151d8ee86370167","sha256":"da57a2d213c6f64b67079cfae3d7db87ad82ebb78458cdbe425092d57128e449","sha512":"518595997b752c710090802cf4b8955e7d6df7499ad8468586f47a38c11ccc46fe0e5b45c006a7f9b3fab699c154e2f7ac0efaaa720d2ccdf7b43c644da04273","ssdeep":"3:N/BKL1XEQ3UXn:eL1UB","tlshash":"785504d05cc030754530cd00dd7cd5155005c404541d5511f1df05d55f3400000505c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.590448Z","last_seen":"2025-12-20T17:14:00.590448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f88ce4dddf66a47dfb0ae6b40cbc399","sha1":"1320ffd02442c4027d0aaf65b8e71a0947dae460","sha256":"825676653b6fc85e6701e92f08b1a29e13d05b069aca4e759980b7a0a35f563a","sha512":"6550fd753b392ec633232a8ba8448e063aa7e44fbae24622796f57511d1c546944869054244d3b621c379c94c807ee66a50ba823cba1cbd5002db29acca68552","ssdeep":"3:N/BKL1XEQ37U:eL1UMU","tlshash":"0a5504c054d431744530cd00d57cd51550055440541d4411715f05d41f3000000305c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.591392Z","last_seen":"2025-12-20T17:14:00.591392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e64f4f6162436c7b0fd684598a5b678","sha1":"1d6adc5be1e13d648410815f83ff7df88bf5cdf8","sha256":"7f662b5b31022beacf5c97968e6b1d652575703aa82895a05291da7b8db6cdd8","sha512":"c8b6a0375c967b2d85d402cf266c1d0bc3e2f1500ee5ec75b07e912932f684c8af5141c6c06da05228c1cf8623a5e7776f76105154478ae37d47c360b3bdd14b","ssdeep":"3:N/BKL1XEQ3q:eL1UX","tlshash":"805504c074c430744530cd00dd5c74155005c440543d4401715d0cd41f304004010dc5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.592406Z","last_seen":"2025-12-20T17:14:00.592406Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa44e4452820192a16c5fcbb51159e43","sha1":"c281b59e13c62c2a7a0f448e8aaf0f9b7c3b0fe3","sha256":"aadfadd96ad1fe86fc035b8a482e852c682398358878e7eff6ebe6b7a33b7386","sha512":"0352bba8c01584d0109bdc7ce28e91163df5252e44687ac1f07035b0a2f1d15badc0612a85db819b0b2267524a6c1dc7daca3803792dbdf27e0cc2ff157ee14f","ssdeep":"3:N/BKL1XEQ4x:eL1U3x","tlshash":"f85504c0d4c0307c4570cd00d554151551054440341d4441f15d04d41f3004100115c0","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.593505Z","last_seen":"2025-12-20T17:14:00.593505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c503abcd56ab","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5c67036cc69fd6164876ed46c1df66f","sha1":"3a5760e4767a8de63c08d7d9c089ce6dd14099b4","sha256":"f047a9143e71c4b034302d4eeb53cbf36a6d947484b896e40e234d9db0c58cab","sha512":"6aa1eab97fd194f187447776fe8555492118b6e70357801efe7fab30f97d001106d380125610476fba3417f86a6bae251e39efbf6f3e031183547ae336eb7c5a","ssdeep":"1536:iVLNFQ5N4ULsQ/EKR/sHmEu6pYM7JkdSofj1DK2gJMpAAKzN6DuLaqWM4:iVLNFQ5FsQ/EKj6pyHM/JZhN6DumW4","tlshash":"a2c3eace35ceb586436ba46800ab39cb92be3c44704c694df951dde978d4b1872b3db8","size":119888,"data":"","first_seen":"2025-12-20T17:14:00.565505Z","last_seen":"2025-12-20T17:14:00.565505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c5132a88b518","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"297e560312e8cb3404efcc672a254884","sha1":"cfa3caedfc2dc3b0c5d598fb36ab4b661d9287b7","sha256":"d09493509ca45f2b98bd0053cb84ad21c8d3b2e567203cd3e8a40cc912efb3c5","sha512":"3c877c4d1ab938527878f351aabcfdbf989e9fcbfe7e84940fff8bf1462bd4566534002e3d7923ecc6c254d3f880d68b2b49d12fd8847f7e210bde4342d3b41e","ssdeep":"3072:iIVCGICXOauVTlmGhUYXnGLe9p8MLzplW:NVCbyOauVTlmGhUYWLe9p8oplW","tlshash":"21b32aceb9cab589532bb06500a735cb61fa7c84700c6d0df946d9e978a035cb267dbc","size":115562,"data":"","first_seen":"2025-12-20T17:14:00.563772Z","last_seen":"2025-12-20T17:14:00.563772Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0b39ef17a4efcfb0f0241903758fd44","sha1":"a89c2bff7a8dccad9225fb1d48637d2ea256d63d","sha256":"d10d3322d5d0624c13775fc84c3bbd1d3d2a2d85bae5a6f73930209cf13a1c8c","sha512":"0c4473aa3a80eb9c9d2d79966588603efcbbb3676c1ec4b96f9cd62f1d8ab639900467e6e6ab2d62269da80792fa507a72a1e945a408f3dfdc9cfa1aa726e28b","ssdeep":"3:N/BKL1XEQ3un:eL1Unn","tlshash":"155504c074c030744d30cd00d57cd53550175400743dc411715d04dc1f3000100115c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.594424Z","last_seen":"2025-12-20T17:14:00.594424Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"23c46717938d2baddceb9ee728fdc62e","sha1":"31bc52603a42a1eab75b935bd150f3a770f823bf","sha256":"aee04359e0a3437dc9418059607fe15195020a5c4db0f3fedf64107d280b1091","sha512":"149d546572548aaf6f9874e9a04774764c2cf7440c3355a4e36d2f1c8dbf18a5a46858a0a25068fe882293196aa2920a771df3afe53b9a8be91c4a37ee36fe82","ssdeep":"3:N/BKL1XEQ3GW:eL1UY","tlshash":"755504c055c030f44d30cd00d5dc541f5005c404543dc501717d04dc1f3100140105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.595367Z","last_seen":"2025-12-20T17:14:00.595367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c5629d100b4d","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a27779d59454c002d3d05c20cbbfe59f","sha1":"65735f167f44b121ddc6ebd3ba4706d45b5da3a7","sha256":"ef4e252e8e471fd7791a846256a07a32a0c94005c0868e66cdce7cb02aecc485","sha512":"4d8bbea36cab5b8ca36751b42bd06ba5afe7dc166367901dbcecdc53b29b710d4fc84a39103af2dbec22ae4217f0210be98b00a3601354bb5442f380bfb2bd90","ssdeep":"1536:imcA+k3eLpm0a/Ot6xDBxzrwDN0MPWdBrJkJY+Pu0BvcNg28nlZ:imqQOAxFxzrwN0MKB5+Puzu2+Z","tlshash":"35c3e7ce79ce75490367b86c00e73acba2aebc44701c594ee901d8e978d535872b7db8","size":119747,"data":"","first_seen":"2025-12-20T17:14:00.562113Z","last_seen":"2025-12-20T17:14:00.562113Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"029b9cd255524c3e19bd2e7aecdf9832","sha1":"0c5ca912d8ab43899822e8ea2cbe6dd7a9a01566","sha256":"d876515fdfe1a30f7e00ae81a980b7eed7024e4cef2d9689766da8cad5e8befb","sha512":"175118bc99be15cb5440714f20ebe07d15f307c7c88fc0653e52331dbc017b241755b22b49eae53845a990a623754d448dd4706c23b2133b64dc6aa1b8410302","ssdeep":"3:N/BKL1XEQ3IVn:eL1UHV","tlshash":"1a5504c054c430744570cd01f55c54155005d440d43d450171fd04f51f3000040105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.596384Z","last_seen":"2025-12-20T17:14:00.596384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"25b2c7fbc769e95dfbee3cbae1125528","sha1":"2d43e8ada2a2410dabd1a179b8252866e96562c1","sha256":"927063d7991732dd15eec014d858036b7d620df72b908b800c79133e5bd2c5f7","sha512":"882f03452ae53d01ed4b7e4322f1a89827fa4096989766e794ed624b93c1cdab98eb038eff156088704531493a0f33fbce169d8e7ee10a86f5949eb85beda83a","ssdeep":"3:N/BKL1XEQ38:eL1Ud","tlshash":"f45504c054c030744530cd40dd5c5c155015c401d43d4401715d05d41f304004010dc1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.597708Z","last_seen":"2025-12-20T17:14:00.597708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"051beb7eb11cd10f054aa3fc454079b3","sha1":"dbc2a7d5442a5f3c3d2c753df2e0a843185ef501","sha256":"e431304b0cb805198efef3e08188fe3aa2540775b77d8c881608732d5f18eed8","sha512":"534c229567cfd3757b4f8ee8db0259b1ee4bf49f7a62188be49a88d863df77c5744a874e76e12b51753e1d0c9c0f9b5f37e0a57b203d2c7359fe6bedb5acf2a1","ssdeep":"3:N/BKL1XEQ3sn:eL1Ul","tlshash":"eb5504c055c07074c530cd00dd5c545d5005c400543d4401715d04d41f7050041145c3","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.598762Z","last_seen":"2025-12-20T17:14:00.598762Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"69538f81b313cd6dd5c61e75cc56ec22","sha1":"840d8710e8688d521fd487929f2d2860a748feb0","sha256":"e163d4c0332fb0dcf260865b3cc9eb80e70eb475445c5f2ca59169e183ff0115","sha512":"cb1304dbbc30646a9695906eab40f9224323577a4768fdab29e148406acb3475c998d620d2cfec96c4eebd6577e02c0e7b20c5a52940ea490ce8794ecf798047","ssdeep":"3:N/BKL1XEQ3/:eL1Ue","tlshash":"2d5504c0d4c030754530cd00f55c54155005d400543d4401735f1cd51f3000040105c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.599675Z","last_seen":"2025-12-20T17:14:00.599675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/?__cf_chl_rt_tk=CwAj7omZhSeKtETsLG1h3DH37reuCaPBB1KLQs_fI78-1766250813-1.0.1.1-NLjuyhYiJ6waBOjWGIGqrbj6z4Qjgm1fhYZpKEy61Xk","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T12:22:48.649902Z","times_seen":784295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"841a40700b68cab0d789eaf0809e4259","sha1":"5b9cfa234e6e3d6e652fac7304f03bf050e3416b","sha256":"b22c420dde0d8d0e282fb78f03392ad0cd9ba38fe3338b88a4e21471654063ce","sha512":"b8be4e5114c3710f9ef1d0fbc278b9d597a360d60bce6c3de78636bf77468572e958789edee6b5ed591dfea569d2943d54a9f4ede8607b153f6a5ffe303c722f","ssdeep":"3:N/BKL1XEQ33:eL1Um","tlshash":"5c5504c0d4c430754530cd00d55c5d17d015c400543d450171dd14d51f3000040105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.600936Z","last_seen":"2025-12-20T17:14:00.600936Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a6d187434b413269288f1995bc67325f","sha1":"4694a6615dfe42dea342f7aad2346351b887a70b","sha256":"6bf176a787a3c0c16f4c635f6ade752a892dd114ecfc7bed14189650bed967c2","sha512":"5133f58f814c6c50327c3b9ef7180f867c220e402f967c3050180e9a627482400daa03d0bfc04c255ac2379f000a2c45567c6d05c86c104cf927f5eafc91c5d8","ssdeep":"3:N/BKL1XEQ3Dn:eL1U2","tlshash":"9a5504c054c070744530cd00d55c74155005c4105c3d4455715d14d45f3000041105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.601896Z","last_seen":"2025-12-20T17:14:00.601896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a0dfb90ae0fbfc9ced94a5606d124949","sha1":"50e71c8d2d2ea5368ee101b8337ea983b9367037","sha256":"eba0f0606e14583e14f74c2aa08324a96cadc6d64116c42de631d57dfe027a3a","sha512":"df2061773873ccd3658210d1786fa5b04ef13005e77032beaf8b6d439965667173f3734137129c7cc3e8fa6253403c8587339c770e0d18ca4962baa8c410c37f","ssdeep":"3:N/BKL1XEQ3Yf:eL1U1","tlshash":"2f5504d0d4c030744530cd00dd7cd51550054400545d4411715d05f43f300000010dc1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.603078Z","last_seen":"2025-12-20T17:14:00.603078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0388582db6cdbac59d2d2a77ddff21c","sha1":"f4d0257e56c21cc5ca3d718830ed3cd22ea05b21","sha256":"70e77034bec090883d2f7145b168b7dfd6e61de922a6af222be142cb9622c394","sha512":"63616bc7655b244633fb99987dde9db71d48fad3a8a5c0eeae99b9a2d9f2877c3bbdad491214cb94fd3fdf03dd5451f2d01fe1228d7d54cfeb2fc05594aa4be9","ssdeep":"3:N/BKL1XEQ3K:eL1UT","tlshash":"645504d054c030f4c730cd00d57df53754054440541d4411715d04d41f3000400505d1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.612831Z","last_seen":"2025-12-20T17:14:00.612831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6afd027be6a109acf6b0b8afb95faa87","sha1":"c9c7c665ec8a0261dcb4f95b30b22e589a908cbb","sha256":"f71ab68e09a6e8a1dfcf40be7bbe612e8eccd24867ac05090f46d458afbd3557","sha512":"1cfffc6cdcc6ca7148b6685646f9373d3171b5eec720b65278b9be106c010d07b05cb59fad058df72bebb5b7dacaa3345bc98fd2d91413e261d80c0edae0d810","ssdeep":"3:N/BKL1XEQ3mcU:eL1UR","tlshash":"775504c054d031f44530cd00d57cd55750054c04541d5411715d05d51f3004004105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.613861Z","last_seen":"2025-12-20T17:14:00.613861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d3713d9fd94dae79f537f3165e4eeaa7","sha1":"d9c842fe7711fef7b352727bb01d37315028f706","sha256":"09c8bf83c55198e6f71f233081b2d998519e2e0a1272f0a90a872626dc478bc8","sha512":"9fa02f439c495858405dd82bec2d75239a3374dae77f1ec6eb037c6274e8d0e59b21178f71f3cf5dc69133ba6aec1b123db3a3e916c4830875cbc247717523ef","ssdeep":"3:N/BKL1XEQ3sRU:eL1U/U","tlshash":"f75504c155c030f44530dd00d57cd717d0054400541d4511715d04d41f300000c105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.614734Z","last_seen":"2025-12-20T17:14:00.614734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d254201857615f0800e98867e0f29dc","sha1":"1ecf9166762e13effc81b51c1c863833b8f39628","sha256":"6fecda30091303503c20909d379e01fe5c422f0656dd4fc9a6ec1e061dbe5f95","sha512":"919bfcd6584925b8617b1d22844201344cd574b899f61571a4fd2be73770a51bf019cf5ec58a1151c7c2d947dccc93f65eff61d66a54a21c0e6a7506ee2e689d","ssdeep":"3:N/BKL1XEQ3Cn:eL1UL","tlshash":"4e5504c054c030744730cf00d55c5415500dc400743d4403715d04d41f3000041305c5","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.615877Z","last_seen":"2025-12-20T17:14:00.615877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e218d1ada8c3e03593426168d41b9f6","sha1":"f774e2b3167d2e4e3e6f860f16c51bb86fb2a979","sha256":"7c1f9d7954b41ff18eca76aef4e60918a9514f931c7dbfe10918872dd46a1a3b","sha512":"d0e74acebafd92bc2b551136bea8b119502c3b31d483e5d27f88bae6a901aca3d3e47099288feb16022fbab23e3bee5f62da7f740054d4b2295f0fcae86bb353","ssdeep":"3:N/BKL1XEQ3K:eL1Ur","tlshash":"1e5504c054c03074c530cd00d55c74155005c400543f4401715d04d41f3110041105c1","size":1337359,"data":"","first_seen":"2025-12-20T17:14:00.617017Z","last_seen":"2025-12-20T17:14:00.617017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c52e3c121ae6/RGRI3cjAibBZVIlh003i9qHFthllmCJ.CgM52u6r8kY-1766250805-1.2.1.1-tsvRocFfqOMSY67r0OQcV_eks8rwD33XJtCUMsTfce_H3mYG0oVn7qF9LKJZZzBE","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:25.821Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c52e3c121ae6/RGRI3cjAibBZVIlh003i9qHFthllmCJ.CgM52u6r8kY-1766250805-1.2.1.1-tsvRocFfqOMSY67r0OQcV_eks8rwD33XJtCUMsTfce_H3mYG0oVn7qF9LKJZZzBE HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\ncf-chl: RGRI3cjAibBZVIlh003i9qHFthllmCJ.CgM52u6r8kY-1766250805-1.2.1.1-tsvRocFfqOMSY67r0OQcV_eks8rwD33XJtCUMsTfce_H3mYG0oVn7qF9LKJZZzBE\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1986\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1986,"data":"-W6HT4tn$8zLbbu3kKBD1bMUvrEEPVCko7$OuyH2GyMVPoTjNjq1bXmhLm+Ik7f$0ANsZ3oo4YiLXWR66+bpePiYXlaHOoaEmgohjbvnphEpwRYKpocLcnMnDM9PHI9jMU32xyVutOOcvod$JXTjl1$vnR6-aKXc4EzyT-yvkHqOtl33OB4Dd8GEndTJPLR3CpDIBf0b8dCLLB9pWCWliBIpzsI$qrqHmYCFgfhlmlaoNJ4+g24QngQr9s1Z29a3oT3u3gYNgTi3w0I4yORhxUlOg-iTOX9KU8fHdUPwGBk$RPM2yjs06dOjuyLJAHcb7i8OpZGAvqv2Ougmnnr81Ha7eqLJjQTvHPalDVA4$onPVJJxnojB0kaHGOZVnOTUMYRcEqU7LwakZt3GosP6eZi8YQbyUQIh8YBRReQ9Qtni1Y0G2GppYiOECgI7LfMhN++WEEowEwiqZ6TJg1$BK7WsGDVO8$I3JLSoLI1$SxGHWY6L$sav$sgsl$zTnNkR9M3PvjXKcWsIhfU44Fn3xW7oQvEOgfBEm-v4U8NwL1YwWQKmkL8g$Ccc0klEvCOH0WKjW4CjCSJGbb-aEihm9MVdiXnSYjKVRAIiJI-TA7$Vj2GwbmfyqOPQZW8LgEWkvAAfJ494M0vG068$e8$N63bhLWg3mNTuHddkT-7NvZGs-$nYGxD99gSrRUWAxGHETyn2hVixn$Yf8k1g2T3g0QmvQDCaWClm7S3JwF6Q8knbOBf7mvB4ibhNMp2GhBKPzAU8Y6EVwMwzs7uJDBKFtI+RUPs-qZ9JdD01I9KGcBWsG+iuhdJm-h7SOoxYS2X66P78Bk9aP8Qj6ZL-iCOydVUhTWxlppveorARyPhuHdzRRchf1a9D$SpOUTCC0ztw3Iwsr-AB62Nxlltb49KNvHD-kYEIyPuh7077KxhoxFGKzmHwe1hvSWkQ+-DGizd8JIqgSn64-F-04wY39zOvqzXdzxnEg4sBLIDH10z6td0Ou-A7mZ7wXgrcXahvFjW0V3A9sF4Mx2lgyZwUTGYbKZ0ziVIUxUcLgfE7yorylV4vBiwfME4rKUAe1Ko+Nt0j+p7O0wkpraabvRWEU4t18-DSf$jp3wkVBT3oe1sbkY0ossoTz0GekXCgyahcK8ON7GLH2L7bWCokJywXFY4atGtHQO$lIq4U2BCY7$yS+TeYqnSYCo1WHIM6gnxP3C8EPB3BcGyiVkopCr+7u1lTuhyWAC24HNCxq-pwvcd7qUV3AQHaSyEWJhr7-UljCFUV9UwocN2qW8den-31YZDiDneUMY4n+QkKP+pMYHIcij+pRZTIUAN2xBt-QWeOaoXVek6zMMfctvGJ8rz$pmg-B80eEpaY3Z2IFu-KBvg+$Bjv9wi$2SQjODZ0COagZVaN$Ssh7uOQo8C8rhDRYrgeCOcGlZCselxDw8uMMgsFahu2JatIAY9+vSBzjrtbRSISEQZTzGk2uYzLnZSqhHLAasSXfIcFkVURBM6xerrU$YijkpIKI4wgpdveugAJR4-enJIAH20QQ1KN0rNcmvsUs3YIkzQhA2WiBKAOOvfgKHOGrjX6kSfjuamQfh7-hVbkFw+OStnY76dwhcyc70PNawA7vv+rlWGHdMTwA67NX2nr-2r-uGDyyBlzHhGY1afUjobhVIzDeHQWSCMmwcpvQ+svUVG7s-LKruqzprDf0YAqtYjILO4MOCLMOMbZVANdbLtZzFcyEABF8-pDpUrn0m7eDGgEJcZhoiRycX44Hiw1iZxg4dc+oxa3m4qfuX9+gMa6aNE$WLFY0X7tZ27Wp9BfLDs+PW$Oe4EQxRc7Ems8patnMesqHgwr1cOpX7uxfcboDObwh2nVh92bST-yF8BI1cj6u8MUIUnO7NyRbPpua6UYpHQXlMlZQpkitjHKy8O9slD$Bg4B0fON9pmC0vNvyo7o8DDi7dnGymYCnZJ6b3-bgALXzAIIoCRrHWB6is"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sat, 20 Dec 2025 17:13:25 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b10c5305bb90b4d-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: 4ma+WHEpHz/HTanolPtxOisKJyzGoCUf/GG8/TLqM4sMCwqwcUQjs9XBoUJKRzeDk64BJ+7RhDfwKVLb7lSw3g==$EBoZtNe8vRZey+9IeYSuAA==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bPI9qQ6sg253fCSduqcW9gjpUJwgDSO1yF2SoQ4Mn8y5oJaHoSUsfwsGU9Xlr6YxxACBWqII0kGpnZqxN7IPD2B%2Bgopn36pHWwIQ8hOvlkxUS%2Bjvvj2m1fsEWUtJ7zPUAqJ0eYt1hA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=857\u0026min_rtt=531\u0026rtt_var=195\u0026sent=40\u0026recv=29\u0026lost=0\u0026retrans=0\u0026sent_bytes=49845\u0026recv_bytes=4296\u0026delivery_rate=36952741\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:33.937Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=CwAj7omZhSeKtETsLG1h3DH37reuCaPBB1KLQs_fI78-1766250813-1.0.1.1-NLjuyhYiJ6waBOjWGIGqrbj6z4Qjgm1fhYZpKEy61Xk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuDXk4uDtz4X3ez%2FAuPpn4RUZfOMjP4F9ReiebNrXX%2FecGImOGj8MGexcVsh1Z8wNCClMhpgPS8t1KJbODqfi8PAPyIeXfHIa7G%2BdF0hJdg6916j\"}]}\r\nAge: 15\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c5631f2b5ebd-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:18.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 17:13:18 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=8Un3K9_pfuNOGbWWSA09K.nm5cPWawwThP5zE2XFWLM-1766250798935-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b10c5054f7756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c5629d100b4d","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:33.908Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c5629d100b4d HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=CwAj7omZhSeKtETsLG1h3DH37reuCaPBB1KLQs_fI78-1766250813-1.0.1.1-NLjuyhYiJ6waBOjWGIGqrbj6z4Qjgm1fhYZpKEy61Xk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 20 Dec 2025 17:13:33 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sm6pIPigM%2FMut3FtW1bQmH%2Fi5ipOe3hF96zyvured4%2FKogZgvtuFuvQ0BC2VBrTWf2bHQijBMjPi%2FmuxqOBvlnZ2R82f8ArE9ROMeEJdzJbuNcQTX%2BqXNW%2FfZvm8FJzEONFGsxpisw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b10c562eecb5ebd-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=499\u0026min_rtt=499\u0026rtt_var=249\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=553\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119747,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a27779d59454c002d3d05c20cbbfe59f","sha1":"65735f167f44b121ddc6ebd3ba4706d45b5da3a7","sha256":"ef4e252e8e471fd7791a846256a07a32a0c94005c0868e66cdce7cb02aecc485","sha512":"4d8bbea36cab5b8ca36751b42bd06ba5afe7dc166367901dbcecdc53b29b710d4fc84a39103af2dbec22ae4217f0210be98b00a3601354bb5442f380bfb2bd90","ssdeep":"1536:imcA+k3eLpm0a/Ot6xDBxzrwDN0MPWdBrJkJY+Pu0BvcNg28nlZ:imqQOAxFxzrwN0MKB5+Puzu2+Z","tlshash":"35c3e7ce79ce75490367b86c00e73acba2aebc44701c594ee901d8e978d535872b7db8","first_seen":"2025-12-20T17:14:00.562113Z","last_seen":"2025-12-20T17:14:00.562113Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":2,"dns":2,"connect":1,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:33.978Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWJKd7WvuYz%2BaKg1UOYUk8GXaKHIxiNZbVpgCeA67CQCJV%2FJ0AYZwLiJGBdLSH0xO5IIuh6B0FHFD1fBjIJeAk%2BH4GqEEOKr2v5e5WtFT7dWKeU%2F\"}]}\r\nAge: 15\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c5635fa85ebd-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:33.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 17:13:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=0FnOPl1YO8JRiR0xRdh3OeUITgq7fHwAOxt449253N8-1766250813991-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b10c563697eb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T17:13:18.671Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sat, 20 Dec 2025 17:13:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C9TyXMn3VKBelO8qrI%2F04PWe%2F6QnA%2FSd3tP7%2BQEVE4WSFezoCY6jkdcWAmrPdyarLtlHvn8n0Mqsz2PtQpdoC3OC5eQoD7z%2B%2B6m9z3M5CleDCBt6OND2vKkxXKsyJjOejs2H0771fA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b10c503abcd56ab-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b10c503abcd56ab\", cfL4;desc=\"?proto=TCP\u0026rtt=466\u0026min_rtt=466\u0026rtt_var=233\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=405\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5321,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5321), with no line terminators","md5":"2be9d10993df285880a5fb0e9a53ad34","sha1":"6cf78e496636c226ab8ed7f51cf015242a46ee85","sha256":"137ca8cf6c5c3e1b69d538f5ecf60b118ecf12f0413b4162da9677422a627b2d","sha512":"915acc21013ddf319deb72f749673dc29147ed1cde4e56d0afe493cea6872df0942bd95e51266afc52c6bc726a957ef2d9b4afb93370f7fb816456768a03eeef","ssdeep":"96:PNybXZtIEb0EFW87IWiVNdMSN+ImN75BIMDjO68CuIPM9mbiXCYzueh8VNYmw:PNadBnq0SA1IsK6Pk9yYPy/dw","tlshash":"03b12cf2c647603bc3f74bf228fab3545320e36197054199f6e6d85c8aeee0b452a581","first_seen":"2025-12-20T17:14:00.562885Z","last_seen":"2025-12-20T17:14:00.562885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c503abcd56ab/p8nxH6Gyq1WAq2RrjkakzmveyFzp9bGVo4LftJlJi7Y-1766250798-1.2.1.1-M2PW99bMUiAw4NV3RAV3O.qM8dikKnPZ9NC.U85aneNOqA6XljPjstPHd10.FbHO","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:19.117Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c503abcd56ab/p8nxH6Gyq1WAq2RrjkakzmveyFzp9bGVo4LftJlJi7Y-1766250798-1.2.1.1-M2PW99bMUiAw4NV3RAV3O.qM8dikKnPZ9NC.U85aneNOqA6XljPjstPHd10.FbHO HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\ncf-chl: p8nxH6Gyq1WAq2RrjkakzmveyFzp9bGVo4LftJlJi7Y-1766250798-1.2.1.1-M2PW99bMUiAw4NV3RAV3O.qM8dikKnPZ9NC.U85aneNOqA6XljPjstPHd10.FbHO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1986\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1986,"data":"WD3Fjr880aew$$rbb9ojL2nntXWHIrh9uBpZMwIP7fJwZlQbkOSfaR+XLgdExsl0h$0RH$X-ReClGfDIBpj$0XNUbHMd9sbVDZB$hk7sex2sIONyZeFL7m4Z0TvI48LWqybZkIY2BmEO+ynMdsXP8$CM9tZm+nmxpixK7tVhSipO2USPFXMPWihRBhjlNQeWTUZin1oKWlKOnDglzfg8+sll7D-3O-iL1rLRC+LVehrtyCFSfYyVvkCDN4h00jVK38JL3e6saOX++3Yo9q8ZQxIJTlBNslJb$YbLwS7NQkk0WTYzQBF3ZmKI4ZB--CU-g2ipvJ6Kydc8dCCJVoWCYR96rzeAHrY0DEiGl2FbNALu6Kh$mgaQ$P2+$rpYMvuMyW7UO7WZnOYpjGFqLHKOwvzqgkhspJSf$AgPnu$tWW04PmIA0JbNcnsNgkDoALLFnPS$3teCmhJP9nJa-c-2cTjuFJvIRZ1xAMrsta9vHZAFV9f68TJ7V0mevrehjw-$MdNs6UgXEyjh8q1cAwZQ6nZyvh2oNlSyGyXqjLfNgz9U8PxUC88FJv3$sIVrdV+0xiDzg1S-na+NAJwwxClHyJK6eqJVcpN6bKTHlkHg$9L3ED$ZeO0MdvHRBnSpojXkqYJJ-wbum7hgkVjMg9DFWmQtcN7SpBnR6kImfGb2xIOGxr9cOJbUINM$Py$qE0a7NJUV+k4Q2D0ZGWO2gBm2GkwXfpdsK1fnjPecCg+eaLuMYLXNFwpFPzHE9v4kVFmgdAIWHR$7AT4a6-Ug+Gi0vf+6wchuVveBFwo98v8uZMNtnQH-sJ8LjcomS73tSkmXzf+p7MRy$iyP9LXqcB3E$wGE+X6VfT9rNCz99k2qTAMAaIUxz2N0iatu4Q8VescuxaGYJBwdqPmHY83SzDJDqQAzZ-IM0BEsepdNAV3zcyO70afFmVaWPIB+-29cXINn$L7$0os9Dx+U2U+4DjR7AF++sbdJ06F9lgt8Qy$HHlMeDDgVO2SPT7VOn4DPSX68XmyWR7BIC66e9qrZH6ZOpOV4J$WHO-h0nQgYXbbhuZm0PLKVto1IOdwgGUAObWM4MYQsER9Uwu2SPvSQAfWxokDCIb81Yg+eKvjp8Uu37ZYgPh9l8cGgCZT8X-+iiLdkHe0mmka8eA1GxveIPGhkIi-+DGxtzLya1+LoaGQ6c6r09QNqUUWmoWMq1ybxhA8xpTTkYUtp-UsYhRbK6xDcEqa8iZRviT+6JI81yJlcPC4TERS37BJia6gbgvjqf9pZR3j$VX-Ym1xD+UPKu$b0JN9XAjC1UV6CgGZZBqXdZPCb6p0Cb2uRH67R0ruBEKfRop2d3HeNYpw4BH+sjU97ryQlfWis+kVp7iI1-wWOPEPYrtjLJKKOMnHNzRvrR8kox+SvCX-QbsSN$gP1xMcYS9+bsMGMfpdjgHqvQ2fj7RiL1GPjdBRvF+f8p84Sik0z6M-Oa+ivbCb+P9Z4bkNU3qrT1S8vYlsDj1j7cbheGfZFqsDh7QbrBWbiyzxFNZjOzQ9kXqDAtq+1qUtItcrMQEF09KVMwREsS660oUYSKHsg02un3pAc8$zTxTnWf4CORjYfDoFq-f8jfSPOqlLdSG9eKOl37messhGHzpfWIFz+WH-+ogs8l02IMIh4iytTb1d0y-LFza9Rr6kA$k$t2hLaYw42ntZIQpAYT2kZjg+reTKzf2$seF9A26IWY8D7YCy8Ed2JT+IMwU8l0btA6z3Xcuqn-rXW+0IymMyfFf7qtNeAueQ9l$hWqpdQqnPWsogixTsqdXT0soLlpmTrJlkq2qgRERPF8bmFsfeLgvti2fnV6D+gQPubV1knODjcNsDWPtA6E3gjRssH1XYkyVf0r$Xhy2R7OjCQBI8K$+FidHnJjE8Ar3uuddHkx4iC2Zaya+6FRntHcETACKFzFKXU+-PASMp9$KwNz7pZ37qxmo0SS6$14V7H3OhBkEImzw"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sat, 20 Dec 2025 17:13:19 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b10c5067b54b518-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: UIpzoiyiA6T1jN5bzgcGdpABmdeMUt8sJtpp+OOblIhN12ZvQLv66rwjTLTVvZdwMuDqlHrgJz7He2qzp/1RLw==$TBw6bInQfalGinl+heQEUA==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YpLdJXPkrx3Nh8g0rBPbfYtwg7swUWtZORiBGpkhiUZrxswphZlIajUgLvtaH5jlFhhaLnS22jJQsyD2rGDqdTgXiNBlTgOECYdPpDgTtU8aq7aYbjJ%2BtJxZ7M5Y31J0xnUZfHQ37Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=855\u0026min_rtt=502\u0026rtt_var=287\u0026sent=42\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=49193\u0026recv_bytes=3835\u0026delivery_rate=53857598\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c5132a88b518","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:21.188Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c5132a88b518 HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=tiWH7tRRbKeudr_z5qS90fMiQnhZDC1E1ss_wKXiMB0-1766250801-1.0.1.1-BXyJsXv98wo4bAc00ZQgvb.IdburWeMXT3bI8mtIkEY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 20 Dec 2025 17:13:21 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xBBBDcpnKCcrZ6N8LNPV0%2BYUeNE9cnWLoZcG%2FWsBdsOMOYkpZf3egiylHULrBzMbLWMWbqkIB7jg8q4yXm3RId9O1P09wlpwz74Fje6CqdGn7Pz4YVdNzwuRrdMnb9d9leqkJrY6yw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b10c5136ed81ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=463\u0026min_rtt=439\u0026rtt_var=138\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=894\u0026recv_bytes=918\u0026delivery_rate=6071278\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115562,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"297e560312e8cb3404efcc672a254884","sha1":"cfa3caedfc2dc3b0c5d598fb36ab4b661d9287b7","sha256":"d09493509ca45f2b98bd0053cb84ad21c8d3b2e567203cd3e8a40cc912efb3c5","sha512":"3c877c4d1ab938527878f351aabcfdbf989e9fcbfe7e84940fff8bf1462bd4566534002e3d7923ecc6c254d3f880d68b2b49d12fd8847f7e210bde4342d3b41e","ssdeep":"3072:iIVCGICXOauVTlmGhUYXnGLe9p8MLzplW:NVCbyOauVTlmGhUYWLe9p8oplW","tlshash":"21b32aceb9cab589532bb06500a735cb61fa7c84700c6d0df946d9e978a035cb267dbc","first_seen":"2025-12-20T17:14:00.563772Z","last_seen":"2025-12-20T17:14:00.563772Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:21.257Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:21 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASrk%2B7N2A4jMmCRWE3a2hQFD9ZdycDsD6AGK%2BypF5I9oMMEJCEswDaam3VNy79dytZcAQQ4U3cTAKzxf2JyTAqmkKa73Oqy2hV3K2MxTN4j98mlB\"}]}\r\nAge: 2\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c513df2d1ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c5132a88b518/x6wCXWwD_hN_501JX6DllPk3D6zCeRfsjZF5PRYmy8k-1766250801-1.2.1.1-1k.Kp6MbBeQz8ceUFOftTw3u3bgAXWiJoGQ.D5Z_92_t_HRR_NOxIVNuu5LJVsng","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:21.450Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c5132a88b518/x6wCXWwD_hN_501JX6DllPk3D6zCeRfsjZF5PRYmy8k-1766250801-1.2.1.1-1k.Kp6MbBeQz8ceUFOftTw3u3bgAXWiJoGQ.D5Z_92_t_HRR_NOxIVNuu5LJVsng HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\ncf-chl: x6wCXWwD_hN_501JX6DllPk3D6zCeRfsjZF5PRYmy8k-1766250801-1.2.1.1-1k.Kp6MbBeQz8ceUFOftTw3u3bgAXWiJoGQ.D5Z_92_t_HRR_NOxIVNuu5LJVsng\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1986\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1986,"data":"Buy4cZaLKnZe1XOGCOUcAL1kiAhHhLwbOge-FwD6MytMiBlUPwptvylVz-$vmpL+MuNMT3-njBK6BUWZfB8HBXwDD-UdzYz2hKgGqQyOH8E$7E4CmgnZzmyw32+4JR9Nt3G1QYKg600Y8lSkK89tnSfVNuzT2dsuAu4QU9+3YrJNrHDh27lncbzz2NxfMR7aCDVJVlzXSpNd+CZBeR046OkVVGuPeuuy0eltEbewxBqIqQK9If8kGxAvq7X+NN83yu7VTYobKK7lPP71davlfB1+HjHC4mAmT-aBNQFmpI91jd1tP6lNmm92v9e91jmb4-tDY1G16G8Nj2V8OcTXGpri2iKAfnzn0Xax7TYWF06XCVJW+CVnSwjIF0kfQtAh3uBLBXSLv16b3CjIugo-ftbMa$8ZzFsJAGeDf4qlLAIdPCZy7uRiHWo8zLG8Sxj7zOKApRqCkI4l9uzQiAoYp7z9ikoc0l40nazd3g+gHmdfQXZF$8HjzpLzwqUAyffzsIToAqH4e9Bj048HkqZg89-Pu3Gmu7uuu-I3N3RsJWNSodJeKberUjrnPO8nHgwDXe80Kz0rmGOj$zPvlTzX1uU6KPnlnviINJnVkc74k-3+jW+tvIU+khjpSxxIb$g83LnAU9uHvWWHRPtuN+Qh9zOnrTJjWFCzXxih6ElWTIe-KY3MLfoUgzDUfwG9tyRxoatBv0t3P$jslavKDkqZlprwfqkRb-YL9$AjFGP3gHqo+mgNEEh4walw2Ea9Q9-jkX1IJOcF-JY4XPh-D2UcODFvyquwt2TarTrKWybt7twtfEOBYRAG34ZsTyq+Zm-xkjNkfGEIc7HSrzB2-eBvz3x4fWjUwBF8M61UaQ0TQKWdp0yGgZg0WF3u3aCjYwXfEuwbCtfVFWY0uwU$ZO+VgYb9WkEIH1+4SgJT7a-VjvyB$LmrtbAbujtnflLiRT2VyL7BOSPyGzC8V07ERwHrlxpSJo6F4gKMucs7q1GdF-l2uXCCOk4OuscdcMmvG8YgpjecvgayiEEJiDFKDbGjGA3sNsF0LaWLu9NL3xvO+6jL96JviFw8o2XeFwGrPoz0NghocsTyMoq$2GBIsKHx-Mk9wMFo0H2KEJ6ELu-Z-gmwnqI$U3AhcGc8sJR7URQCtM+Zb1s3136PaPOEsb8u+Fbq9aPfcydW$dh8+MKAl33m2x-RZ1IErvlQWe$eaED62uw7$4GXAajML3twC2rd2WEAhjA22GtZfJyHDyFwbT+YzRYLc04LZh0mPht-6bbhR6u3g4EaeHVZcFyFR7Ot3S676ZjUHEu-lEoYzhyq+LMaJZMVJN34utMoVyjJurYIAF3LoCeiYZQYSxwOHGKxOHOS4I4zZeJZ9fzp9C8w8+BQfr3DdAgKtzhc6UtOU4U412w48Ci2DAGUnb0bhGJ22kC083ymzNZHI6+6jjfIp6tXzwZl$Q072Yxo-hxHupJahBYztr9UNZHdh3hKL1sEFMaMbsDBmSK0Q0vpAWLpLsGYr-oGX7S9+IPxLkeFQZFNsdrKkrDYGvdNFxsiZrZKyJTVrImEihqjjE9JwXNuYH$Zmz-D6FIAbLU+qWZTkyaf48eeVqCO3oL+0TlPpTwNRLY-RHDGidyknbY7DoN32EuQjYqk7wQtFwtBwWCK+zu3bfFewtDPgtQp3yvwpipZWO7fOh4fDVFZ9fS+qT9Dcs2$MuKMj$RjrDDiT-07j8pzSO4n6wHB0RvN1QD7fxQ60QpD12X1bHG2uUZeqJHOCK0v1aj$nJ6EcMfrlplglfn9EOuxVI3HaPL+SI3pF4-x19sAiu9vFdvQ-b0V3NyQKEgIJURMOgwN2p+OZjxgAfgATg+L7CAO42+REWbOX4DJbdnlRb6DappGr88PrgdDqH-ShF3i4zqTmCLjPRZX++pVjZXOaHURb0gAgGrbaU2Pi6sgf++gJCD1$+I3kaKkeIUYRXjn9oZcDJg00dnLlK+0Lw"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sat, 20 Dec 2025 17:13:21 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b10c51508101ae6-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: 9dYDUV6yp8xjaJwW/ZQZu1YgyOxJaGLkvkmtwr8TEGTILIGafhrEXNtTwTu43CRMKl7W/OcT+RO0E6hm5uSYSQ==$PN4fk72g0TCeHwYRQkWtQw==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hJRldu5E62Vh%2BJSronnskr28AlouAGKT7qHlWVLiNQKmdsdcO0UjG8DgCqw85blI5cRvwtHCvJtpY9GK8qShyV98SjodFegAEmCBhCsXOisEvEVqQ3hV0XitqKEyIMfK8TtogNw19A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=730\u0026min_rtt=439\u0026rtt_var=156\u0026sent=44\u0026recv=32\u0026lost=0\u0026retrans=0\u0026sent_bytes=49842\u0026recv_bytes=4661\u0026delivery_rate=51229968\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T17:13:25.476Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sat, 20 Dec 2025 17:13:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E0bWtcsEW%2BuHpmaiDqjtPkubYlBkWcSMWa7s1%2F3q%2FjK9AwNw88Azw1mK4qp1BeHL9VYVX3%2FQCErSZ6jlQUSrOxIF0OqjKkC3LyWNk%2BUKB7PRq1ApUtSRu0IuTX6pgtTuRrWUMgKN7Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b10c52e3c121ae6-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b10c52e3c121ae6\", cfL4;desc=\"?proto=TCP\u0026rtt=5848\u0026min_rtt=439\u0026rtt_var=10354\u0026sent=45\u0026recv=34\u0026lost=0\u0026retrans=0\u0026sent_bytes=50845\u0026recv_bytes=5090\u0026delivery_rate=51229968\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5363,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5363), with no line terminators","md5":"2b6d6365b043a6fd9e1854bdc69ed565","sha1":"784f98771b7b6c81b945b7ac94ad182ba2279ba5","sha256":"81aa667d4cda0ed07dc692bcd74bf371613278b551c52d012186898460b61363","sha512":"73fed22aa170303e3ce9c5e4662836b746642523484d16ef0e6f8ac4b44d333f2f9ea6ae7674a41c3fe255939f088a6da113c206d6257ca3d4c48833cde7c3b2","ssdeep":"96:PNybXZtIEb0EFW87IN4Zs4hF1O1QLSklMvSNqFxy0DrdBaOYzueh814imw:PNadBBZ3hFoElMKIFQWLazygFw","tlshash":"0cb16ca65761102ba37a17f1c4bff3546041f1868b0ec685f5a4ee4c86dee0b049d6e9","first_seen":"2025-12-20T17:14:00.564682Z","last_seen":"2025-12-20T17:14:00.564682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:25.569Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=ZlLQ4Eh4yVacD7dMU.vqfoplJOOqcfQzs.e_ojIZ4AI-1766250805-1.0.1.1-vgTvjRkfZfOpZpl1SCiBbveBU.RPsYKkXIuNFxpFCAk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:25 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVtF6S6Ir%2Fe7LEA5ShdeeNaOBWVANuGbrsGcmSQCVqg%2BagWVhJVzhJ9aBGuuVBhsIuncqOffQMnbASlKhdPLNws7EfoqHa08A6BumxS9BvDgIw%3D%3D\"}]}\r\nAge: 6\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c52ecac80b4d-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:25.603Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:25 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pw9VXV20GM8ioIeFhv1CiGp9lkNbA5El3xoRRwftZ%2B9agmop%2FUpbqR8QkMs2mW6npTlKHkBhAQSx8PhgI%2FR9rSpvQb%2BtaMBgZFfIvb5pz69XEQ%3D%3D\"}]}\r\nAge: 6\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c52f0ae90b4d-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c503abcd56ab","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:18.818Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c503abcd56ab HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=Dok3ReGSDUb4kk9q_pNy.BHAnf54evuUG3Jo4yD8Y54-1766250798-1.0.1.1-qBSDXD2eYOQ0luXhjXcd_Wp.OP3hQ56Y.axlf6FKBpw\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 20 Dec 2025 17:13:18 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tPDzlhhARZPGtZlojSwmB7FR55iBIiTIJecT4JBHGHOgyOW1262rAFpBd4tDQKZJmO0YdGrdgLI4PiUWns5rgNvLaN6n8bQq6aoiITpewtE6Bq9t4Bu2jOLEvY5qEs4N0XyrO8iArg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b10c50498e2b518-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=502\u0026min_rtt=502\u0026rtt_var=251\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=529\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d5c67036cc69fd6164876ed46c1df66f","sha1":"3a5760e4767a8de63c08d7d9c089ce6dd14099b4","sha256":"f047a9143e71c4b034302d4eeb53cbf36a6d947484b896e40e234d9db0c58cab","sha512":"6aa1eab97fd194f187447776fe8555492118b6e70357801efe7fab30f97d001106d380125610476fba3417f86a6bae251e39efbf6f3e031183547ae336eb7c5a","ssdeep":"1536:iVLNFQ5N4ULsQ/EKR/sHmEu6pYM7JkdSofj1DK2gJMpAAKzN6DuLaqWM4:iVLNFQ5FsQ/EKj6pyHM/JZhN6DumW4","tlshash":"a2c3eace35ceb586436ba46800ab39cb92be3c44704c694df951dde978d4b1872b3db8","first_seen":"2025-12-20T17:14:00.565505Z","last_seen":"2025-12-20T17:14:00.565505Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:18.863Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=Dok3ReGSDUb4kk9q_pNy.BHAnf54evuUG3Jo4yD8Y54-1766250798-1.0.1.1-qBSDXD2eYOQ0luXhjXcd_Wp.OP3hQ56Y.axlf6FKBpw\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:18 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0AQmVxd2GzBqSpg0xseus2ipIXDQsGsY7pNCcHTcnMaVauFNtOITy%2BIwAyOWxmEfTnmutaZt5XOM4UE6u1cE7eIO8PejW1cS2zIqflhBJC5lg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c504e92db518-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:18.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:18 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFXbBADh4MsWp1%2FViiRDzNs1n%2FpqPIOxLQ0y7SFHQS0l25IguHA8cn2lnU8jugBc72WFY4lIjai6MqjeYxFS1i0bS5LE%2BaYxdMvtFZxzADCQcml9\"}]}\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c5051b731ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/favicon.ico","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:21.222Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=tiWH7tRRbKeudr_z5qS90fMiQnhZDC1E1ss_wKXiMB0-1766250801-1.0.1.1-BXyJsXv98wo4bAc00ZQgvb.IdburWeMXT3bI8mtIkEY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 17:13:21 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etjfKNWbb9TcbbMOaFAFXalPWMRtkbwMo6l%2F5gwc8txRUpsb7QpAfxksrAmgH0sPNLPey7hIrjyrL7rA0W2m3%2BluWvMS6dmxJ21BayyAs64WvYzk\"}]}\r\nAge: 2\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 9b10c513af161ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8685c5dbca5821daf0ff5e4090ab5b4d","sha1":"6ae5c740b1ca7269fc885e6cbcfc60dca5e0ec52","sha256":"75bb302bcaa1f1c3690a4d204b7020630b0de55a7aea614ca3de29de655a6503","sha512":"4f36eb2cc892614a70cd32577cd7b7315b008ff618cb8ca922f9803789e4f6f5cabe09b35e48faf1baafedc90720eefb38f8900f987dc2c53d8b0ca41314a45d","ssdeep":"","tlshash":"d2d0ebef4063638b0c02226038c620c2228c12ebb43a55e82d82e883028843ecdab9d8","first_seen":"2025-12-20T17:14:00.560612Z","last_seen":"2025-12-20T17:14:00.560612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:21.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 17:13:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=Kcy2f1jbjdZfNKwhuC03AB89Mq3xnEQASwXaWXTj.Q0-1766250801270-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b10c513dc0b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:25.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 17:13:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=TLADufg1twC8Vjh6vw.aNglA_lJMBHecRccF0XVbYbM-1766250805621-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b10c52f09a5b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T17:13:33.861Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sat, 20 Dec 2025 17:13:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KhqdpI5PbaoBtBDaoTgcq%2F0n8Uo7k6zw3NTI%2FmWWOGIWd7m2THPEXD2oCZZBT9DA29SPADknhVHXTQj1GgrDcPL9fYil8GvL9UfbIiWbBJMWlG4VCamWVf%2FTETFXNjNOM8qmqPWijg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b10c5629d100b4d-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b10c5629d100b4d\", cfL4;desc=\"?proto=TCP\u0026rtt=8075\u0026min_rtt=531\u0026rtt_var=14581\u0026sent=41\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=50850\u0026recv_bytes=4725\u0026delivery_rate=36952741\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5342), with no line terminators","md5":"00f9a818fefb17661d5e755c5f9b8faa","sha1":"29e0bc7b61e26e0bf1eb8bdb4088141747e1c1b8","sha256":"6f6411293f5f827d786e5e072e9ca714caf75a18ceac81eaffec0666434cd644","sha512":"48a691a9fc0b6397211730008e19eb2707affab8a8b899847a5803286623a5b7248084e711adfc39c153459ac2d8019edcfeadfac1f9766c85a67909187dbfe1","ssdeep":"96:PNybXZtIEb0EFW87IuAgDQ3I56r5IC5oUYv7+NYzueh8yqmw:PNadBbAgDQ456GC57Yqqywtw","tlshash":"d4b14de37961202ee3fa17f2486eb3446662a058df48c558e8e3e95ccdcfe0741565d4","first_seen":"2025-12-20T17:14:00.566494Z","last_seen":"2025-12-20T17:14:00.566494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c5629d100b4d/mwlRt6O06t9O8MdU6JcD8XCALw73Lu8Zijozb4CUouk-1766250813-1.2.1.1-Nant.96w4PtHzwNV26xRMDlh0_CYtrUUZX5hNdi3P4vB9utWu7Fl6U6AULvsacq7","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:34.213Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1268521867:1766247117:-rv3iJApVW2l8PBRtdVTEGCYr_5R3hnxvNjrXj377SU/9b10c5629d100b4d/mwlRt6O06t9O8MdU6JcD8XCALw73Lu8Zijozb4CUouk-1766250813-1.2.1.1-Nant.96w4PtHzwNV26xRMDlh0_CYtrUUZX5hNdi3P4vB9utWu7Fl6U6AULvsacq7 HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/\r\ncf-chl: mwlRt6O06t9O8MdU6JcD8XCALw73Lu8Zijozb4CUouk-1766250813-1.2.1.1-Nant.96w4PtHzwNV26xRMDlh0_CYtrUUZX5hNdi3P4vB9utWu7Fl6U6AULvsacq7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: http://news-hypxrliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"kx2WGNC-9yb3$v6qEHbRmJAVH3zoBWP4RNueKXoTmomile3A+gd-MyNLMQqRSfXr8cTgB3cFf8hLRNSn9DmphlafFL1gYcW7x$OaFX$u$87B$jCc2mzrPZ1lOpJgr6+IG199xBS9GcC76GtBxNTBEkLaZdGI$E4tnqmSe4Ubrm1N7xSUL4V6RtCZmckKArwwpfOQw2VxuuscgGwqIRDJaqkLD$cbmLFKQ-qG+7Xu87w7kIVNQDKwxB8LqNosc4U+TTg0hDtSXxzoVCO+9JffJJMsS41NetZgKfkPHDrqrwj9Qq-P+Mmokaj1drBZMmN3NOj2dlsBk1Ah1wXB+enTJrNaYyoBOtRxvN3QMdvFE8UuV4oa3pLf93GA$vJXZjTMyl+tDcQPmpi+$9nVoM7K2S$DdxxvyW-trpY6O93msYGCxgXQ2lIUX$3aF6Ymt1Bs2N1bEtcQdZwGcXnukEmqlo8fXj$12aBJmosJPYPR2+jl3G1BdC8gmekXc4-jtliJ8qNzGTDgJ8EoPnOMcFjTMYdFDFJee$2NDt68idOl$PfTk$Fs+rxI7ZimyUK2wHmz1tFKWsze+9HPdaZUf74pMdBSJgVk8mfMXJ6kFl$nmCHfPcIUvYJQUVzhCY2GfXFiflNmMKtWudx3mghOF3FuhlMwyhX9+$EyFUl+dvkxbNloVWUh4jJukA1mOZQaijFw0lBZhBq7rYMd+XiWt-uxlowk$Yi$JO6KRGytHulQH-6YeIXFoeNFaNBYOHe0SiWg8SS2xueuUNhKSg-IsKcCXnY0x1MHejocB1p34nKNYd7Fvp+E$9jm7CxSr2mbQp+E1-cesKShnq$ppZikeMtpfwdoptCUf3fDyz3zb8NBXNLuvLPYSRVfwht1Yt6fUqwe63IcyhPhlIep8t8ehcA4lf$TnofkaZWFtrM+rPu0S+hUHN2OZzShCuoaDUc-CvVEyPtRDF$exdWWfZf999skpSp3iKkt0WQYj2cjEQFd3hyCOelwokGpso1G1y2KI$lcdRLeXbfMUCLzM+yJO4hTe1DbkJDZckaj3JxUhUEbA4FFPKj2B7r+uueeQ91Y$eKYT9K6EzzKOsizQsdH1F6VYf+keMvFmMffYvlhnQZP9$q1X2KbAZJjpIDtJ$H1qkkDgw2l-PN9Nr1QrQ3891BgZfuCtMRwPW$4C+dtpGpw$gf2gJzTCbVuGMZ-gW6SwB4poRh7LJt28-7+xrcdAo8j0dioZHuvj$JRttinwqxGJjEwe1TotmeYXE0pda2iM+ZP1n8plYF9DSH$ASlfEQ3rO+-gXjkGeK8AWgziC2Kmqo4Mdpiir1FDeOxgMT7Yk1wU+9k-KZVHJ9LpaDYGRSAB3OJpK6B-Kn9H-n+FRK2rpywqSP0yNcqdu+PfF$pf0-PyHEh-I+rWgAxB0XYAg6M13VrUBkvniZ$MhN4DpmD9RFlgZKEFHE2oh3rreRxVBW3A6YZBsuSKUC6G7dV+9QdBYVuu3oe3QyzAvP4w1dFA7ghP0zJ$-uf7gAPAga01YCs$9UJbNpSd3ekJ3tAb9w9wKI9DYzFjhtFph88ImRfQBWbU4eEodFWLSSrsyzUlceL7x0naLedgVKiVGZpxVdljf4stuuecmDzCnX7WDVpacpPALjbiuxmua2mjCaVGcLoXugL+tX7g$ruHDA0VQuywgcs4Ktsw3b08hl8boF6G2era$MdUS9+CeuF7j$ovpVQzn7cEAY1408yNTH6IZz$phJUdBfacSF$qc4rOxv$pm69eag2ZoHlZpt7DTUSAGH8vbHdan1k7a3Wx3DSTy$HuDlSwOtQzJbdCgxz1jRqROaz0hja1vYfn+vlQprkZTIYdqEfDhzaRKJB4QnyZ7EEr$lAZGbJ-drALKgHHJd9byTw+$eabUGvwouV4JJM74lJmPWye88+amewght73$JLE7PP+qjJe7GYNeBQBKPKOeC870rEm1GXJr20"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sat, 20 Dec 2025 17:13:34 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b10c564daa85ebd-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: xzXjiv8V2s8fUsK+z4z0OAAUy+dikrNEf+Xp9xkTskvfZ/CVHLp1i4PxkinDnWLq1RbD3YQMoNNhdaNeX5qiIQ==$orvvfhMKTTud5nMZ5fDD1A==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QlgoPr74mal6SY4TP9xw%2Btynf03YYwvMQvlqDLTAOlcAcbhxB9Yod7gTQm58rn%2FvJlyqQJRaQeqkmL5V9U1uYzKbeRt81OaHBYTvcYu4Tk2AsdAX%2F6cQc7qC%2Fc7Onj15biswYf0ocA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=855\u0026min_rtt=499\u0026rtt_var=236\u0026sent=42\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=50547\u0026recv_bytes=4285\u0026delivery_rate=43242320\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T17:13:18.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"news-hypxrliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 02:46:09 GMT","end":"Mon, 26 Jan 2026 03:43:38 GMT"},"fingerprint":{"sha1":"46:74:7B:20:82:84:73:12:2B:6F:10:0F:80:48:82:D3:FA:8A:E7:E1","sha256":"1A:60:2C:4B:1F:E1:FB:39:D2:00:0E:72:D3:2B:DE:C2:FC:DF:FD:C4:FC:5C:91:87:32:0E:56:93:F3:A7:35:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 20 Dec 2025 17:13:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S9P%2F8%2B4L0mFATfEI8UmFMVwbOlotrkdYimhMQ%2FhPtALX9%2B5uJGpLTzfPgrhm9IjQ%2BvHh2hMCFa0ZF3Gr%2BM%2BMz6tCwwvRJZUuK%2BiXh8huikTlB53J%2F4Iw1lj1VfVjs3vR6rntwGf3pw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b10c50319c58deb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b10c50319c58deb\", cfL4;desc=\"?proto=TCP\u0026rtt=486\u0026min_rtt=471\u0026rtt_var=95\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3224\u0026recv_bytes=1130\u0026delivery_rate=8211720\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=9eeb92bf01807361\u0026ts=30\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7198,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7198), with no line terminators","md5":"eb5f44fa5b1a3577f6813badbfe8b012","sha1":"1d49ea5c17a1a4936f230e3540e73a97ebab1143","sha256":"6d0f559de47a578f594624a580161f99b4882500fd5a8905f4810c17dfcf7b22","sha512":"ee0566b83a35f71d7a0e3d1ce69e0598be0928593cbefc67b7561f89022c3b5a36d283896d9647539e92cfa1b40dfd538392b0309e45e00c74a7666a449744a9","ssdeep":"96:PNybXZtIEb0EFW87IgR9HoMrHzPKS56FN/pJrKRb2eEr2HbjHrgxAHPf5Er6H0rw:PNadBx3rrb6FN/3PnxKH5Er6Hb28yYew","tlshash":"0ce19e978401103bbbfe0b9584fe3724a110b5817b128559fae0da9cfaeff0bc1659d8","first_seen":"2025-12-20T17:14:00.567233Z","last_seen":"2025-12-20T17:14:00.567233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":61,"dns":38,"connect":1,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T17:13:21.148Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sat, 20 Dec 2025 17:13:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FiJOHhMRIOIXrVZTjzCfQjQbWfcgpUJ5n4O%2BP2nEaVln%2Fx5vWBv7TAf2oKNNDt%2FjkaQDeyOUD63LG1ulh1K7BWTiNrT2rqFd3XRZJW5UlZN4g1V8qApH007Sm6SZQJl8Q7gnRM7M8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b10c5132a88b518-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b10c5132a88b518\", cfL4;desc=\"?proto=TCP\u0026rtt=6264\u0026min_rtt=502\u0026rtt_var=11032\u0026sent=43\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=50196\u0026recv_bytes=4264\u0026delivery_rate=53857598\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5342), with no line terminators","md5":"0155108c2f1b68d01e3e4f38a0471841","sha1":"edbd691f04748ad2c8a60edc36ceea4d88aa0c8f","sha256":"f273aafd20b7fc1ef3c43d55610c3dffcf0d9db98379b9fa8d631c8ebcb9191d","sha512":"64b20e2f90ec34cbab03f26056450ec952f056771a064ceedee43e70e350889855992adb5a04b6fecfc9f779ee920e426ff7986f0206102cd050f490e5f85a74","ssdeep":"96:PNybXZtIEb0EFW87IR5b1C15DQhdnfAn/sF3lforC9tfzvyYzueh8hmw:PNadBCK15khdaUF1forCtfzvfyiw","tlshash":"b4b13cf39901103bd3bb27e12877f358f35152457b06d060fde0e99ca5cae0b82262d5","first_seen":"2025-12-20T17:14:00.568074Z","last_seen":"2025-12-20T17:14:00.568074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"news-hypxrliquid.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c52e3c121ae6","fqdn":"news-hypxrliquid.xyz","domain":"news-hypxrliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.135","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://news-hypxrliquid.xyz/","date":"2025-12-20T17:13:25.527Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b10c52e3c121ae6 HTTP/1.1\r\nHost: news-hypxrliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://news-hypxrliquid.xyz/?__cf_chl_rt_tk=ZlLQ4Eh4yVacD7dMU.vqfoplJOOqcfQzs.e_ojIZ4AI-1766250805-1.0.1.1-vgTvjRkfZfOpZpl1SCiBbveBU.RPsYKkXIuNFxpFCAk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 20 Dec 2025 17:13:25 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pj%2BpirSMtBx%2B4WAofcmbdvAyvMzJ0cD1fBexmOqox2i8qLIN%2F47%2BQGHSM%2FBa4gFPeRHhWbBIYQpB7KAbU6l6UIai33cZoFLIUS2MT9nswwP%2B00eUleLcQqBl1KlKb63E1ix40ipnJA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b10c52e9aa40b4d-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=531\u0026min_rtt=531\u0026rtt_var=265\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=553\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121050,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f313511d7312e3e84f954e45c2245c74","sha1":"1f50f291ee7eaa963459d1c816ca72b75418a190","sha256":"38efe9ef880a8616c2698d60d579f3f722e385090396dd8d396c871b6cee3c06","sha512":"4288d60cd54b975dd0f2103fad27310e402d5e35b75f471c78afbfa72f9e689f7c3b3d4d9fb93a0ee5bc6587010d9aff42f5ddd7bdc14dd073efee844c52a41a","ssdeep":"1536:iyPcQV2rYG5YmC5Auy9CNBhDBIJkKMPgLheapOlt2xXaNTCF0zHsuZbFsB0F:i1Q6YG55C2hw24EXNkMC","tlshash":"83c3f7ce35cf7a8a036ba47850ab35ca62ab7c80704c9d4de911d8f578c436971b7db8","first_seen":"2025-12-20T17:14:00.569405Z","last_seen":"2025-12-20T17:14:00.569405Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":6,"dns":6,"connect":1,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"news-hypxrliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}