{"report_id":"504261ec-66e0-4cbd-8748-9a91c96ac1f3","version":0,"status":"done","tags":[],"date":"2026-09-18T09:28:12Z","url":{"schema":"http","addr":"lidofinan.com/","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"lidofinan.com/","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"title":"Lido Finance \u0026 Liquid Staking Explained | Liquid Ledger","dom":{"size":28464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15022)","md5":"4569c695d9b43ee5e58febe35d0c446f","sha1":"9d5631be8d5d4ca0d3b1193d648d12aa926769a2","sha256":"6de385fc636e55ad17bc052983c25ad4f7244bc9d615d0da95739842aefbca6d","sha512":"b1ee9bb63154c1e15457279ad83c888bd938a11ca7b6d4ce528cc20b407dc898f9bfcb1c43c91ed583c51ff3f209d680ae02d4c5ea301bca2bb884dae1d4ba70","ssdeep":"768:5N1OaTsSi8SWT1IFDGhGJ0Bg00dyc2OWoKFDBLUBkaNmFY:GJkgmi","tlshash":"b7d2b6229390563f123393fcb5d4f7a851e9857ec3238eb5f2bc45361b86dc9d522a90","dom_hash":"domhash9e58caf90b4a6724462eddb5b83490a6","first_seen":"2026-09-18T09:28:24.254054Z","last_seen":"2026-09-18T09:29:59.030587Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lidofinan.com/","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T09:28:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-09-12T00:28:22.889063Z","alert_count":0,"request_count":1,"received_data":134506,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":5375,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lidofinan.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-09-18T09:28:18.908228Z","last_seen":"2026-09-18T09:28:18.908228Z","alert_count":28,"request_count":14,"received_data":726296,"sent_data":10354,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":3,"received_data":83655,"sent_data":1698,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lidofinan.com/assets/link-NdYen1LI.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a400ac934890404f65c49399311b4d7","sha1":"7458f58c20a15ab2f978c329895f454f6d9c97c3","sha256":"8083c9f59f368dbe60c292d54b438a4b5588bb00d3c5ed1214146487e56de7ee","sha512":"bc313904f7710d9c9dd38ec80c333385467f9bb6e72e62c6a1f0bded1706e787a4dc67907bf1bd1068436e37b54444ef1e98baabf07210697cd3458b2cce0a8e","ssdeep":"768:/lLBLi2cDy3EFWtiuT2moDigfKI4OadeoSkdAT/5:AHF7DhfKROahoR","tlshash":"e7f208e532d2f05247db61a200bf9016f37919a1284d4124f271e9ea3db1a49d3fbf6b","size":35175,"data":"","first_seen":"2026-07-24T12:41:30.646025Z","last_seen":"2026-09-18T09:29:59.034478Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/routes-DN2ly2xJ.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"39b4c2da23d5d5425bdea8e433606a8c","sha1":"d4c5037bed77576a75f4d2b07f91d58e0c2a1640","sha256":"524cb57fc9d48fe80f0fca50c6a787a9fbab7f5e6c5cb6f1ae6f7270199edee0","sha512":"86717ae1e7c432cdb45aa5b993f3fd48ad024bc7bf3da598ad4526d5b8cfdabcdaf886da4325bbb2b174341910410028dac6c418517f84a3290b9b0ecbc23e2a","ssdeep":"96:6AHAKcAqxcYQ1o3iS5JBIbnVJ0IfdBN1be2cghJIk3Z40YEkLVGo1NcCmZ4cdV6W:/glQeyS52nIM/Go4k3KzAXZ1hYY","tlshash":"36d1fe46f380faf8b43b11e8a05ee54d759fc958db3745b8b9b9302129414c8ba32bc9","size":6262,"data":"","first_seen":"2026-09-18T09:28:24.284634Z","last_seen":"2026-09-18T09:29:59.04268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/cover-rewards-B-hPwyA_.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd500e01fdd3a042e2f551c5a333e009","sha1":"5808f880c530743e1551720f5a80a72da51427e7","sha256":"2133aab93828166988a7402e99873f9e03cd4cf6d66ba380606036206f1bdafc","sha512":"a31e91610f28ca7d69da07d06a2a6f19166f251a4a9e9030fe1eb00a223c9eba80098f32625291d6aaabb429c7d102bb4840fe12acaa6b1d54329819f166283b","ssdeep":"","tlshash":"62a00212948601e441603022572d95ccd685930ec7398394145505126638ce18315d2d","size":58,"data":"","first_seen":"2026-09-18T09:28:24.283021Z","last_seen":"2026-09-18T09:29:59.038644Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/cover-security-BqgUJN6I.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c25ffb8b0d7eebc414ffa53d54da85e1","sha1":"5c9bdb37ffa898d1e3a3653e5aa6e2f749fecadd","sha256":"a0c1fc4e9a96963d1b3a806f04a1079b0eee8eefb52f9fa7526c15e39a009e84","sha512":"d1d4e33bf23d6dc156cc1ad1d8fb30522c90f90b2dc04c8d8f15f5af0818911cfe649f93ee2303f6e47758c5d673c857f0547812da3654d71352f52ee4882433","ssdeep":"","tlshash":"82a00217548d04f4085061536535d4c8654d962dc72a539a14155115a3158d58355fe6","size":59,"data":"","first_seen":"2026-09-18T09:28:24.265814Z","last_seen":"2026-09-18T09:29:59.035087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/ArticleCard-DPh-zsF5.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe668383c418618004f6668025c0f3ab","sha1":"a57f4944de1dd3f9a085e369c98e6a82ee0a794b","sha256":"e192c9acf49a9d1bfbbdc2621935df7be6f27e6bfb6ee44103d5fc56144a0ad9","sha512":"26e3318d1674ddbcfc7c619d5c7392dd1613620b1bf941d4ac36f96b986e31dbbbe88062af761f0b07506311958b994daebd05816084d08c9d0b8266ab8227d0","ssdeep":"","tlshash":"b9119c5db080aefcb41616a86a6dd60e322bc74ccf6649a4bab4702018181d86a337d9","size":902,"data":"","first_seen":"2026-09-18T09:28:24.294656Z","last_seen":"2026-09-18T09:29:59.03712Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/cover-tokens-DKHWYCmN.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0b747b14fda19f15bf166982fa7ffe0","sha1":"12e5913bcc45151dcf76c60591375de24d4cdd53","sha256":"86913e2f0067b19bccfb0253c7489c886c2c29fa51db01026c7781ff3c8c9af6","sha512":"58a44672d99c820a383f0ed85c15838122b244130ee6df5db17c18aee18600005f577dfae47d4b6f16d42be7aa2dc54344050938398c48d8e504eeb88d56988f","ssdeep":"","tlshash":"2d900253545544e400102501af5ad5d546469bced36647d8141502485e146e5d706e65","size":57,"data":"","first_seen":"2026-09-18T09:28:24.293067Z","last_seen":"2026-09-18T09:29:59.037861Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/index-UfRk7ilz.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d30c17ea5ef8344d2bf32bde251a071","sha1":"c56bb5707d6a1d0bed83fdda23d10204032106cd","sha256":"ad0bf888ab2836b6da0d78a1b66caac0042791693eecbf26d5826a943d19d0c5","sha512":"cc1ea19764025f396dc0613efc6e6a94f5fa9d04565560e80f3e0e5e8e95b6c943af97180b4e399551c426d307b9534d14f825c0effcf5ed9e07929b1ebca9c4","ssdeep":"12288:zPGu5hd1EE8/rdKHNR/0XMQqbpgZKi8dLD57mB29:SYhogsX7MdoB29","tlshash":"27945ce53295b3720b9352a6906f2107f379447aa80d4434b168edaf36e1489d1fbff8","size":441799,"data":"","first_seen":"2026-09-18T09:28:24.264482Z","last_seen":"2026-09-18T09:29:59.033628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/~flock.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-15T09:33:41.558894Z","times_seen":18805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/not-found-i5RsCZif.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd7dd0c269d902acb5cb670fe3b478ad","sha1":"4eb9abec6648059baf7e0e2e335f2d06246d3978","sha256":"57d667bbd7d641de6b5996a24f079c309a620ddba01e59f53cde4a86f16390f0","sha512":"b7fc1205712b6b9116cac9336634622d15308d74ec08b5fc7c8a5dc158703a77dbc3a2f1fe857fb11359a7df0cbb14931d6dd9a1ca36b6ea5d24dd57fd768274","ssdeep":"","tlshash":"52b092cbf08fa3ea931a89305147814ff29809b8626842839d819185a6b04b0856ac34","size":118,"data":"","first_seen":"2026-07-06T03:08:47.505595Z","last_seen":"2026-10-15T08:16:46.149719Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lidofinan.com/assets/link-NdYen1LI.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.978Z","timestamp":1789723658978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/link-NdYen1LI.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4bf1d5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35175,"size_decoded":12914,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35171), with no line terminators","md5":"1a400ac934890404f65c49399311b4d7","sha1":"7458f58c20a15ab2f978c329895f454f6d9c97c3","sha256":"8083c9f59f368dbe60c292d54b438a4b5588bb00d3c5ed1214146487e56de7ee","sha512":"bc313904f7710d9c9dd38ec80c333385467f9bb6e72e62c6a1f0bded1706e787a4dc67907bf1bd1068436e37b54444ef1e98baabf07210697cd3458b2cce0a8e","ssdeep":"768:/lLBLi2cDy3EFWtiuT2moDigfKI4OadeoSkdAT/5:AHF7DhfKROahoR","tlshash":"e7f208e532d2f05247db61a200bf9016f37919a1284d4124f271e9ea3db1a49d3fbf6b","first_seen":"2026-07-24T12:41:30.646025Z","last_seen":"2026-09-18T09:29:59.034478Z","times_seen":9,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/hero-staking-BWbYYV6n.jpg","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.991Z","timestamp":1789723658991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/hero-staking-BWbYYV6n.jpg HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85291\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\nserver: cloudflare\r\ncf-ray: a3cf50e4ef455fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85291,"size_decoded":85766,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1008, components 3","md5":"eae586f04106d20a788aa03c1b790441","sha1":"9d611fb3ceb4015b60fccbd67f15a4a2e82a5c29","sha256":"2aef4d7d79b1c64be506341f683e97ae69544ae74cc475c04df82f9e40317f81","sha512":"f7fd60490e1ea9eecd77b95fd10cb6d07d610c0a958af5c823d996c1d298d71369fb4b58b568f8f654a0a3ea3049eb7ceaf930b8e2e5a0bb3e3ba98aaee9ca87","ssdeep":"1536:ZyXCClI/s3Sb/di1rnE3wJXLSzhTfAPApmq+l48YnWq:IXCClI/s3SbFiREgJ8hTcAIqEfq","tlshash":"3d8329179d18d793e51887f8be430dad6e163b4ce8823aff55264edb3d206224c8d12e","first_seen":"2026-09-18T09:28:24.260237Z","last_seen":"2026-09-18T09:29:59.039463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/favicon.ico","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:40.692Z","timestamp":1789723660692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D; session-id=5776cafc-48ef-4472-8e27-3f992573ffe0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:40 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50ef79105fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20373,"size_decoded":20437,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"9f504444f85a5af2eef9264b02ae40be","sha1":"dd15dcde9da684402cd56070688bc4d18d2ebb46","sha256":"dd821076a9b03adc2173c93956226aea3d92482d7578fc4339c5d3a2e9c24586","sha512":"e5dbd729746c77d5ec72483a822c6df608086e5877a1ac146cd3e347a2fcaf50af6c561fc4477923925e9bc9d81b65010e911a40b830a637fddd666972b6651d","ssdeep":"384:zvAOjbCDJfSLloocQmVv1Abb/ttPoGwktQ5nuxFqgrssRi:zoiOJfMoNQmVv1AXbXGZu4","tlshash":"3792d10db18eb66d4ff5819bd0f8e53d42c71aa4b4232282cc8229f15db78dd63d2b59","first_seen":"2025-12-01T00:59:47.52305Z","last_seen":"2026-10-15T09:45:50.131515Z","times_seen":8405,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T09:27:37.544Z","timestamp":1789723657544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D; HttpOnly; SameSite=None; Secure; Path=/; Domain=lidofinan.com; Expires=Fri, 18 Sep 2026 09:57:38 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50de28c65fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D","quoted":false,"path":"/","domain":"lidofinan.com","expires":"2026-09-18T09:57:38Z","raw_expires":"Fri, 18 Sep 2026 09:57:38 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D; HttpOnly; SameSite=None; Secure; Path=/; Domain=lidofinan.com; Expires=Fri, 18 Sep 2026 09:57:38 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30094,"size_decoded":10214,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"2f565022eeb66428b8fd31347d73b828","sha1":"4efa367770588b23863b3896fb5062e8c8d31733","sha256":"b8e93d5afed6e6b261d7df7b6fb1362f112217fd4692c4f1a32200e72976b462","sha512":"c983f00c35f481a65134608c59cdd90610fcc4bd0a123eed96d0f23b7873fbf90e0af98c3a2f42e7123811118d065239ac246688718d99918baaa184d8cee06d","ssdeep":"768:3NqOaT1Si8SWT1IFDGa9UDsgD0oeMQc2OWoKFDBLUx4wkaNHJ:MOkgHJ","tlshash":"4ad2d7229380563f127353fcf5d0f76852ea85aad3138eb5f2bd45361b86dcac532a90","first_seen":"2026-09-18T09:28:24.26308Z","last_seen":"2026-09-18T09:28:24.26308Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":43,"connect":284,"send":0,"wait":654,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/index-UfRk7ilz.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.977Z","timestamp":1789723658977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/index-UfRk7ilz.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4bf1b5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441799,"size_decoded":139803,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54226)","md5":"9d30c17ea5ef8344d2bf32bde251a071","sha1":"c56bb5707d6a1d0bed83fdda23d10204032106cd","sha256":"ad0bf888ab2836b6da0d78a1b66caac0042791693eecbf26d5826a943d19d0c5","sha512":"cc1ea19764025f396dc0613efc6e6a94f5fa9d04565560e80f3e0e5e8e95b6c943af97180b4e399551c426d307b9534d14f825c0effcf5ed9e07929b1ebca9c4","ssdeep":"12288:zPGu5hd1EE8/rdKHNR/0XMQqbpgZKi8dLD57mB29:SYhogsX7MdoB29","tlshash":"27945ce53295b3720b9352a6906f2107f379447aa80d4434b168edaf36e1489d1fbff8","first_seen":"2026-09-18T09:28:24.264482Z","last_seen":"2026-09-18T09:29:59.033628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/cover-security-BqgUJN6I.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.983Z","timestamp":1789723658983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/cover-security-BqgUJN6I.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4cf245fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":553,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"c25ffb8b0d7eebc414ffa53d54da85e1","sha1":"5c9bdb37ffa898d1e3a3653e5aa6e2f749fecadd","sha256":"a0c1fc4e9a96963d1b3a806f04a1079b0eee8eefb52f9fa7526c15e39a009e84","sha512":"d1d4e33bf23d6dc156cc1ad1d8fb30522c90f90b2dc04c8d8f15f5af0818911cfe649f93ee2303f6e47758c5d673c857f0547812da3654d71352f52ee4882433","ssdeep":"","tlshash":"82a00217548d04f4085061536535d4c8654d962dc72a539a14155115a3158d58355fe6","first_seen":"2026-09-18T09:28:24.265814Z","last_seen":"2026-09-18T09:29:59.035087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:39.674Z","timestamp":1789723659674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lidofinan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:33:24 GMT\r\nexpires: Thu, 16 Sep 2027 10:33:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168859\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":30905,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-10-15T08:58:06.726246Z","times_seen":4277,"resource_available":false,"data":null}},"time_used":3632,"timings":{"blocked":3390,"dns":0,"connect":0,"send":0,"wait":54,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:39.680Z","timestamp":1789723659680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:56:33 GMT","end":"Sun, 08 Nov 2026 02:56:28 GMT"},"fingerprint":{"sha1":"C3:AE:E5:33:6D:64:3B:B2:73:42:48:B8:3D:98:17:78:BA:EA:83:BB","sha256":"F7:28:A2:71:B0:DE:C3:83:85:50:8C:75:20:15:17:F0:1A:C4:C8:F8:07:12:71:A1:EF:5C:56:C5:89:05:D9:19"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lidofinan.com/\r\nOrigin: https://lidofinan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=nJ.iaHbwEg0dqz3by.4Q7_RcvO4ij2iJvG9i1d86V48-1789723664.080068-1.0.1.1-9sC1viK4t0MM1fOTRjYqJbfYdPKpgSqgOPOMMU3T8TkFAGIRi7YLtned5JDCMDGYdji3OjNFoWc9iuEi9xI4C.w1rKvi49Wj.UMnGvi1FHHfZBKRhSup9kVez46s7U9G; HttpOnly; SameSite=None; Secure; Path=/; Domain=gpteng.co; Expires=Fri, 18 Sep 2026 09:57:44 GMT\r\nserver: cloudflare\r\nexpires: Fri, 18 Sep 2026 13:27:44 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3cf5104782fb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"nJ.iaHbwEg0dqz3by.4Q7_RcvO4ij2iJvG9i1d86V48-1789723664.080068-1.0.1.1-9sC1viK4t0MM1fOTRjYqJbfYdPKpgSqgOPOMMU3T8TkFAGIRi7YLtned5JDCMDGYdji3OjNFoWc9iuEi9xI4C.w1rKvi49Wj.UMnGvi1FHHfZBKRhSup9kVez46s7U9G","quoted":false,"path":"/","domain":"gpteng.co","expires":"2026-09-18T09:57:44Z","raw_expires":"Fri, 18 Sep 2026 09:57:44 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=nJ.iaHbwEg0dqz3by.4Q7_RcvO4ij2iJvG9i1d86V48-1789723664.080068-1.0.1.1-9sC1viK4t0MM1fOTRjYqJbfYdPKpgSqgOPOMMU3T8TkFAGIRi7YLtned5JDCMDGYdji3OjNFoWc9iuEi9xI4C.w1rKvi49Wj.UMnGvi1FHHfZBKRhSup9kVez46s7U9G; HttpOnly; SameSite=None; Secure; Path=/; Domain=gpteng.co; Expires=Fri, 18 Sep 2026 09:57:44 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":133760,"size_decoded":134506,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-10-15T06:25:37.873949Z","times_seen":2297,"resource_available":false,"data":null}},"time_used":4684,"timings":{"blocked":-1,"dns":4037,"connect":33,"send":0,"wait":124,"receive":180,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/styles-CNdKqNQa.css","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.973Z","timestamp":1789723658973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/styles-CNdKqNQa.css HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4bf135fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78050,"size_decoded":13508,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"b3a8f62f53502bc02881947354cab3d3","sha1":"8ea4c21c7018030055ce0c363c5a3685681671f2","sha256":"cb19e23e3b4416767c8cd42dd2cc00dfa2ea75c5ce36d74c4188cd45c4a218e8","sha512":"c3165232214641cf76a2198a713caf1bc14f20829b197974bab0a96f26db41777f0627d7211783740150fcbe226cfddfa5e64787b2f03b5100fb0cffcb56f497","ssdeep":"1536:D8tHWh+7MoyzeESw/W9z0fUDEaNSsMq+WDhXX78T6XpB988R988q:otHWh+woyz0w/W9zMUDXMq+WDhYeXE","tlshash":"7373e690b229d93f7d33a4f5a38c789c9119b0c0de7446e8fe57612256c3bf2ad6b604","first_seen":"2026-09-18T09:28:24.275214Z","last_seen":"2026-09-18T09:29:59.036441Z","times_seen":2,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/cover-rewards-B-hPwyA_.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.982Z","timestamp":1789723658982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/cover-rewards-B-hPwyA_.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4cf235fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":552,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"cd500e01fdd3a042e2f551c5a333e009","sha1":"5808f880c530743e1551720f5a80a72da51427e7","sha256":"2133aab93828166988a7402e99873f9e03cd4cf6d66ba380606036206f1bdafc","sha512":"a31e91610f28ca7d69da07d06a2a6f19166f251a4a9e9030fe1eb00a223c9eba80098f32625291d6aaabb429c7d102bb4840fe12acaa6b1d54329819f166283b","ssdeep":"","tlshash":"62a00212948601e441603022572d95ccd685930ec7398394145505126638ce18315d2d","first_seen":"2026-09-18T09:28:24.283021Z","last_seen":"2026-09-18T09:29:59.038644Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/routes-DN2ly2xJ.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.985Z","timestamp":1789723658985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/routes-DN2ly2xJ.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4cf255fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6262,"size_decoded":2528,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6202), with no line terminators","md5":"39b4c2da23d5d5425bdea8e433606a8c","sha1":"d4c5037bed77576a75f4d2b07f91d58e0c2a1640","sha256":"524cb57fc9d48fe80f0fca50c6a787a9fbab7f5e6c5cb6f1ae6f7270199edee0","sha512":"86717ae1e7c432cdb45aa5b993f3fd48ad024bc7bf3da598ad4526d5b8cfdabcdaf886da4325bbb2b174341910410028dac6c418517f84a3290b9b0ecbc23e2a","ssdeep":"96:6AHAKcAqxcYQ1o3iS5JBIbnVJ0IfdBN1be2cghJIk3Z40YEkLVGo1NcCmZ4cdV6W:/glQeyS52nIM/Go4k3KzAXZ1hYY","tlshash":"36d1fe46f380faf8b43b11e8a05ee54d759fc958db3745b8b9b9302129414c8ba32bc9","first_seen":"2026-09-18T09:28:24.284634Z","last_seen":"2026-09-18T09:29:59.04268Z","times_seen":2,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/~flock.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.988Z","timestamp":1789723658988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4cf2b5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-15T09:33:41.558894Z","times_seen":18805,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentserif/v5/jizBRFtNs2ka5fXjeivQ4LroWlx-6zUTjg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:39.672Z","timestamp":1789723659672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/instrumentserif/v5/jizBRFtNs2ka5fXjeivQ4LroWlx-6zUTjg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lidofinan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21032\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:48:01 GMT\r\nexpires: Thu, 16 Sep 2027 10:48:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167982\r\nlast-modified: Thu, 04 Sep 2025 17:18:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21032,"size_decoded":21845,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21032, version 1.0","md5":"9b8dd1ecf641700bf1caa9d17da6374e","sha1":"37ddf465bbcc252776a37dcf28179a3ca590363b","sha256":"5eb09b5ac0e28b67c2f041c8ba6d244604ca0c0980d65912ab2d47fed84ddc31","sha512":"0a484806c5b11d6a596400cb3307d0978a0a01f2c4c1b332a67d684441702e50bcb7783fd06d8c8a0a0cd8783bf09e0533e7db4dab56d03ed817c9d3ae688f7b","ssdeep":"384:aFW82hME4ypFQ+46L5ZZStJ2c4A7n+ZxOfNwHRn5YWUjlgQEN:adc62g+PWNI8jlPEN","tlshash":"5692e199a1d853b292c92a3a8ec37f19e43453ef6125fd9c59ab76c08de405bc9c2508","first_seen":"2025-09-11T04:20:12.875491Z","last_seen":"2026-10-15T10:03:04.980454Z","times_seen":5175,"resource_available":false,"data":null}},"time_used":3602,"timings":{"blocked":-1,"dns":3134,"connect":261,"send":0,"wait":50,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/~api/analytics","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:39.954Z","timestamp":1789723659954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://lidofinan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D; session-id=5776cafc-48ef-4472-8e27-3f992573ffe0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"{\"timestamp\":\"2026-09-18T09:27:39.952Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"5776cafc-48ef-4472-8e27-3f992573ffe0\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://lidofinan.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a3cf50eadcf65fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-15T09:45:50.124469Z","times_seen":8623,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/not-found-i5RsCZif.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.979Z","timestamp":1789723658979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/not-found-i5RsCZif.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4bf1f5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":584,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fd7dd0c269d902acb5cb670fe3b478ad","sha1":"4eb9abec6648059baf7e0e2e335f2d06246d3978","sha256":"57d667bbd7d641de6b5996a24f079c309a620ddba01e59f53cde4a86f16390f0","sha512":"b7fc1205712b6b9116cac9336634622d15308d74ec08b5fc7c8a5dc158703a77dbc3a2f1fe857fb11359a7df0cbb14931d6dd9a1ca36b6ea5d24dd57fd768274","ssdeep":"","tlshash":"52b092cbf08fa3ea931a89305147814ff29809b8626842839d819185a6b04b0856ac34","first_seen":"2026-07-06T03:08:47.505595Z","last_seen":"2026-10-15T08:16:46.149719Z","times_seen":349,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/cover-tokens-DKHWYCmN.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.980Z","timestamp":1789723658980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/cover-tokens-DKHWYCmN.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4bf205fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":551,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d0b747b14fda19f15bf166982fa7ffe0","sha1":"12e5913bcc45151dcf76c60591375de24d4cdd53","sha256":"86913e2f0067b19bccfb0253c7489c886c2c29fa51db01026c7781ff3c8c9af6","sha512":"58a44672d99c820a383f0ed85c15838122b244130ee6df5db17c18aee18600005f577dfae47d4b6f16d42be7aa2dc54344050938398c48d8e504eeb88d56988f","ssdeep":"","tlshash":"2d900253545544e400102501af5ad5d546469bced36647d8141502485e146e5d706e65","first_seen":"2026-09-18T09:28:24.293067Z","last_seen":"2026-09-18T09:29:59.037861Z","times_seen":2,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lidofinan.com/assets/ArticleCard-DPh-zsF5.js","fqdn":"lidofinan.com","domain":"lidofinan.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.986Z","timestamp":1789723658986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidofinan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 16:35:31 GMT","end":"Thu, 12 Nov 2026 17:35:27 GMT"},"fingerprint":{"sha1":"84:A2:8D:74:42:77:59:FD:CC:F4:AD:A4:C9:4C:38:FF:ED:29:77:14","sha256":"7E:62:D8:5E:47:40:E9:E9:4D:C1:3C:BD:94:82:77:F9:8B:21:0D:76:45:77:DC:B2:69:88:C2:FB:CB:36:0D:9C"}}},"request":{"raw":"GET /assets/ArticleCard-DPh-zsF5.js HTTP/1.1\r\nHost: lidofinan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978; __cf_bm=IZwHtpIjzaL74OP._kXXGwKV8jPc5RdwnonVmc9PcMU-1789723657.947242-1.0.1.1-FQcwFP5e07lO5UPKpjou7VF_GS9vpePYKlBtT6d84rdJUCeSSG11wrNjpprdB.3cKGpbVPPVE_xUfOgXrcu.nj6mOfFFRBbDIHIy3DcmA5D1_zxJOWcBTE.M2dUaX77D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 6c7d66d4a21d368758bb428dd9010383c5fe04500c4be18f3c0e1d7bde277978\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3cf50e4cf295fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":902,"size_decoded":939,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (902), with no line terminators","md5":"fe668383c418618004f6668025c0f3ab","sha1":"a57f4944de1dd3f9a085e369c98e6a82ee0a794b","sha256":"e192c9acf49a9d1bfbbdc2621935df7be6f27e6bfb6ee44103d5fc56144a0ad9","sha512":"26e3318d1674ddbcfc7c619d5c7392dd1613620b1bf941d4ac36f96b986e31dbbbe88062af761f0b07506311958b994daebd05816084d08c9d0b8266ab8227d0","ssdeep":"","tlshash":"b9119c5db080aefcb41616a86a6dd60e322bc74ccf6649a4bab4702018181d86a337d9","first_seen":"2026-09-18T09:28:24.294656Z","last_seen":"2026-09-18T09:29:59.03712Z","times_seen":2,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"lidofinan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:39.673Z","timestamp":1789723659673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lidofinan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:33:24 GMT\r\nexpires: Thu, 16 Sep 2027 10:33:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168859\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":30905,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-10-15T08:58:06.726246Z","times_seen":4277,"resource_available":false,"data":null}},"time_used":3525,"timings":{"blocked":3391,"dns":0,"connect":0,"send":0,"wait":123,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Instrument+Sans:wght@400;500;600\u0026family=Instrument+Serif:ital@0;1\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lidofinan.com/","date":"2026-09-18T09:27:38.975Z","timestamp":1789723658975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Instrument+Sans:wght@400;500;600\u0026family=Instrument+Serif:ital@0;1\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lidofinan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 18 Sep 2026 09:27:39 GMT\r\ndate: Fri, 18 Sep 2026 09:27:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4691,"size_decoded":1246,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"29d607a92fc5fe99c38060be9e377e79","sha1":"df8cff8fac1793db1743ffed64da5c2c3b55afe4","sha256":"86be543909016948c6749c75f23da47e3d1d5249c7998879963b3e449c770f21","sha512":"ae3628edf62123285d8d72a24f5ffbbcc1d14a7124d48daea41a5000c3f0c8782d839ddd1571eef1f3c4aaffa4ad020bd26b9f277676953569a9461306792192","ssdeep":"96:FOEbabJc+uJOEbaLNOOXbabJc+uJOXbaLNOOxMbabJc+uJOxMbaLNAYgEaI62Jcd:G/lk/+Z/vfOvWJOvWNHA","tlshash":"82a1eda1046ba614db835dc523de7e32ee1e61606441ec25abfe2498fcaed76437270c","first_seen":"2026-05-11T09:21:04.782415Z","last_seen":"2026-09-26T18:04:53.207173Z","times_seen":90,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":46,"send":0,"wait":110,"receive":0,"ssl":423},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}