{"report_id":"817850e4-27b1-492c-81ab-5335339b20ee","version":0,"status":"done","tags":[],"date":"2026-06-30T21:45:23Z","url":{"schema":"http","addr":"enroll-liquity.xyz","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"enroll-liquity.xyz/","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"title":"Liquity V2 | Borrow on Your Own Terms","dom":{"size":167851,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6972)","md5":"40062cdba40b503dc20ba7fc8a02b292","sha1":"1af362797627fbf812b1f32379f32f9f0b7e6793","sha256":"9d0e7398ae336f471e879bef4b23b90abc053407036b2846c23d91e5c0176427","sha512":"4f15399eda05e9c4dfc36e01eba3c48168abc6157f407aadfd01cf91980ddc64020d9d10f42351539b54aa7eb4e489ae723ed74e9f591ccfec4797bb7fce6fb1","ssdeep":"1536:ZwARr5zzPKpozHSk7TqDAzHvBPNdiudFqlqiUcHDPD8:R5zzPf7LB1diudFqlqiUCD8","tlshash":"37f31f72a2f0503780c382e4aa346b6f6f85ea5bcd4b4684b6ac4bc05fc3dd6dd17958","dom_hash":"domhash20363e5aa97914a91b744804d992a305","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"enroll-liquity.xyz","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T21:45:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-06-28T11:37:22.639197Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":647,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-06-29T17:56:24.180512Z","alert_count":0,"request_count":1,"received_data":5919,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-06-28T11:37:22.200276Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-06-30T21:35:22.885881Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"enroll-liquity.xyz","ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-06-30T17:37:47.459662Z","last_seen":"2026-06-30T17:37:47.459662Z","alert_count":58,"request_count":29,"received_data":1627461,"sent_data":15587,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":3,"received_data":587846,"sent_data":1445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-06-28T11:37:22.165443Z","alert_count":0,"request_count":3,"received_data":980260,"sent_data":1432,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-06-28T11:37:24.257257Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1260,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"198.13.133.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-06-28T11:37:22.211695Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":651,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"enroll-liquity.xyz/Y8bMVF1qei.js","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","size":804974,"data":"","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-15T02:35:29.14746Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b03b75162e10e6226e0cd5b209d29161","sha1":"cb53e88d7e51a2c2b97abf0335daa078e1afebaf","sha256":"c5182fc6ba614b92226af14ea8398954c1f1ef683513037692c73c8ca9f935b9","sha512":"529367a5378adcd540159a8cff38ca25e2cdb027ceba7364ec7f7e404cd662985eee7a80ec3a12fdd8d0e518a196c6ceef208f7ca4d398b3a3c433614605204a","ssdeep":"6144:TjloRAcFtrLMJtLHJ6ETmfE8c/+1Db2h67m3vRTUbNZV4sXoZYrxd7IY+J:TjeRNFtU8Ldz7IY+J","tlshash":"e2f4116223924c3c8b5e52527d7deb4da0f42c9b45daf878f89f2048e47d6a69ff0211","size":779540,"data":"","first_seen":"2026-06-30T17:37:51.789388Z","last_seen":"2026-07-15T02:35:29.158542Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-15T05:17:35.209338Z","times_seen":396382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"407f62615c59d8e11f97ffac69401abc","sha1":"e32a0d13b2ff88f2487010e7b1bc7491edbd82a6","sha256":"d26944d4ec096b8c66f8b64cddf30bcfe7313ddb379a86d4b6f8ae446b556d43","sha512":"985c15b49c6c097aea0861c839c88073c072467e5fdcd83d085aa7786c8117265acdc1ec304cd355d28cf51b0eeca3498fe70b9d3f68ef2d6a56c523b46fc6fa","ssdeep":"","tlshash":"9de0612f3fbf19b043eb70be09991f09203140074408c5283e2c29506f60e4a1565bdf","size":424,"data":"","first_seen":"2026-06-30T17:37:51.776843Z","last_seen":"2026-06-30T21:45:28.583759Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-15T02:35:29.139891Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5qqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2154bb1168373249b3a536c474b5fa75","sha1":"19e1aa24650c58b667ab5bff9fc33fd71ae4ab51","sha256":"0236d69bbb647262b0312850e42c6d643d4a55ee2700ee02ae6d7c00e935dfa2","sha512":"612ba452659d2ead11520b0c12a968e314533482974f5e90dbc133fc0010d229ca9acd3480787d12cc33fe295d45cd115e0064bc27850b3fea419c8758655d56","ssdeep":"3072:1airhPUgiZrhy59TUTu5TsGG+ImnmXjK9xbxv8YY6UE:1aiDTGqmXjK9dxv8YY6UE","tlshash":"7f259d469b4ec002b39c919f6914cdba56e9741365be12cff412e9dd6007f638fa0e2e","size":979304,"data":"","first_seen":"2026-06-30T17:37:51.768127Z","last_seen":"2026-07-09T20:49:32.465339Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"enroll-liquity.xyz/","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:44:50.007Z","timestamp":1782855890007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 21:29:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwOYDc2ZWffaU4iJx1NYbhEyu5YNfk2YBKqCdhiBoe6p6aI8%2FTynpCrmHDRQ01akphMMxG7fAAiCqDwNgVd0Nb%2BFlx4hWIJB26%2FIYLJeHZXZzvnERQ%2B%2F5Mc1vjSAr3fQsvdzM1U%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1405ad9a95d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":178463,"size_decoded":31407,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"aa375caa32c7ad8dfa0e734caec27a5d","sha1":"0a30cadf0cd5f3b40a8f13edae2bc1a0e5052f45","sha256":"9b75ec3e78b868d73d5e025825bcbf1dcfe80f9aa8ac08915cc85560323219ed","sha512":"8818654847d7ccdc5576b5bf14641faeab187d5f8f6c94e4dbc24b4ab55e6f8a595f61935d9c14696c15f609bc8f98f290ba2ff7fdce365656b3ecf786b5942f","ssdeep":"1536:bzwARr5Y6RoND6YBq5AzHhhd+CcDTkVSeg6158L:r5Yzhb+CcDTkVSegVL","tlshash":"46042f71a2f0506380c782e4aa346b6f6f85ea6bcd4b4684b6ec5bc05fc3cd6dd17948","first_seen":"2026-06-30T21:45:28.559587Z","last_seen":"2026-06-30T21:45:28.559587Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4116,"timings":{"blocked":-1,"dns":4005,"connect":1,"send":0,"wait":97,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66c26ad4606684679cdf1583_arrow.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.378Z","timestamp":1782855894378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66c26ad4606684679cdf1583_arrow.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-10c\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8G3%2FPYiJPbWSXrVJwS1shCckdvT3Fam1ZH206CB9pOs2TFAdhE4NyXx67p4F%2FUkPiBpraetJjOFsZfR4mjNJhGgsNqzfMw2AmLopMXrjFbVoH7%2FoIWzj9T9VHdeM1OG6Gtt0vY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adbd87676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":882,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b383371c0bb6415694795c5ae2d791ef","sha1":"3492749c9659d3e4b6f778dc0f8f9f7fa72a907e","sha256":"27c4fdd4de3adb76f42da44830f99ab3a47aa43c82b09853da31a78aeb0e818f","sha512":"cd637cfaacbe4d157b23b221ac8bf225f858f412a8df2777ac61b8687c4dada26f8d684ffba570da98e521b1072e9f84c30868eb6175b03b5e4f413d6f570576","ssdeep":"","tlshash":"bdd02be4d318960b8409ca2db15cfb6d3489b0f51aa50ce4e2821702761145358a91af","first_seen":"2025-11-20T19:22:54.268335Z","last_seen":"2026-06-30T21:45:28.560668Z","times_seen":8,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/67c96ea363531b732120c2b8_nbinternationalproreg-webfont.woff2","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.849Z","timestamp":1782855894849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /67c96ea363531b732120c2b8_nbinternationalproreg-webfont.woff2 HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/liquity-new.webflow.shared.f36ed02db.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=3,i=?0\r\netag: \"6a443095-5564\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSmWle0%2FlTei99P1t8SG7nVBNVrs9VN99brHqVk411yvfz8l82hXsWUT4guHnapXgloLJZRwqu%2BnLexYBVBTBG8a3mKxzgOQeWexv7dG633tNwSgdnGDtHqOHGjyU3B%2BZFkCndA%3D\"}]}\r\ncontent-length: 21860\r\ncf-ray: a1405aded91c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21860,"size_decoded":22560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21860, version 1.0","md5":"83dcf582015e838fdae3a756ce5dd122","sha1":"d187e4b51610b4f7e5f22bf5c6a0302d95f7290e","sha256":"35357cbc233d8557b2ce25b9a3d7e794b95bc753f5d931961d28a6693042c1f7","sha512":"5eac479f965c1a30b4303e168e0887f25283cec684b5de35fb1b1413c707888d80b18bd49b76c6f726a2227824ab659be9a1325ffa6d8285d642360e43a2dd35","ssdeep":"384:rKQVEE+UpaOsidr9aG2noxFJ22X43Y9uHTj5XdWaLUiiVDS7auTs9Wf:rKQVEvUpaOsidRaGTU2X42uHTjFL96Ox","tlshash":"50a2e094745050ebde27af3c969282c42cdfcd87ab274b275f57fcc0a30109aa9236d8","first_seen":"2024-10-22T18:08:10.539661Z","last_seen":"2026-07-14T00:08:45.336139Z","times_seen":147,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66b7df31c7b00995e1f3cb6f_img-product-item-4.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.908Z","timestamp":1782855894908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66b7df31c7b00995e1f3cb6f_img-product-item-4.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-18f\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p830hwuXTtA86YyqwCkutvaiebOjG9mmeEMcgrKWebVwjsscAE3DCd6d4fG080cLHlgAkOZqSbG8mMPE%2B4%2FxDicu%2FqjmJ2ofvNP4hrUEB5sEzn8buzg8DhYLMk1LZMw9EJuF6ow%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf293376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399,"size_decoded":846,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9310286a63aa09c942b9138d137b3fa3","sha1":"780a2b026b4d7d97aaa10415a369ffce271a2e59","sha256":"3d184a91428f209830900e12dbec21c957fa9310ba34111f8887041ea1d1b4cd","sha512":"3601ebf9326fd546e006665cb52cba1aa9792770f4207d4a3900a29df7faf93d9d0bf6ff240acf8f92514fc8a38c828d51b3fafd7cb4a16f2729b1b152160a40","ssdeep":"","tlshash":"25e092e3b1c8b20982008e5a465cd4bd3052f4cc7f052235ea807107fcc8ae7ac3c9ad","first_seen":"2025-11-20T19:22:54.252038Z","last_seen":"2026-06-30T21:45:28.561928Z","times_seen":8,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/69777bf3d3a2c0940c5efe2d_template-2.jpg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.929Z","timestamp":1782855894929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /69777bf3d3a2c0940c5efe2d_template-2.jpg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443095-26a5c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tu15J3u5cAIdXBN3zPl1UTxEwA%2F4nA9xyStO88qM3j972NSGxwD%2Bc9u7pN1TEihObJZtQncluVFVBrJWrzFFOjOySzLyauF0qXhzg3opO8ZdN9rJ7vArbyOKuzGtpgx%2BSTAWeJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405adf594a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158300,"size_decoded":131483,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x675, components 3","md5":"cc51905eee1859d48c226fbe077c3c5a","sha1":"ec1624235c89032039bcc6434866591e43dfe414","sha256":"b9379d18cbcf4baf04bebbeb3e7cbb81f7b628794825eb2d033ad9b7c73db949","sha512":"9dd61ec229428b89bc7fccf7460f928541520979a19225af54ff47ab675bad3510d9cfc1704af56029a58513f95db215a20a670cff39abc50f8200dfeb20c799","ssdeep":"3072:fBZNUk5SxQkoP4HS1Y6F6hJPefRAXos2s20OwkmHJeyVYrIYlJq7F0:fBZuASxQ424MA4s2sDOwkceIYcY75","tlshash":"f6f3e078f3c3fba18787904c8abc7e7353981bd59ae550a321231f54a28af30a64757d","first_seen":"2026-04-27T11:04:09.152397Z","last_seen":"2026-06-30T21:45:28.562553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68b6db74ad76034376c9eb41_link-forks-img.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.910Z","timestamp":1782855894910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68b6db74ad76034376c9eb41_link-forks-img.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-136\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3YNu6lS3x1Wh%2BWSoD1Q%2B2nM7WAYugalMFOMtT3EKJhMz2Mwgcnp%2BQSHzlu2eLLazi0xWD%2B28zai%2FzZ5ficVa5yVnyeqpQpPSK0CTwL8SajU%2FPbbH%2BGam8CpvXVRgi%2B3jkvcfJyM%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf393676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":910,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2cfe567581ebd2a050ed6e1b7cbbef9","sha1":"6aef8474d45dfd8c0e4c9dc2f140b96bfcd7a8dc","sha256":"88ee04eb485d06079c30e5e6f97306ae1655992b2fd79208a082c56f8041d440","sha512":"ea491e84cc88b3e9fa7e9044b432ddc6dba8f460303d811efab27255fb38286bdd1675da027cc83b7e4a7911fbaf009ef74b2f236ffea4a3b05a4c126b4333ec","ssdeep":"","tlshash":"d0e07dba36ccc11edb1807047b58749485e66095070d4024bf80733a784c7a77d73afc","first_seen":"2025-11-20T19:22:54.267059Z","last_seen":"2026-06-30T21:45:28.563514Z","times_seen":8,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.368Z","timestamp":1782855894368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 02 Jul 2026 21:44:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rDp3RKzykD9Ga4Uks%2F%2BdiPrQqk6a6exFjDYp3rCUIQpmpafYxG6C1NlXO8eoT59W69qnxfAGC7bijY9Lue2zc7QS%2BWfeTblNgArcdGSD%2BdCR3YEm0HF8wxbxyEhrb1FvcgKv78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\nserver: cloudflare\r\ncf-ray: a1405adbc87376ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-15T05:17:35.209338Z","times_seen":396382,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.787Z","timestamp":1782855894787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:45:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2301810\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sMvEelER9aWHtnrhKfVLbLSeIZHJJyVEr%2B7APAn%2Fn1TRbKPsRXvFA89LCfOa9mrMeyedUgaTcaGE2hvLtC753F2vkCiKsxV%2FPRtSuJJuUGyD6sv6R4uK5juOf4z4quUv60%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1405b068fc60b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522095,"size_decoded":159693,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-15T02:35:29.139891Z","times_seen":380,"resource_available":true,"data":null}},"time_used":6436,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":12,"receive":5,"ssl":6416},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/681b6e8f5bd2e02e387b8645_chel.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.883Z","timestamp":1782855894883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /681b6e8f5bd2e02e387b8645_chel.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-318\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pN2Y5o8bK34uWLGN6rk2em%2FkofhqBr0kv%2FJZSc1eaflEGzNL5fiEtSk8ffR5WKfU6%2BLcjumwFLM3z19QGu05OLoQ9QlAedQaNUZok4dnZatF1Fmqgwle0gFV59bRHX8j1qxzZBg%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf092876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":1001,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89de721979d02a8848afea0244782b03","sha1":"2d62d2647fc7cf9c2e1120ed740cd373fb871181","sha256":"b22f4693549dbd281aa53e33274d634850742dd00e0abfd7364891271e49c0a3","sha512":"0426775f221b89bcb2c70c16f887c51a6af0627115859e309ca3f8ddacd03bc4a74b816cd8151fb22c3f647f7db6080474af6198c48be6b82b2b5a7f87224005","ssdeep":"","tlshash":"290145a8b698581dda104a48020c79f93066f0daaf740208ffa2b617bd245d7ed352af","first_seen":"2025-11-20T19:22:54.290649Z","last_seen":"2026-06-30T21:45:28.565393Z","times_seen":8,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/6996fa9fc0a6c5df5800073a_Screenshot%20at%20Feb%2019%2012-57-11.png","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.928Z","timestamp":1782855894928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /6996fa9fc0a6c5df5800073a_Screenshot%20at%20Feb%2019%2012-57-11.png HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443096-31f19\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNKmae48XeKX2eQa%2F3A7nhknC5eZwMQ2nzfQp%2FaFd8i3XiNMK25aQzFanZAP9yXoH9t%2FnsX%2FI0RkTVYDT1ceZFmP%2BCg4yyy4MDUeOWz%2BhIXvr3DCYwYbMPaov0RG84hzCtbfEuM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405adf494976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204569,"size_decoded":198330,"mime_type":"image/png","magic":"PNG image data, 1436 x 804, 8-bit/color RGBA, non-interlaced","md5":"94d29908ce1f285fba35d90ce658a232","sha1":"5b01912fc3b48520e857e255d8b379f0f8cdeb12","sha256":"e372b85e1a4c7aca82f8052d75124728e2e7fdfacb01f4d91394dfec629b24ed","sha512":"a6a828d10882d29f8e65beebc7ef1846ad1fa8863a3f06204ee418f111836299c01b661c458bb303ef3b2e88905d5a6fd6a46acad546e95b88768d1605d30eda","ssdeep":"6144:RP1QDWsX4t+0kd6rKndQ1C+ULafeO4lqi:RiaY6C+G9lqi","tlshash":"661413f71bcd1fbc2624eb971712d40c7562d9ed9cb809152b0ca196f1b31c31ea79a8","first_seen":"2026-04-27T11:04:09.179378Z","last_seen":"2026-06-30T21:45:28.566065Z","times_seen":6,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/696904f5b3661f36ca3febb7_enosys%20cover%20image.png","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.931Z","timestamp":1782855894931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /696904f5b3661f36ca3febb7_enosys%20cover%20image.png HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443096-9963\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1ubsDWhli2qA39cDRz7Ylaj%2BbFOCXaAeqkNlAWgZ%2FDsYb5fYvkloj4LhwuxooyY1EHoabkEDKNKfXqRf10epRrZVAAgsUF6z9PPLwOFPhuXYDIQYI1LHbsIGI03AqNWpZ4A21k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405adf594b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39267,"size_decoded":34851,"mime_type":"image/png","magic":"PNG image data, 1600 x 900, 8-bit/color RGBA, non-interlaced","md5":"ea87d2c2b658daf7aab4627226b3eeb4","sha1":"8d5e3cb732fa3622475c02c4c9b82ae883f26474","sha256":"e65ce74de70bd83fa6164cd42fb0cefaa34f66832828b7a80f8875d3af5f5b9b","sha512":"f7894b572567df8325ef4ec0846761144045a29d3b80e19273b2edf56731cc74b43c8cec57673d47294b458b4590991575733ceb6685cef3c6fca1c92437b0bc","ssdeep":"768:Y/tyDlRGNcpuajGYAnQnGby+nM4NTb+qHxY8YtQae9EL73Yi:YwGKjynVO+nltVRlxae921","tlshash":"3503bf8fd081545ece4e6371dd6a3f7477f30415aaa32ba147238b156e83bc2be2612c","first_seen":"2026-04-27T11:04:09.082408Z","last_seen":"2026-06-30T21:45:28.568058Z","times_seen":6,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66c26b21888fed6d0c1a9b05_nav-movile-switch-v2.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.379Z","timestamp":1782855894379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66c26b21888fed6d0c1a9b05_nav-movile-switch-v2.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-496\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yi%2FOVs1mB9rrAZjfIb%2BQ9qPYtRhDOVDHGZ8m6lQs1UPVHGFtPjzevMBX6bmEQD%2Bx2OmnilBMltRZx92k7Gy7pxHebCaykQoOOEnlNO7vhEk7pIKQmXNWND%2FbgMCtz%2FNTRox7lCs%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adbe87776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1174,"size_decoded":1286,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e32bfd06291352bce3086dd31b775dfb","sha1":"6672aaf8c950fa866dd8ff23a1fab61459b4c137","sha256":"e691cac8fde9627583182ff2b6ce2d26d9ee9e5c05ae3a79a55ccefb6da776b0","sha512":"c9dfed16c0dc4d5e6c2ae5a4f74816a9e9dbd29c55b1c1a2c77549552ccfa20098544fa738aa3e9508ef0fc85a1f7b3fdf7688d3397c2d7b94c7cfb44a9fd202","ssdeep":"","tlshash":"5a21fee435a8a1c40d05ebfda5083d773b6e34eb2ff8cb91d2a29981643051d08ac9c6","first_seen":"2025-11-20T19:22:54.277302Z","last_seen":"2026-06-30T21:45:28.568626Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66b7de0842a15fc71de65435_img-product-item-1.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.900Z","timestamp":1782855894900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66b7de0842a15fc71de65435_img-product-item-1.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-1ee\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtX0GYxdEE1ctyic454Gy4JiFPqD6%2FJdqEMrx%2Fx61Q5Spmkm6CoSnt6rbHmhn1vZ72U45ibBu9cRjtNt%2BNEir4c41dpQSpVPsdfwj43j9O67LzY0HBV9vRG1PuzG5obskoaE79Y%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf292f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":956,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33578ad2f2f5cb96cf78723b0e3dfb30","sha1":"c1150a68b4e8b4f27147a218db56cff63e44ff61","sha256":"0d02f39f389f0a5e23f1112990bb40846b6b6b0663f58f4eb4a9069ce00f73bc","sha512":"d93b59a9c107b4d8a842c80fcbe3434d4fbc49f7ed7a98004419428cbc2932f727f11886784ba0fc9b9a42bb5b38c40a4f07784a18eb513feb572e86bb0e3e36","ssdeep":"","tlshash":"65f059d8d28c406c0180f73d5739a87b0761a8fac741043721408882a89d9ee4d70fe6","first_seen":"2025-11-20T19:22:54.241506Z","last_seen":"2026-06-30T21:45:28.569171Z","times_seen":8,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae387276310f3f68c024a_Quill.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.915Z","timestamp":1782855894915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae387276310f3f68c024a_Quill.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-282\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sV8K%2FCT2rYyv%2B4bJ1eA9Dk42GiB4zbVaOkjuXIHwHRQAHoppVbBGebz58Vw%2BnI0QuarNeHaDb4Gk37Jwx3LMBZcTJ0wRfHqpUAzVct9w3xwEkkNH1uWI4lHKun2Qs4YBYhoBHFY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf393976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642,"size_decoded":1066,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fa9f1cda65046db4eb63e7bfb679bea","sha1":"d6301e81555de2b33f35d55c8ec0af8135bb2ecc","sha256":"5990afeb5740e6985990c23b6070e4e777c86f8c7a6b28c42e903a737ba30336","sha512":"3a77da9de1e923c89894d2261c36dfb24f8896f4cd144c3c7fbdd7a74cd7c2c130d1abfd773001abb580ba15ed82bd6f958bf1249715e6d52f472ac8cfaa4a8f","ssdeep":"","tlshash":"b9f0dda0e28af5faf500d9fc86742ec2626608d636840c80c2f27c1af448a6905816ef","first_seen":"2025-11-20T19:22:54.244635Z","last_seen":"2026-06-30T21:45:28.569809Z","times_seen":8,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66c874b93b8ab1576362a6c6_fav-icon.png","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:55.298Z","timestamp":1782855895298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66c874b93b8ab1576362a6c6_fav-icon.png HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=6,i=?0\r\netag: \"6a443096-32b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhFmEsL%2BjXrGEDiPt%2B2Zu1uvJYcCLbqYaVdxNU2aXgoEsBoqup7q4yiKMayH%2FPkkSCbdhjbR9qhuX1JQqWn1W4zjdIRhXRhg1S7pIrOJWfS4di9%2BDpxOmsPaeTEqTTWN4RM6UkY%3D\"}]}\r\ncontent-length: 811\r\ncf-ray: a1405ae199cd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811,"size_decoded":1509,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"01d441e68301708a2f2bd1ce855bda24","sha1":"dbd7e3f0c81a6d2bd8541ef20263c0f7bd02212c","sha256":"2eb6b480fefe1667f7a9b66f41e801a0330333698c3d02121b24d03bcd1f0f7c","sha512":"63cae2fc18df929400ab74ca107db49a399d8221720c572dd14d0c83731b9fc2f01c219ab0562fe1ef3c76329bfb1b821bc06c222012c814a0ae7af74aeceeef","ssdeep":"","tlshash":"8a01cac2ab0fc0e4dc4b4f65264f40e42c32fd07a250c50b551cadf72245558b37eb55","first_seen":"2025-11-20T19:22:54.255378Z","last_seen":"2026-06-30T21:45:28.570354Z","times_seen":8,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5qqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:02.131Z","timestamp":1782855902131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-5qqqoukwf.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:45:02 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a4376e1-ef168\"\r\nlast-modified: Tue, 30 Jun 2026 07:57:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/30/2026 13:44:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7275f3fa9edea93b74c2967fe566f050\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":979304,"size_decoded":157162,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2154bb1168373249b3a536c474b5fa75","sha1":"19e1aa24650c58b667ab5bff9fc33fd71ae4ab51","sha256":"0236d69bbb647262b0312850e42c6d643d4a55ee2700ee02ae6d7c00e935dfa2","sha512":"612ba452659d2ead11520b0c12a968e314533482974f5e90dbc133fc0010d229ca9acd3480787d12cc33fe295d45cd115e0064bc27850b3fea419c8758655d56","ssdeep":"3072:1airhPUgiZrhy59TUTu5TsGG+ImnmXjK9xbxv8YY6UE:1aiDTGqmXjK9dxv8YY6UE","tlshash":"7f259d469b4ec002b39c919f6914cdba56e9741365be12cff412e9dd6007f638fa0e2e","first_seen":"2026-06-30T17:37:51.768127Z","last_seen":"2026-07-09T20:49:32.465339Z","times_seen":11,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":12,"connect":1,"send":0,"wait":5,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66b7df1b233c04f4dac2a49b_img-product-item-2.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.902Z","timestamp":1782855894902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66b7df1b233c04f4dac2a49b_img-product-item-2.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-ee\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HN%2FvkAYiMmFVJRF%2FnLVC09%2FCTScYZpNYV3ELu2dw%2BtrGXUPgCH7HOwR2yv7riBGTNwl%2Fu9AGsfjZ3to%2BeHhkjyM7DguAP93g8bNVKsFZEBc2nXLB5sx93T0vy1O0P9u9ZV8NH9o%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf293076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":844,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cf86e4b56f5a040f3fd8d4eca5109fe","sha1":"b059e603d49481b8f1000ef1c3c16e80a4495a63","sha256":"7a2445085babf7c2acf7532c1f98b9e7038ffc7f0c92656c8fe183e2c35ab678","sha512":"96793889d90d4942ca21746c40a82ff1ed38c552bfb873652e17a8e9d34199daa14d7243fb6ddb8ba2b0c09f607c3786a975cbc3957d86dc5959825600e4c4f6","ssdeep":"","tlshash":"a2d05eb171d8550cc0109a148238a8e921e7e4c5c7480b4ceb91690ab8449dbac3159d","first_seen":"2025-11-20T19:22:54.282233Z","last_seen":"2026-06-30T21:45:28.571729Z","times_seen":8,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae38610e29a149bc53c06_AsymmetryFi.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.921Z","timestamp":1782855894921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae38610e29a149bc53c06_AsymmetryFi.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-244f\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5B15KGEpF2GY8F9lpVMxyRXEWZqxEJ%2B%2Fp7oFoYjiIH54frSF1PiImMZ8OowfMORCz2OfPaeGqplBfFk%2B%2Fd9zE1hbMo%2FNmWlMgUpD%2FMyp7ag6eGhcCoRqyBGe2pV3ckxBjnFccY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf493c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9295,"size_decoded":4970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b806c9a5e1102ebb909439e1a681fc","sha1":"ef57560b34b6efdfadf59f4bd9747b240f2cae84","sha256":"9368764a89084260d6ad9555c72abcf2b99be58cd101a22b4531c69847660257","sha512":"388b36d9ffd2895e658555cb18423a660f6c826a76cfefd2fa0923e0753c20305bd12ebe322b2e3b15831a4799f6269c6fe851062bf5511041ddae6a2a0ae18e","ssdeep":"192:VOV+r6f5iTFRW2svfLCBV0rROuGo4phfVKQcF4lViDTDrP0I+:EAr6fYTivfROjhIFuADPDG","tlshash":"d712c5d433ba93f8f002f7f887139474be1a28f57a16d666c3a45c20d55214c5aa9cfb","first_seen":"2025-11-20T19:22:54.246956Z","last_seen":"2026-06-30T21:45:28.572422Z","times_seen":8,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae3866f5947fc7252d6c9_Ebisu.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.924Z","timestamp":1782855894924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae3866f5947fc7252d6c9_Ebisu.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-5fd\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fv6vFtzlfILV6YcoLT3S3bF0hVxdDKX8AxFeVgG%2BqPVkARfFh8fZga%2FboOFOFw0mvYfladHeahBXJMzpiIV0WkstC5Eme2meylSIhQdhHMMgjH1ZUYdLaBuFkzDy1KOs57zdx18%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf494476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1533,"size_decoded":1504,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34fa7f21c3a29eaa7c24045affb17c36","sha1":"0302ceea88796f3b9e20cbdc1416c38e75e2ca86","sha256":"1e2ed39b5a74a7bef18998ef829361e1d9b025fa9919b482aacdfb516b564011","sha512":"2186bb9622c39d5daf3f254795aa8346898c633994b8bcb415af6f87bc0f61aca910a8c5c37cb37b87a91f8fe6ac8b8b73cb6eeff9e53955e9194c1e19e74fc9","ssdeep":"","tlshash":"2531559463be57b8e40896fd0716a0317c633dd66090c2a8c3b20c24f594d0eaefbad3","first_seen":"2025-11-20T19:22:54.288885Z","last_seen":"2026-06-30T21:45:28.573058Z","times_seen":8,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:16.448Z","timestamp":1782855916448,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/671246973b22dfce4deb98be_liquity-logo.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.890Z","timestamp":1782855894890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /671246973b22dfce4deb98be_liquity-logo.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-190b\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c35gX8%2BfutuWsXnI8cQiYe5mWqOk9hXr%2FEzD4XIw6tahHt7HwsUuwEj7uAplZGYaQJ3L1twmahNYkffXEGiPn26KqDh91v4MZlpDwDcpdY9qleV8DMFnvc%2FeR2a2sbk%2BuWwAbU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf192a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6411,"size_decoded":3197,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9ae4ce5d895eb255e46d3aa300bd285","sha1":"29a050e80de2e32df646348882a67b3b502f7581","sha256":"cde1cb7d10357f003538cfbe9878c4b807284ed6cbe012bf84c5a2692121e992","sha512":"2e38d76ce34ad6b5370128ed2f99bcc365636efb43fedbd9b294dd79f18f53809f4cc8929d878adc531ce5431bc762c08ed5a98c951ba249463289fe6c204182","ssdeep":"96:4Va2PdPKkr6zqKkIXrkKE96yJF4oteFgjDKFzX6dp2RVTXkt6aUUxS:4VPdi5MIXQH96uDW9X6LUTXkt4MS","tlshash":"c1d164ced73965f06005bbaeca27593177a62cef7b514f10c3980c2aa85205d9ce58d7","first_seen":"2025-06-23T05:09:09.150536Z","last_seen":"2026-06-30T21:45:28.574851Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:01.429Z","timestamp":1782855901429,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://enroll-liquity.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: s3Dk8OnVT7GjKOWhZaIvXw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: 3N+A/1eTbFTNtbcR77LtkrBjEOU=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":122,"connect":112,"send":0,"wait":24,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68b6d9dab9dce202f4e0319e_sbold.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.909Z","timestamp":1782855894909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68b6d9dab9dce202f4e0319e_sbold.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-81c\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIiscB5cGX9AlLWlWauwVJfzBkLOWOa3Yrk6hDQOoW604jnrAV6%2FGoQdnzLirI%2FoVuvuFkS%2FfX%2BpLrOTvFBcXsospWNDz00sRnwJT7oZbKFGWjX09xCS7%2FQmfGtAm%2FeeOmoSru0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf393576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":1684,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9076c3357c11893acd4c8a9d9dbf75d","sha1":"16962773200cf381e60f5f513ee97771275a1bc0","sha256":"514b21512baee7064c1eec21f9d50abef376f1540d6312bee6acb58cbb3a85a2","sha512":"0750812af7beae5a2b3e80a2a088acecef7c2c667bcedf4b9fd9f61c0c8e6e4aac21495b98bfd2a908d584ffb4b2f04829f0df0b6b2f9afa6f8154f85a9ff3f6","ssdeep":"","tlshash":"ba4155966bd9c2b9f70857f4032ca8fa212774d86e69860cc7e16e2295d901f2c19cc7","first_seen":"2025-11-20T19:22:54.287985Z","last_seen":"2026-06-30T21:45:28.575447Z","times_seen":8,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/liquity-new.webflow.shared.f36ed02db.min.css","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.364Z","timestamp":1782855894364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /liquity-new.webflow.shared.f36ed02db.min.css HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a443095-1b998\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBcncl%2Bi08lYUYyrF54mqoNvP8761lDy3lv1ICr30tcLUDEVvx51mIAGfwfpZ7XaQSckuahXckg0eXpVkvsnxdcfipZKWm2xTuUgf9tlXocAAmuss03ZjynfusSUeH7Ahm%2FCOuU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405adbc87176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113048,"size_decoded":24378,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65460), with no line terminators","md5":"df45f54a527b7fb9558235ea041151f3","sha1":"25aee61f3e244659643cb0055d5aecd52b7b2763","sha256":"8ce2e9912c7553fe45452a49a1ffc8c1de24ade7b813e5ef13c71268fd0429d7","sha512":"31dffd45c985f95d96466722bae1ef533ef5ffad7252e9de049ab7f7108a39424564c5116be5b5194975bc17aef24d29f1d5cca0f05fa9b8c2af40f442b16534","ssdeep":"768:KZ+UHzYkGCW/znNiMjWcEziKyfs5iPOo72dJUY8l33:KBoCWcuWchSICUY8h","tlshash":"08b3305e4760ab28783760b69bdcb24cd035750bc84249ddf741e2578acbae72f31e68","first_seen":"2026-04-27T11:04:09.183582Z","last_seen":"2026-06-30T21:45:28.576116Z","times_seen":6,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/Y8bMVF1qei.js","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.365Z","timestamp":1782855894365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /Y8bMVF1qei.js HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a443096-c486e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQ9zWSfEXpnuvRrPc5aA%2BBts2o3%2BxXXV%2B6m7MgJyk4IQOI7obAMifY%2F%2FFLL046%2F48Wn5cah1P1mUZ2jbaFA8vsK91As%2Bulp7%2FAfpXaEUHblZrgCH7e7M4mhtCSeBImNN%2BBEe9gI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405adbc87276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804974,"size_decoded":209645,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-15T02:35:29.14746Z","times_seen":46,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:01.405Z","timestamp":1782855901405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://enroll-liquity.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zqpZYRVVtRZMwbriA1cJ/w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 21:45:01 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: BsDoOFYTW36B8Re97Tm8htYUYcA=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":2,"dns":101,"connect":122,"send":0,"wait":27,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"198.13.133.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:01.444Z","timestamp":1782855901444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://enroll-liquity.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gfhO5V1TCnD2tIYM/I9P8Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: XR9dFZtANwOIvweYxfAe6v1NY4s=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":2440,"timings":{"blocked":0,"dns":891,"connect":1107,"send":0,"wait":219,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/cd8065b53a84d8a81e7765a00384ea0f98c3c59d","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.851Z","timestamp":1782855894851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /cd8065b53a84d8a81e7765a00384ea0f98c3c59d HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/liquity-new.webflow.shared.f36ed02db.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=3,i=?0\r\netag: \"6a443096-754\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGp%2BeZ9QtuNwn29acOqYLyYcnM8MEtuJQ5k1QMwft5ZJB7JBIDSafVKU%2FdkXUPpFGHOkqnavxP6TKKKb3C%2BjhyO4S6xvOEQIdtpGfdU%2FZhx%2BBCOpn%2BhIsuOl0D3Yne%2F2TpETwVo%3D\"}]}\r\ncontent-length: 1876\r\ncf-ray: a1405aded91e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1876,"size_decoded":2566,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, webflow-icons","md5":"2a32bb2a265e9671ec9b8d22c3a895a0","sha1":"cd8065b53a84d8a81e7765a00384ea0f98c3c59d","sha256":"9a50821b46158c264ae8c3bac28c40e317f9ab2b7c5c45b00c7574c7724665c4","sha512":"a6736c092fae917896a7fec7ff495c5ed76e941fac2d3afb48c96a1f6135b4c498c2e2da2010d218e89887894930be03366b28ea87b5ce52b88bb580b3f01a64","ssdeep":"","tlshash":"a3311e058fe7dfebe8124b388ca393755ba5f8229509d38f990939986c866d84c0073b","first_seen":"2023-07-16T04:33:06Z","last_seen":"2026-06-30T21:45:28.577227Z","times_seen":66,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/681b73064752d041e014dac5_chel%202.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.887Z","timestamp":1782855894887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /681b73064752d041e014dac5_chel%202.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-318\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyWvcRFZCbVtavQ%2Fj17BPiBDdM3vfV5%2Bl9ymKGazGVQmojyIq5MVIbMgkIENPPFC2wp0CN0Ck0yVi0x9kvclkUnCGWLs4jEHTaaOwSDW84q8Wg45TI2YtdBhJFkLWT%2BifA5Ftuc%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf192976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":1007,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be3121dbd81fb3e8a62114629a9534b0","sha1":"cbf52ea4b968bc2b1c37dcae95cc953f9ad09f70","sha256":"d5bfe9f9f78ee32a999c731202822b654517c5840fcb4870dbf58a423f048a30","sha512":"b1c5c5100fb70ba527c0ae9e3452d72f110913451811354bb5cd030010f99a2b2da8cdebf9a105ad45e70e7b4e26d34719169e0555503a17cad3771f05e2629e","ssdeep":"","tlshash":"6e0145a8b698581dda104a48020c79f93066f0daaf740208ffa2b617bd245d7ed352af","first_seen":"2025-11-20T19:22:54.262422Z","last_seen":"2026-06-30T21:45:28.577733Z","times_seen":8,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae3862c9984d23c370ab8_Felix.avif","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.913Z","timestamp":1782855894913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae3862c9984d23c370ab8_Felix.avif HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\netag: \"6a443095-234e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdnISWZmOdKS6Fxpd1W%2Fpx4LErSPmztklT5w5ToCLl1vUIQUKC9YFQ6bKvHv%2B%2BNRCjG8buJ98bMAZpqne5nNkCWLxg68RIKIysW%2B8bx9Wwa%2B2Z4oVaHqfl684Q1pMEAcano1izE%3D\"}]}\r\ncontent-length: 9038\r\ncf-ray: a1405adf393876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9038,"size_decoded":9738,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"914190203b74f00220d287279adb272a","sha1":"aa125890ace622a0060670ae3d738fe00e5426d6","sha256":"139fdea830f695aeba965cbf3f592e8af2cc92a931e33585de70fbe669995d12","sha512":"baf067198bcc048bbe3927b481e9703c1c46d81f253c40764a17bb08e4e424ba357866093aca0bea6eecd3b057c54eb39ce67ec0d8d1bad2ac9c746dab92a1e4","ssdeep":"192:rGmFK4l9biWDb6ML6DqEmQmzvr2JIPPVWLpkdbw0OZ8GW:rt9Zf6ML6Nm7r2UPY6D","tlshash":"47129fe422d19605f59409750ec3b705b2339791877647fab0b4da38cf54399cdeea8c","first_seen":"2026-04-27T11:04:09.231902Z","last_seen":"2026-06-30T21:45:28.578322Z","times_seen":6,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae387840e891ced273e7c_Orki.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.917Z","timestamp":1782855894917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae387840e891ced273e7c_Orki.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-771\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RK%2FmKtXd%2BUIWl2rxZZpD3b3sarmbcv%2BeF8voTLu%2F6rB8LdLwsYY1CKiVmX58YpZ8nT3JExqu8UFDm4AwyQFlSmaKwnqARoBTOeAUOdAmt2tas5oo2C8adi3K54e%2F3FGvEtwiCI8%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf393b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":1484,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67075d92e5d4f4d9e101e517da7dd58d","sha1":"23da955e3f0eed872f423bf7387813f5381bb754","sha256":"972b332c3b2ee572de0eb9fa03431a145982c76186ae668e70d9907710f33a3a","sha512":"de29d62cee2e4ffaf162ed9e1a5dd120ec73eba0d20d4584b1bb5e4930074fab9259d6b68c886540409aa1abe5ad44efc93f7d154bdd5cb910f1083d60c51f29","ssdeep":"","tlshash":"d94134f0625cd6188f08912c575bb0ed40210fe6a2e1b8d97ba7304330486d616bcdf2","first_seen":"2025-11-20T19:22:54.275917Z","last_seen":"2026-06-30T21:45:28.579072Z","times_seen":8,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae386fe326b3d06af7514_DeFi%20Dollar.png","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.926Z","timestamp":1782855894926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae386fe326b3d06af7514_DeFi%20Dollar.png HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443096-9599\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cl8xidOExHC8GUTQ4YLNEwmMS7%2BXZUMGrCvvjzhXGGuyOvLQE6rz5D0KJb0DE9eF13bKRtBvZu%2FMtR%2BuTeAsSWo5NbK8R6U3%2BBlYDiMX97%2Fz4mHCiCQBe403OLUqUOpD6HlDHo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405adf494576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38297,"size_decoded":39034,"mime_type":"image/png","magic":"PNG image data, 314 x 314, 8-bit/color RGBA, non-interlaced","md5":"50e0428078f559cd3921576cbcdcccee","sha1":"5e95a6451489b97415a5b4fe8c42af7010107d21","sha256":"db696bb8de9ae382cf2e78d8ceef950ceea881b3b8f5651407ee858387725a34","sha512":"138da45b81b02a8bf5f69d1a79b978e876dc24a91e763e22700380aba04c2137f0ae5cc6d71ee8862cd0d213d9fc60c65ec408a4c32f57db0c680e86c6d799ae","ssdeep":"768:kV3yvA3B+rvj+ROHR5yZI3xYOfIlLTXGa6v9RmB0pAzl4dPhXB1J/UxKkIXz:kV34iUrr+RQR5d3GsIlv61gQPhBU+","tlshash":"3003f153f0629d7ef0336f78c7b20b1565f760abff99d0124b04e26a81359818962f63","first_seen":"2025-11-20T19:22:54.289763Z","last_seen":"2026-06-30T21:45:28.579801Z","times_seen":8,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/5fd883457ba5da4c3822b02c/66c874e5514db1a9b3940ce2_webclip.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:55.297Z","timestamp":1782855895297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 07:47:28 GMT","end":"Wed, 02 Sep 2026 08:47:21 GMT"},"fingerprint":{"sha1":"62:1E:08:5D:94:79:36:E4:D7:80:E8:C4:92:1E:7D:7F:EE:0A:E3:52","sha256":"41:03:C6:89:69:F8:01:32:88:5E:0B:58:7B:E2:C1:E3:4B:A4:7E:A3:0C:A5:60:42:D9:34:2F:E8:43:F1:88:B0"}}},"request":{"raw":"GET /5fd883457ba5da4c3822b02c/66c874e5514db1a9b3940ce2_webclip.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5218\r\nx-amz-id-2: va7MIY6+QPdQMJB/+HWaHlwD8GV+e69HYJgbNHwSV9Uj5mdJNpWJ1U/cbvcebSsVg+sgwP4+WiLJOZfjqyIYyHR5j/Skr8AMwveww/FMKLo=\r\nx-amz-request-id: J10ESTX7AAJ5WEZ8\r\nlast-modified: Fri, 23 Aug 2024 11:39:19 GMT\r\netag: \"d8612aa1caf969ad8fff282b9c1ddb70\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: ZF_mJDtpiOl2rvK7ITsN_L36V90uyLx1\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nage: 10626542\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: a1405ae1ba88b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5218,"size_decoded":5919,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d8612aa1caf969ad8fff282b9c1ddb70","sha1":"432fa39446828bf44a4398be4f665559675ea174","sha256":"1bfc1f1b3e5deb32f332eb4f3ec065019f32ef44ed071b2005a840dd192eb123","sha512":"069c5420cf5f31618a22f796cc10a079fab7182124a0864653870454a40e23c77c0d37bb8227fd9aab52df38433eda839df912421eeca3a020884293859f047d","ssdeep":"96:1Ss7ZKEql/DDJn13dXa4djZ1s6aK7D9LM10V2miq3WU0Evf4md4HDhC9:1SsgEe3J1tK4dZdawqGzimWrEX4md4Hq","tlshash":"58b19dea38a7494faad412e61417fd0c8df343617aa21f53f0ca525e8e396009ac4bc2","first_seen":"2025-11-20T19:22:54.248872Z","last_seen":"2026-06-30T21:45:28.580399Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:01.390Z","timestamp":1782855901390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://enroll-liquity.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kmP51Pc+2rcHIkHt8ODgLQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 21:45:01 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: u6BMrI6nzpfNuJQPg3hnsECelnk=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWBGrtq5yUMSWw; SameSite=None; Secure; path=/; expires=Tue, 30-Jun-26 22:45:01 GMT; HttpOnly\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a1405b07dcddc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":21,"connect":17,"send":0,"wait":507,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:02.710Z","timestamp":1782855902710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 21:45:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 4104365\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fW4lSc14aF0G%2BAGRtWocFC50gebneCiw%2FUhaiIV%2BqayJod9qvgNYY3QFCtA6SIiq0jIsk7utt9g2QBdCYp2xrII0Z4qAo%2FM9CDjX8FszZTRUVoAtMBf0kjPZ9QB8EOshtgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1405b0ffb74c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":24474,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-13T04:34:17.117261Z","times_seen":435,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66c26a6260f0d87a5a2eb234_nav-movile-switch-v1.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.376Z","timestamp":1782855894376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66c26a6260f0d87a5a2eb234_nav-movile-switch-v1.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443095-bc4\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:41 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkkcJV%2FTnPXWRPn2aP6XK3mJIpKyiiFNc0zHikRvYLYqjRpGvwjMWNhrOfqPpBkE72spdtjqLfpSySDREYjB1Ha3KeCMmsqXU6S%2BvOjFk%2BVMceP4ceZDzvLegevdWI61OyiGVys%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adbd87576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3012,"size_decoded":2145,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec9d0d30810de6287d84bd58789c891f","sha1":"8d7200e4264e8b47b26d89d515b7fc4bb7d97a00","sha256":"a1f15279c2a9bf87018c6fc9acedda7d6cc319452efa7348f28863ec7a979d5a","sha512":"e5b9537b4048e7bcde65e244fb61ae107de3b7a3e17c7ac2b5ae06b0c9c6d5b2ef02b2de7dd4fd4e710e25f8eb269718e50bbac0e6b76310d523dce356ae6975","ssdeep":"","tlshash":"ec5145d17698a2b8a801b7ada62564722b6f24ffbed9c5a1d2f47d801c494eccd4c890","first_seen":"2025-11-20T19:22:54.239298Z","last_seen":"2026-06-30T21:45:28.58153Z","times_seen":8,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/66b7df2619975564a40babf2_img-product-item-3.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.905Z","timestamp":1782855894905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /66b7df2619975564a40babf2_img-product-item-3.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:54 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-171\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDxVE1ehc%2FNeenjDoVTcY1WeLBx9FWTjC0K%2Bx7bzisBYRUk9Ep4zVn0Qdds400UZLy6Q7drvo13uqXhwQBJdZHBBjT0Ehcg%2B2KSL3nNfrL%2B%2FdBpcHfgafFlJXx9OvLL50JWn20U%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf293176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369,"size_decoded":903,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb32e2cfdc71feaa99c0f0660a0afc70","sha1":"af2b226cc27b4700de5e01ce214eb47382dffdc7","sha256":"627cf1c110b46b97308adbd4f5ec5412738cdb73486a3cd873817c40da1ff822","sha512":"9ad741952ced922c87e50b0e39a4327ff9cf33552e4b5c2732751aa1c119704344b352f033a3fb1c3e986b3f4cbfd07a2b5c1f49da0f0a3ef89b9d73252d56a6","ssdeep":"","tlshash":"f3e0d833413ee428f45967bcd1264398f06ddc5490de4c0633811b056ae44568e795e7","first_seen":"2025-11-20T19:22:54.264754Z","last_seen":"2026-06-30T21:45:28.582205Z","times_seen":8,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enroll-liquity.xyz/68bae387f2fbeef6283f95cf_Nerite.svg","fqdn":"enroll-liquity.xyz","domain":"enroll-liquity.xyz","tld":"xyz"},"ip":{"addr":"104.21.46.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:44:54.922Z","timestamp":1782855894922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enroll-liquity.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:14:57 GMT","end":"Sun, 20 Sep 2026 15:13:38 GMT"},"fingerprint":{"sha1":"CA:C3:D6:B7:3E:65:29:32:45:86:E5:A1:3D:92:24:1D:E8:FF:E8:00","sha256":"88:75:0B:BC:05:37:8F:06:46:16:76:3D:5D:4E:7B:55:75:01:5B:3C:52:30:82:95:1D:7E:0E:7A:6E:A6:B0:74"}}},"request":{"raw":"GET /68bae387f2fbeef6283f95cf_Nerite.svg HTTP/1.1\r\nHost: enroll-liquity.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:44:55 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443096-17bd\"\r\nlast-modified: Tue, 30 Jun 2026 21:09:42 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dh4ZIlHRt9ypEWjEoVYdZ3TC%2B%2BVy8KfkVBAiGoh9wcE40TgwVCMshx4B8XIKtooCx%2BqPu5JLp42NEuV2xKzCMBEW2c2phu5h%2BwIWt%2BbStx2pxgJmW%2BQbzrOUiWoviPIj2CCcf%2FI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a1405adf493e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6077,"size_decoded":3355,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15008f32bb92131a0c35e0e3fd401a6d","sha1":"1bdb5797c0485fa4d3814da87ac844e8832d1e0a","sha256":"22696af682530dcc663d67b414b1748b20caa38d015113938eef0f0995aacd31","sha512":"1bed609c32815a0adef1fc09a928589a355746cd7f8129b513c2ab05363c4a73fd0a50f6cad414aa93cc4f9898628ed0f56c9967570e46cc07396ee926030db7","ssdeep":"96:JbK1iC6jFDUwAVHamvfK8m5BBjt/PYa0ikeSH7A:N1C62wAcm4fjdPY8keSH7A","tlshash":"5fc1b5d033b897bcf914b2fe0366d474389138ceaa98c9a4c7765c21f46260d1e96ce3","first_seen":"2025-11-20T19:22:54.234121Z","last_seen":"2026-06-30T21:45:28.582676Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"enroll-liquity.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:01.611Z","timestamp":1782855901611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://enroll-liquity.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: NTgsFmlTvcXcC+3WbvKScQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 21:45:01 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: I1yM57DHdoXEzLWAi3K2hzAdMbw=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:16.503Z","timestamp":1782855916503,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /assets/index-b637b742.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://enroll-liquity.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-33bmtv859.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:16.559Z","timestamp":1782855916559,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /index-33bmtv859.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://enroll-liquity.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enroll-liquity.xyz/","date":"2026-06-30T21:45:16.699Z","timestamp":1782855916699,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enroll-liquity.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T05:18:37.852892Z","times_seen":17256565,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}