{"report_id":"8ed9bf56-6675-44c8-b303-4d03b8fb719a","version":6,"status":"done","tags":[],"date":"2025-07-28T03:34:41Z","url":{"schema":"http","addr":"financial-freedom.top/user/trx/log","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"financial-freedom.top/login.html","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"title":"Financial Freedom - Login"},"submit":{"url":{"schema":"http","addr":"financial-freedom.top/user/trx/log","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-01T03:34:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"node-ya-2.jivosite.com","ip":{"addr":"158.160.45.40","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":0,"first_seen":"2023-01-17T17:11:06Z","last_seen":"2025-07-24T03:30:27.946593Z","alert_count":0,"request_count":1,"received_data":700,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":724,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-07-23T17:51:26.598177Z","alert_count":0,"request_count":1,"received_data":28409,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-23T15:10:24.571619Z","alert_count":0,"request_count":2,"received_data":55334,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]}]},{"fqdn":"financial-freedom.top","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":29,"request_count":29,"received_data":5648461,"sent_data":50157,"comment":"","tags":null,"fingerprints":[{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"p5.js","description":"p5.js is a JavaScript library for creative coding, with a focus on making coding accessible and inclusive for artists, designers, educators, beginners, and anyone else.","website":"https://p5js.org","common_platform_enumeration":"","icon":"p5.js.svg","categories":["JavaScript libraries"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":30079,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-07-23T02:34:30.513316Z","alert_count":0,"request_count":8,"received_data":1305334,"sent_data":3830,"comment":"","tags":null,"fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-23T15:14:05.350656Z","alert_count":0,"request_count":1,"received_data":12751,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getBasePlacement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d01ced9125d9d40b344c51cc5d0ce876","sha1":"329c78397a69d21e2707c2b09266b6bd171c0752","sha256":"06d300038c882751211ff82ccd5d0c887c8e512f9c51536356d077b8c4b83b97","sha512":"22e9cbbed0dbe61b0137391e2b3a7c538af28835a15bd87aef8c53e0d9781531b67546775a4f8b8eace63ca80800d9954ba2c9062615ee9a82e4c044e9a2a9a2","ssdeep":"","tlshash":"8ae068c674d9be4396fc7231610bcbf1306ec440280ebac088913baaf1b1d348df2526","size":390,"data":"","first_seen":"2024-09-19T22:59:05.940483Z","last_seen":"2026-07-12T06:07:07.34771Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getWindowScroll.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"388e9c5657e4aed593a3f1eb63273cc7","sha1":"cb794dcb15851bf21ba7617e327dd8b82f7f0ade","sha256":"de56b4296a838f478cc0a5e593ed7865a7f1e01b69dc529961257f19aeb8bf54","sha512":"ca86afd8699a9293c3dd9796b4c84492097fb98f397c2b8beeb179cfbe7fa77b3396cc574921192e4b7488f9169ca949642f9b8fccfa2dc39cbd9c445b99c4f1","ssdeep":"","tlshash":"5101d08a14702c0721f8a5b9b00fdbd2318f40122549a5449ca97b68bfb14bf44b6ae6","size":742,"data":"","first_seen":"2024-09-19T22:59:05.944234Z","last_seen":"2026-07-12T06:07:07.459752Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/preventOverflow.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f693d1e1efac330a8fad6e95a641c845","sha1":"0fd5fa0dc1a26974b35cf15f710387e06f231376","sha256":"41774696b4ec62415d0e1e226b50f3861b49751ddd6447804de5067cb7010ccc","sha512":"b345576a0cafd548b4159bcbd75cbcc0319c5ec50dc7ab5477ddbc8867ae268f9509d142529736e16695240a826741e884ac25652fb2571abef3fc4b9df1126d","ssdeep":"192:zrVpo9Q8V45gM0TNRSnrdia43tJEObb179N7tUo5:zrVpo9Q8V4554dJEOTN7tF5","tlshash":"f312233069d45d8a953faeec721be12822f15223144df40035dd72472fa1cf9b9ef6aa","size":9430,"data":"","first_seen":"2024-09-19T22:59:05.959299Z","last_seen":"2026-07-12T06:07:07.484833Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./js/helpers.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"82a3065baba8d78ffdf13299ce65ceab","sha1":"a2633f16831a6e1d9bf4ea51669ed3bf18a3b8d2","sha256":"0879945036bed6e3c353bf8aa1529a1715e96f8dc181fe9b8acab6b21a596964","sha512":"53f3ba68866f2c37203efb748be05ae4186f09d8a13e013f77aa2896780d49f7d369e398cbc8f805b04da0c5908c22af66f99034ab92a8d336a9d16a3ecffee1","ssdeep":"768:JohCetcmlyg69MJa35OVvucJLFfLgeapB9OlZQrCc:oJa38fgVpB9ODFc","tlshash":"9323942935f62cb288bb70be5b6fa2c5723080030609dd15784eb6d85f6c93553f6ee9","size":45858,"data":"","first_seen":"2025-06-27T18:03:56.163411Z","last_seen":"2026-07-12T06:07:07.458318Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getWindowScrollBarX.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6b2edc1d728c2f54bb52c0b2aaa53a59","sha1":"20ad44db459841f899e45ec08367caf4916cd714","sha256":"3f372c0a761f53e5ef1e51a799847ee74ece0cd71aadbc33f210b0797df7d586","sha512":"f8a1a1ef740c399efa48c78ead7af0c66ca86030bf012d3cac6efa49c214d8a377c85f0a08bf853d0066558fd62bbf100ec269bec813aa31cdab03eb7101dc36","ssdeep":"","tlshash":"a7311e1533a41c0b55e8bcfe7207d36a328e4120258ab88038df33546e718ad98ba7f7","size":1604,"data":"","first_seen":"2024-09-19T22:59:05.906903Z","last_seen":"2026-07-12T06:07:07.50211Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getComputedStyle.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2782e9ec11284f791769775e7845f5ce","sha1":"3458e9dd5a4db2a993828f746e046f13d2d8111a","sha256":"c28467787d8f22e3a2322ef7e8e31029b5c1cd78a48d21cae3386ebe7048bd72","sha512":"5b3939fc9e5be23f37db06deb24f3dea6e421cc3d2ab9ae5f2da523eda2ec49ee99ace552ed06fb8c4dd4813dd12b5374a801cd47f243cc401712d15ef8bd9c6","ssdeep":"","tlshash":"5cf0499561a07c07667465fa230fcb9631ce8000244a3c80dcda6664aef095995e5a6b","size":634,"data":"","first_seen":"2024-09-19T22:59:05.903467Z","last_seen":"2026-07-12T06:07:07.479101Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/js/main.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c30997c5134d63c0487eb2a492a52c13","sha1":"d5cc49138b221a4ff876a738fd07306d02efb690","sha256":"1d4174423cb17230614da5c31fbcb7e2d3255bafaf893c00db8902afa96c84b4","sha512":"96605f92cedc30d05c89a17bdd4dda33850b39e5e55889d3461c120baeeae49697546a8e35df6a8f915bfce5d33dcd2d228d2acb40a0bed42d695e5cff28de16","ssdeep":"384:2y85FGbGSMT4VWYZjhH5BAjRFzVFAEOREOJEOUw:2y85F1S1VWYZjhHUjRFz3Jr5w","tlshash":"f0c2741628f2213205b7b0be5b4fb348f5324107a209ed19799e43057fa096b96ffbd9","size":26416,"data":"","first_seen":"2025-07-28T03:34:54.607782Z","last_seen":"2026-06-20T04:09:30.167469Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getDocumentElement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"640a771b9b6704b5aa199f32d1724a1e","sha1":"8a7277f637dd214f0d1f16585a6a6d47a2725387","sha256":"92925f872fb3faf411ff4732593227bcdd3aea8c087186c09bbed7b8723f1361","sha512":"bbd6d7c418c26ceb66ffe18da5b60cd129a4b33809f7c880b70ce9aca50fa3c478e1bbe24e2ff9d7410b2fc1dbe39b25d42d9c3a5d01632b4fdc5a677ce7eaba","ssdeep":"","tlshash":"1401bd9173a46c136dbca4ad311bca9f3abfc0107c463884a8ee258c58b1dd591e696f","size":799,"data":"","first_seen":"2024-09-19T22:59:05.919074Z","last_seen":"2026-07-12T06:07:07.489924Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./libs/popper/popper.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c7e1016de15e916c30d790193ce001a5","sha1":"74a4d61cb1a276be7c5ebf909b4841decdd84eb6","sha256":"b7ec8be337a2fd80dac7cc19871718344a66cb2f045a04c8606fab873b90067f","sha512":"9043afcbe3a94176efaa76ff0ce520b5182c906e55af56872c7891ef3fda74efc8e1cd880897bc76fabacc071ff9a0e61d71fcfa07f3fb23381012388918d6e2","ssdeep":"","tlshash":"1f110eace858fd46b1f0e4e52a57c5ba3147c000fe887848fef7153992f4c0485da239","size":1014,"data":"","first_seen":"2024-09-19T22:59:05.977632Z","last_seen":"2026-07-12T06:07:07.483445Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/instanceOf.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"cd8f3fefc76420f5f29bd45e15846866","sha1":"6b1e726b723703b8495d04e3b52e4d4a72660e16","sha256":"c68a25f72791f15be9ee211179b99658f617aeea58d6c7cf3ba43fa282cdc53c","sha512":"81417d829de82315132e9d49cbd5c8e47eb1026cc0a952958f0755d1131df8aa469e24f924f24363bc9711dd4fda352f0eb48d6fc3b33dac93f60a9b698a36a6","ssdeep":"","tlshash":"4121e1863bb25a071eec65bc010fe6ce30ef8184e54c55c058ee716879b1dc984ea679","size":1333,"data":"","first_seen":"2024-09-19T22:59:05.96437Z","last_seen":"2026-07-12T06:07:07.347083Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/popper/popper.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9148dfb769160b7d3f4c9ba3b40afdb6","sha1":"5c1d7ecab5c08609f8dcb24c4ee3894763591bb6","sha256":"09bed64033173a766b611286a1c2042f4f3af26df2eed171745bbf025e905abf","sha512":"8117325cc90052b8cf4690e3647f87a80a36d785dc4269ed0c63f7d6cd14b2ea52ce164586161f8e658bb846507d882f012c9f9d18f29036545dd04ae3422d2a","ssdeep":"","tlshash":"6a11028e32f1f1452bab10b5415fe44f71e7a4a9e84d504102add0b8bc719fe879391e","size":1000,"data":"","first_seen":"2025-07-28T03:34:54.616347Z","last_seen":"2026-05-14T18:12:08.621223Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/mergePaddingObject.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"ee558a39da657def8c0d699bf4d5556c","sha1":"6d4f34c31b159061500016e952a131ea0f0e90e1","sha256":"6166469a69191503a7ae201c925601194aea5cc1f4a0e37d155b6f289d4218e0","sha512":"241618b86a3ff2f1fd4de9004d5323397de17d59759d953f23f64f2e952ef61922faa4fa680a653a4c9a6877675376674cfcf3fa043599f9398e293b83bb5ef5","ssdeep":"","tlshash":"9c01f9c63880ec9367b4b6f09307c6e2f15f8804244df880cc93bad109b086d8aa56af","size":675,"data":"","first_seen":"2024-09-19T22:59:05.999551Z","last_seen":"2026-07-12T06:07:07.39422Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/rectToClientRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"638249a8e159ac29f3ea73adc8f20ef6","sha1":"e872748c83453c99f7724617fa0634a9531dd1eb","sha256":"db329756e83327a0a03b2f669cbe2a43f65eaadcbe04c1bc10f9762b953cfbb3","sha512":"4d8d2e412195f38b98df5f02374b2e5f1444ba1703d664d6f9cc2cca83b81f0b5e5ba7a7ed145b78b9a51f4baecc6cff9ed837e62979b752bf84a5f7c6e0edec","ssdeep":"","tlshash":"b3f09ecb3c90f863d3b0e3734106caad720ec401190f7c80b8d4776855b0c58467956b","size":491,"data":"","first_seen":"2024-09-19T22:59:05.923998Z","last_seen":"2026-07-12T06:07:07.409616Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d6da3bb49d1263ac8b086d4849c22bbb","sha1":"7dea5f3b42e1d9bf4fba4286d66a2b607246c2a2","sha256":"769bba0e39cf9f47c85e54d674890d75119004456ebec0ed706def60c1f73187","sha512":"b2a8dec07a8ee5137c81f59b95ceda8775eaa993382bdb84a5d452f96d13d8726b86036532f164692645e31a23f9efad185ae62115c145e2351fe8bab56973a8","ssdeep":"48:r/y8zw8k8vhgVG8l8Po8pw8Y8Mhb8h8ltHgSKbjww8PDRyd+q8wq838Uq1YS8N8I:r90ZAr8C8oUeShjHkmRv7ISTJ2","tlshash":"9bd1c0667d96fc8751a0bcf52a2bc8d773bb1541389c1dc0509e3168a7b1cd884ea3dc","size":6340,"data":"","first_seen":"2024-09-19T22:59:05.910555Z","last_seen":"2026-07-12T06:07:07.312419Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getLayoutRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7ac143fdfee1067fc0c4216296af0912","sha1":"2535573eac7cd7068a04d0cde87ad7e9e9bc89ae","sha256":"f02bb669298c35d9da098c4b7e3470bd7640d45b9e87238b8c97a17b6cc82078","sha512":"bc21905183639dab3c3a36a5e23ea6f627b72d3c6ca9f05f04c914dfb835ba1f6a2b23ed124de0f6139f4263c7f42f902d94b377a42b1302f24edc6d4fa791b9","ssdeep":"","tlshash":"962120aa32a0bc17d201ba3b934bd58c336ac010060b748059eda05c5cb08697afebe3","size":1259,"data":"","first_seen":"2024-09-19T22:59:05.91645Z","last_seen":"2026-07-12T06:07:07.393615Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/bootstrap/dist/js/bootstrap.esm.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"545c82f3e7fac2add9a4e06883211306","sha1":"817b32f41201fde9757c01e33ec70162f3818b5b","sha256":"8438d02921dd79a109b428dc8df4a4e817b425774e2a7723b67fffcf2a1697ff","sha512":"1eb0ded02d588a0bfc7e21b2028ed51bd9aea3e082ec8e8dc5d9b42b99bcb91d908e766d36a19876f8ce84916beda2f6d8642498d4d3d0a060c6a0926ba8b3e0","ssdeep":"1536:cLAWOKBAykJRKGNGnVeiKFC9Ggir15Jm+Vc7wt7hs1wfFzl6gDE/9MiMJg5kwB7X:cfrbYCMcTKFzIHlMiMJg5kwdU4","tlshash":"6d04834a7dfb6462492bf03e872f8106f6694457840ddd547c8c9a8c6f6882943febf8","size":182756,"data":"","first_seen":"2024-09-19T22:59:05.965839Z","last_seen":"2026-07-12T06:07:07.299869Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getAltAxis.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"67fd4b8b4b6b94520a4bc5eb90ab3d88","sha1":"941305febc5a53153e8b75dffc27246e30833753","sha256":"39b7a04d6cbb22bb6b7ef2809c69d49456dcb6de959e8db59eb14ce24865420b","sha512":"f6ba9c3c217e00b24d75de916c37a5011abb4d8e2febb7ec9e078bbbdd4acd48de7f8fdd079ae3fe3ab8ec96e0ab9752259714d6b5025f35d8b60bd5e3285d1e","ssdeep":"","tlshash":"d4e068db78e4bc0316f072306507cbf1306de910bd1628c0d8692ba990f08149aa6036","size":367,"data":"","first_seen":"2024-09-19T22:59:05.932155Z","last_seen":"2026-07-12T06:07:07.485546Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./libs/jquery/jquery.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"55c064d9d843fccd48fa9fdc86b795c8","sha1":"534262d750a6eec1a9d62a8d1a190954d6235b03","sha256":"9601a5b26ef8c03d7ad586b864e1b86a505a74ab9337a6b47f666b71ab6232e8","sha512":"ad1d73fcb5a4c7c9715621461fdcfca5a5f44040194d3588d253cf9cc984d50947566d83c10d1088826459ca709788cdab4301b0b2ab251dd618019bd4a9de9f","ssdeep":"","tlshash":"d811365d19895c0fa1f0b8e4eb2fc6f362cbf11074693c8ca4a9762439b4804e9eb361","size":916,"data":"","first_seen":"2024-12-26T16:48:02.793061Z","last_seen":"2026-06-20T04:09:30.210073Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/jquery/dist/jquery.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"94fbe7d39a47c369febdb5b788dea6ba","sha1":"627ac48478b423e5b692492212a829940214d068","sha256":"8ec8b5b628c6e6ce0470d298739392188ef9ae87357017451a7405b77294724c","sha512":"1dfe42756db577379b0514727542ba978cd6fcdd57ba7ad3b7266daf4af31d5f396cdb244b8483facc27352f9d1d50b3aa8620b92eb83d8e13bd83c98b238ff8","ssdeep":"","tlshash":"721165f543ed135b02302598e72bf2ef7555c2743499503b540c82bc6871dbe124a9cd","size":1000,"data":"","first_seen":"2025-07-02T00:27:14.747351Z","last_seen":"2026-06-04T11:19:05.514534Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@form-validation/plugin-bootstrap5/lib/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ffa45641909a94285bec5d07e08613d","sha1":"f122b0c05c497e608e70c45d25deb525a9a55bc7","sha256":"54e8637eb3118c60673669c4b19d13b70dc3551aed88024006903e8598544e76","sha512":"4ce7a7768b0521a2cc2d9950145f70223d32da1caef329d86881002b5cbcce9fa350fbd32972b167bc43d4875f3403f396aed09abfcd3eaea1f5c0d1ed914d76","ssdeep":"","tlshash":"4be0f1d054bc22422f9130fbb0d6d26651ffc2a0d4d0e084f90e83d84c989a013ff418","size":405,"data":"","first_seen":"2025-07-28T03:34:54.628386Z","last_seen":"2026-06-20T02:25:17.277141Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/login.html","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c99c85b057957ae1edb319fdef9d780","sha1":"9d8824df4da6fa49dff1e66bbd0c7357ff7d3550","sha256":"0ace6e7138a9a8ef5edcee9c716a762c6de5189a1089b807dd31f8982eee90a5","sha512":"1255ef5d861cc373897dac6ca5fc022ae34beab17e0ac026b976895e67d5bc1711f6e2c62e8d205599fb48264a3dbf0dd6dacf02b9f8ea069d3b175d0395e9fe","ssdeep":"24576:Yauk4oTUIcb7KulqgrN9pRvILkYgcBulmen97cJ8QsFFOmDbG:FuJb2ulqgrN9pBILRduUen97cJ8QsFFo","tlshash":"88354ac4b1d1f4a906e351e9943b2005f23a2c2e7409f464fabcdcc6aa5658e6277f3d","size":1119989,"data":"","first_seen":"2025-07-22T14:13:08.777304Z","last_seen":"2025-08-03T21:41:53.929703Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9497d1f218c07330ca88f7b709bf8fb","sha1":"04bdf81e13f3a1712f217b0887e97dd8644d8739","sha256":"1bf7b2c3aac365b8341deca0c39a6e750045ef1fe7455a4d70cf1842751804a2","sha512":"7d1defb9a8a345731e12a31cf34f01ab592a5eac47637f0bc300047dff963095727e0af0c58a09df1a249b031e3ae4e18ec433ed532a7b446e194f10366587dc","ssdeep":"","tlshash":"5951d1652aa0ac4791b4fdfc2617c4a662ef01017c9dbc4455ef31a85eb18bc14aa3be","size":2992,"data":"","first_seen":"2024-09-19T22:59:05.931071Z","last_seen":"2026-07-12T06:07:07.261436Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getOffsetParent.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"484c3c466c640eee80f4e35bd51ae1be","sha1":"fd87f1fa5b2005ef245f0a221e22b3ef355c04f6","sha256":"0739c6335b49dd382a60a5ce2382b294a8197fb74d658e2a584f215a91ffe1a1","sha512":"f472896c55a991bdcb948e7d7138da704e1967b32f0e79664c962897e319815616cbb2a65c56232900950778f829aa71985e2f2aabfd236c6cd9f0f51e5c8e62","ssdeep":"48:r/5Ii7O5626GV4+JT387+Gx4ZtrMgzQHsk4N4bsbzg23Sk94W48djrb+tqmr203p:xOI25J1M7Kr7zAGb0i9dfqtqs9IUg3p6","tlshash":"57a1205537e05d1b9611fdf82347d06931bb820164987c0068efa1642fb2de89deb76e","size":4675,"data":"","first_seen":"2024-09-19T22:59:05.954251Z","last_seen":"2026-07-12T06:07:07.315988Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@form-validation/plugin-bootstrap5/lib/cjs/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7386cae9b5f4b1a7077a672ba47e87b1","sha1":"bd7c746b5ec6a45577a04ff1b69254d63203e8f0","sha256":"934ba43ccaae15261cdfd992e29fb98d1e1801e4d0d3e07b7ee0a99d5b1f30ba","sha512":"ca9c178bafe44b73fcc4753f75c6f5ac2837224cea2f55608ba5f126ee6938214c3142d6ecc43d6b6545d3207df487f83b35b865dc38619b93527a2a0acb3bfc","ssdeep":"192:KstaXFwjrDn76mZfLZNmAyJkyCybRypxqfouqEB:1aX6HL76YfL/mAi9oY","tlshash":"1ce13e0534a92d729c6b2afe33ae64c971e58003c900dc147dadb2444facc9917b7f9a","size":7235,"data":"","first_seen":"2025-07-28T03:34:54.632676Z","last_seen":"2026-06-20T02:25:17.28574Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/js/bootstrap.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7e12c9223cc15a1e0037105e7965d3","sha1":"3900f86aea4b9ddf198cbdad78b21b8b76d2fab6","sha256":"9a2dec52e59c068c5bf41fb3be9425ed45f324ee8d89ff393097b16fe1f8f395","sha512":"b1a1db31d76941d143ffa41785dc4d74e027255ccd687c8332a8572a11e5a551d2421cb1a0294cadf9d58dd4dab7cc739e57b9d8739d650c380e15768a8ff637","ssdeep":"3072:/iTkmaIcJxC63Pk4BojCMxcUsd8H/9qjP7nLY7MMZsH2pvSnOyS1GZYYJ+0y:/iTyjgICZsH2pKnOyS1GZNJ+3","tlshash":"c264b65b3d952c734a1affbe976fc15af1aa72000059e4003c9da58e177186882fe6fd","size":335401,"data":"","first_seen":"2025-06-27T18:03:56.124497Z","last_seen":"2026-07-12T06:07:07.243521Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getOppositePlacement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0d19ac8d82a2a6357d81e2b198b50400","sha1":"c8f74f7434682dbae01c5e847824b032e044df62","sha256":"e3166ea9aee6cbf22575791394d3c3bedb1ac69c582e4817b45951271593dc62","sha512":"7ee260ec3f2e64f9ad645b541aba4c1bd73192d378fd4839b1e923fc68944009c3a107c89d57b5ace9acbcc7eb962fe5363cba7e55aa629fac2f576fef6ddb1e","ssdeep":"","tlshash":"7bf081d938d4690702bd7363b10bc6a1719d8490998fb840e8a4296479b697480b2735","size":556,"data":"","first_seen":"2024-09-19T22:59:05.939035Z","last_seen":"2026-07-12T06:07:07.415504Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/isLayoutViewport.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"921a828a929d101c1b6fdb59efbd535c","sha1":"87fd2e31c32b3608cd0a493e5053159c2b8f5be3","sha256":"7aa798ae4943411d21f0c0c70333080e4bfc5f8c42fce6ea940f9d0bef7233e1","sha512":"b17f518c9bffffdbf997c45b8eb5a241a8342653b91ebb0716b19c5172d88adea28e171f1cc312157631985ae296a378fc8bf055e3211ef1ad7a04b4203ffbba","ssdeep":"","tlshash":"bff09e466ad06c0357757db9720bc6a220edd106246d6880b4aa3be429f0ca4c9aa27d","size":649,"data":"","first_seen":"2024-09-19T22:59:05.942941Z","last_seen":"2026-07-12T06:07:07.36325Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/jquery/jquery.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddfbae2cee7023f802c4c293c863397c","sha1":"478b9663a774c12ede4be15b043a60b9ddf0f22c","sha256":"c61e949e700dadd1135c962825c43bf4ba3dd54182e0fcf09d59ea6873875a2d","sha512":"42b958092e916228d11ea63d8a7c0b51272ef88a61ff51d9de989c17c2412c882d0f210331ac19e688479dee128d83ddba76f16d2cb3c8d6a5a2510d960ad2e4","ssdeep":"6144:PhraSFO/y8LFFgOaHkhbZbteK2tc5rDdIQVKYJWH9AkIvc/L6o67kJgVvnwn1K4k:49d4tc5rXYxH9AkIvc/L6Xfwn1KJJYoJ","tlshash":"a664c7a676fb023e4d36bbd9932f064ab53fdc98b1108562942ebc58141c904c6e7f7b","size":322678,"data":"","first_seen":"2025-06-27T18:03:56.146709Z","last_seen":"2026-06-20T04:09:30.160649Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./js/bootstrap.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"55a9555989e6ad9611a21dec26909800","sha1":"38012f76246c07a6240046b5c60a8b14d356d3d1","sha256":"b806e5f43ccc2623e07c989eb37558c40d8920974834f825895c7860ebdcfd57","sha512":"a9dd5786c15d16e9940a48441e79a061439922427d3329ef1d7acdf2222e46ec7fb48e998df1947d65f059c5eb6650ae2452a82a1210ae9ff32f8633d49fc552","ssdeep":"","tlshash":"65f046864b806c8381a4f8e9760ec6a221cdc00208e8289d496f3b241ce081ab9bb225","size":550,"data":"","first_seen":"2024-09-19T22:59:05.926264Z","last_seen":"2026-07-12T06:07:07.338732Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/arrow.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"1ba33a9da95541f7f92420f786e46551","sha1":"fc6c0be34a9dbfe1629df222e4c8e7abba5ead6c","sha256":"e0e68ddded05c8e56f4ec41562ed86f8f1708b5a480aa3ceda0edf2bc4e868a4","sha512":"9394339a42a5ee1459a23fd1a074f7c834b0dff49fbb2fef0c637894970127a982decc1ed5376b3b97a3ff8f07c3915c75a833842a35ba7ee10b7950b8494988","ssdeep":"96:dN5T9KkWtXP9HBfKXg9ZOLZN5vaTMpOg/OVSiZ0V5ZRwbK5sDZ7KBC:dThKkWtXPVJAg9cLZNgoOH70V76KaDlz","tlshash":"68b1211439c0ad5a516a7af8b20bd46d72e34612008cf80064af71953ef1cfd9dee7ab","size":5546,"data":"","first_seen":"2024-09-19T22:59:05.921573Z","last_seen":"2026-07-12T06:07:07.392728Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/createPopper.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"27a3d82a82468be87214c4a29d777861","sha1":"2c2999a72d8ebe600d59a4b434f4192dced027bd","sha256":"5d49f97ca60ee220f021f98f7813f5f1f07c29f22bd190be74e19f35218cf53a","sha512":"6a258d4020d41d3bc4c077c2c80738538084b3e377359c0e8375c816ffc2d61ebaa675b4e11f867024d98a40d168ec36e4fdc110dfbf965c57729e09f45915d5","ssdeep":"192:6AKsklAU78BCSWCzRuj5U/IITWMKh+ciRdx1Xi0CxD6yvm0/vISlcy2W+w:6AKsklAU78BISqSrT++ciRdxOf/ASa5w","tlshash":"0512306835e56e950a97b6b9560fd12e22b68003140cb40079ef934c1fa19bcd5ffbba","size":9716,"data":"","first_seen":"2025-03-30T07:56:37.364691Z","last_seen":"2026-07-12T06:07:07.410356Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/listScrollParents.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b193fcdc463b62e15f9f1661eccb656d","sha1":"ddec6968ab8b8559ba00b7f8ed6fee37c14dbb64","sha256":"eb631cfdf81ffd43427a3a6cbfb721839879c66457a618aed54f97e1917d5b16","sha512":"8a83e9e0dd8afdfb9edcee229da5966a9e5d2567f4b1fdc3c53530487a9b63fd7c853370618f92810ff16feae7a7db9be6cb69e1040a66d7917b44e919a5ec8a","ssdeep":"","tlshash":"0441034031a44c37d5fcafbfb607db6571fbc1011284a480589d7e987a61cfc88a97ba","size":2226,"data":"","first_seen":"2024-09-19T22:59:05.980495Z","last_seen":"2026-07-12T06:07:07.502869Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/OnhqtfiocM","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d76a6de74b0ea6f103f01dedb8ca62","sha1":"7ea29494f88e30cdba835ac492f99b9460660e32","sha256":"ef5bf9e44e34508840921a893f3c776b5f0dea7cff7f9a4c5182b8fb89b0eed6","sha512":"5cb5b69adbcf9f8b37073c79a927131bcbd160e1ad2c36942dc3079aa1783ca8551e0b3f0a4ec5f45815ad345d71299a3be8e9e463af3dbbf8f4379467247f6b","ssdeep":"","tlshash":"2d11fcee3a44b5b542930cbaa6bf671e777604ef6d0158014508f8803c305bf5336cd9","size":1000,"data":"","first_seen":"2025-04-18T12:17:39.419155Z","last_seen":"2026-02-23T16:02:24.8134Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/expandToHashMap.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"820a350e22e054793f567f3e09e574b4","sha1":"6fc52791b6d5fc645f0d53a665347e9c9e15b1c8","sha256":"323af42a46b0d14397fc5d254f138fbf7e35e0895ff6ee2e20b30925bd5f6d51","sha512":"7648f3b4c9722f04f60e0e9060a76ebda6e65fc084f009fb9d677141c84ac5bee47274ead59c117aa2ab231209daf4189f454ec802d0e9209497fa80786b60c5","ssdeep":"","tlshash":"ecf05cca74d17c531a7062b2560bcbf2701dc513284f9dc4f45436546af1834a6b641b","size":457,"data":"","first_seen":"2024-09-19T22:59:05.989167Z","last_seen":"2026-07-12T06:07:07.396732Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/isScrollParent.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"65ceaf208857c7052fa5397877805147","sha1":"b054306996503fcc24c815ba2ff866ac5a8430e5","sha256":"bc89c38903db43f7f139132b5f6d58f79ad61e6ddf7af7b468e4177ae2b21756","sha512":"b19d1df0cfb12855cf5130fd485a0c1ff838dd410598930966a2badcfb5a996c0ca709b27b848d231727be0e7c79799c3a31c5d56e5b6101854e6406a83e3e39","ssdeep":"","tlshash":"cd11bda220603c4735e41be7535bc659a3ae800997823c88b8cfb96c16e0d7c54a0d3b","size":929,"data":"","first_seen":"2024-09-19T22:59:06.003995Z","last_seen":"2026-07-12T06:07:07.30385Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getFreshSideObject.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b3ea54c4ea84fa29534282f6a2e5941d","sha1":"8ccca99f94707a1a63182d15dadfcee75920442f","sha256":"940b6bae324285561c4dbc51f807d0276db0391703eda6f109baa6f23685d230","sha512":"a5f35efdc55f9fc89727f2dec3632d2c1c06722585bf038aae253d8e012679ac2f424a501b5f45221c1bc469b05d07339677ca18ef97ccc4cb6c6e9082e09178","ssdeep":"","tlshash":"69e0a3c73890bc43577076b5120bc7e1b31e85152c2f7cc0e8503b94557142941f25e7","size":421,"data":"","first_seen":"2024-09-19T22:59:05.936711Z","last_seen":"2026-07-12T06:07:07.370557Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getHTMLElementScroll.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e3dc996d6ebf58228a8178cc680fde61","sha1":"6df285c4310fa4ca88aaa19a4951196155484745","sha256":"cb62ed786148c63c40c98ff5c480b2baadc74b57ea22cc1d82e086aa59d612df","sha512":"b8546aa4dca85b73c9e569cc930b805b24971b3f52148e18c031d9656b4c36ed7295138a32c137d977e9f765ac33ec58b3914577b524b542e907aceb23c44921","ssdeep":"","tlshash":"b6f0dccdb880bc0309fc312be00fc3e5315e882276091cc0d8697eb86270e38a6e0535","size":454,"data":"","first_seen":"2024-09-19T22:59:05.925507Z","last_seen":"2026-07-12T06:07:07.416072Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/isTableElement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"769a8eb08a301b946937be2f60b62416","sha1":"74ed1215eb7f2f7b0c3c2d485b1712eb206a5912","sha256":"7c14db87eca3efd6daf0cfdce442d459cb6e83651357b98603fb36565d92d1d6","sha512":"00a3b8dd05844da2237bd86d44b0ad30a08cfb4b3c174e62cdc9cdee86151b0cf131af26d2e2b7812929c98f02804ebdb1233969232da5976e066002bdaf560a","ssdeep":"","tlshash":"a7f0d3823aa47d035bb4f576320bc9e931cf9000149a3850d9d63da424f0c44f5f9735","size":646,"data":"","first_seen":"2024-09-19T22:59:05.904591Z","last_seen":"2026-07-12T06:07:07.266448Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/popperOffsets.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"86aa3007b49e4f2bd363d1536b787217","sha1":"9db5b589b1051bb09ec76d0be91697d17927812d","sha256":"76160af1ae389c3222bed7387b6ff95bb702e00198b871900d4dd721ef628578","sha512":"09d1288edcd5f4d3bb9deb2b74f9e1472831ea99c0a42bc3b4d29d62a64bd49a35c8eb58249437823ee73dc3d72bc789f9fb79af2ec8da0f597be9539b222a63","ssdeep":"","tlshash":"e21100146064ad8349366bd9a23be62619b34015551ef400b0de736c2f74df590be4eb","size":1087,"data":"","first_seen":"2024-09-19T22:59:06.00514Z","last_seen":"2026-07-12T06:07:07.460616Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getNodeName.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"af9b25cb0ec3e4f4a5348c0c9e6a462b","sha1":"3af057f5b3ace15a36a5a244628da472e706a0d2","sha256":"4042853eab8d107a4d347b09f606606884585b41b980b0f3c0979e0352a4d01a","sha512":"327095fa717cc8fe3b9c8d185d62b0d0a461820dddb9890055b0cf64a135ab4336e86901538ac872622a6bcf0d49ea1be29c1ef34260859d79c784f3f1124ccc","ssdeep":"","tlshash":"c5e022c7bc9479032bb4727a210bc7e9305ee411280b38c1d8e12eb890b0914b6f5a76","size":408,"data":"","first_seen":"2024-09-19T22:59:05.98757Z","last_seen":"2026-07-12T06:07:07.469653Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getViewportRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"60b0ae58c054955e7b2bd7d4a3aafd01","sha1":"736e34557313f2e413e2492e9d85eaaeab510f7e","sha256":"4b988b092a484b1a258dfb8161668c3418aef1204f38de3ae6fc791b176f49ee","sha512":"b2c30028bad6ac1ea65c2118bf7f42bb9805122a516f516c8c19d5ce72634b07af09701ab413bc560817589ef797fab39efb5a38505085d9e96b1ac3c8cd82be","ssdeep":"","tlshash":"2941ed4465a00c0b6664b8ff750bd319269a450325c9ba407ced37517ff0ce8a6b97ee","size":1937,"data":"","first_seen":"2024-09-19T22:59:06.002547Z","last_seen":"2026-07-12T06:07:07.40876Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/fdbd3c5/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e60ac167f4e85b65f04da0b36a8ac856","sha1":"a2730d3f37f32c97d9b0e5111e5f56bead3b0594","sha256":"43bb3f703b2b5fb431053db80118aed4d0696388e4dd674fd37a5e61a6210253","sha512":"13d80f0b50698cf8ce0663e5d8e6a6b6d2e6d014f598456c0d4a42ddc264a0624bbbb34f58ead1257989222f345dc3a2ff88550c74d3aa1a632be4d1eaffe838","ssdeep":"192:23Vmk/7Obf14M6bOIpUTPqZ8Bi1FLeRJK:4VH7ObdFkOIphZ8w1FC7K","tlshash":"f722d71ee7017f360fa623c3704f7b5276a480e592646cb5d89c826953b9bc97227bcc","size":10339,"data":"","first_seen":"2025-07-17T13:53:37.799869Z","last_seen":"2025-08-08T13:39:12.624842Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/flip.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5e04c8ac9b231327808da112abcce403","sha1":"849ce828b413e80141f0c6a5a369c861c2a4f408","sha256":"921a7355c334b577d42ae684d0924a15e75aad431093edda1e75ccf6f01922dd","sha512":"91228f682cbe24c07c16e608f1a6c9e9ca075154feaa7333e552e89f54fab98b4370a81777015e38076c1b524f912fa2236c02c26865b8d05b515b4cefe8d029","ssdeep":"96:AazB/ezjqDNISZj5v3hLNAd8B+zWiNXeW/9JLtKBS:AazB/eXqD+KjdhLNAKlileW7poS","tlshash":"a3e14065359a2f8a112ff5bab217912821f18643154cf8003cad33463fb0db899fb769","size":7097,"data":"","first_seen":"2025-03-30T07:56:37.400014Z","last_seen":"2026-07-12T06:07:07.403766Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getMainAxisFromPlacement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"659066e4435de54a95611a6c0c779b0b","sha1":"31815aeb46550b4796048afdfdf7f538c7102c20","sha256":"f09f48800c7497a42c80dfb512239c3ef29808f0da005dd4af9937acfa849ecf","sha512":"b55172e86ea05dd8d50af7f17634e312a9ab33ac860bdee2d1c2670fae271cdca724c9ba9d4450fa56fde3b283513ab9c0c9234cb3d195f068e9795a8cb6ae10","ssdeep":"","tlshash":"4af05cc538d8bd5307f9a378b207cbe032fe9640642e7a808850377c74f1c2491f6a21","size":443,"data":"","first_seen":"2024-09-19T22:59:05.967556Z","last_seen":"2026-07-12T06:07:07.26695Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/contains.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d67fe9f252d46218caf6315183d37db7","sha1":"0b03103442c088c93cd52a8375f537af744b26d0","sha256":"03856bcfa19d742937695ef7091b23d3ac95d2f7685d9f6552fd1ec7ab6592a9","sha512":"6a741c65f9ca1bb26402e059ab53b56b05537a1cd9597b68c69457f57ef54a88ae4f14f355b997c3e449c64fd3f586bb751cd407615c6bc87b896c910c743912","ssdeep":"","tlshash":"2f2137447b916d377e646578152fcad6720ec002a808dca4b8df26c46fd04a441eb6f7","size":1142,"data":"","first_seen":"2024-09-19T22:59:05.98626Z","last_seen":"2026-07-12T06:07:07.414832Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/userAgent.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"72b157712a9ca8ae448c8971cc0dc7d0","sha1":"6c4c316dc8716349bae2327c3a0c63ff8cdf00dd","sha256":"be6cfc568f19498855c0e9438921791f15f025b18d347eb50b5f6ffb5acbbedc","sha512":"c57491b5158162628630f8297ecafaf2c1cdbf93a7c31503cd51943a518e65a55cf4f7e871933c8ad61d1a6a74c4abead01477fd1c3e1ed49aaf7dfa9a818865","ssdeep":"","tlshash":"d2f0acae34e5780715b1b5b411cbc6e0202d9602a16b9cc1fc992aa8bdb047551f7679","size":589,"data":"","first_seen":"2024-09-19T22:59:05.998216Z","last_seen":"2026-07-12T06:07:07.470302Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/js/toast.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82082f0253fac00f65e4d3192ddd687a","sha1":"57d828bcdff0c56e7662e37fe9c05896c76ed8ed","sha256":"214e95fd2e4983ed796c5e2a05f5fd5714befba3ab59db2c233284708b2d104d","sha512":"6a067e5a9ec26f116ae6be81d930a47f3c05c1fd03508fd4f5de51d2f0661e78f4f1a7b284b14dfb97ff1bf302d91d0f85fa6a0b53c8bdd71aedb95cba963a60","ssdeep":"","tlshash":"624168b95db70c8991dbc0077bed7858741091ab0600a656f0fe483a6fddc9072cabf5","size":2008,"data":"","first_seen":"2024-08-20T10:07:04.102387Z","last_seen":"2026-05-20T17:38:06.693202Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/within.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"a16630fc75168199c1aead838172f38e","sha1":"40cfa74518d1b35fbe64293ca37ec0ef4e3811f5","sha256":"9265eca738fe480c4ed1d2a627f31296d1ac4ca0d3ecd6a94768560110502bc4","sha512":"fcdc453c39f3beeb50b1f2d99867a7897ce6275b690a80e55e9dbd4660cd616a6e833c7b365ad6fe43d6acd0789a9c12c71d0ef0c956cbe37bce2dd5e9e6506d","ssdeep":"","tlshash":"3901ce806780bc43d3fbb7f4650bc5c2387e80107c5edcc488aa226865f08f455b917e","size":803,"data":"","first_seen":"2024-09-19T22:59:05.984415Z","last_seen":"2026-07-12T06:07:07.395587Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/dist/umd/popper.min.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"800c170bc681c47796635446c390e179","sha1":"4c74fd153a46e149e803ab6955925abfcc3b625d","sha256":"fd7ea65dadd0588fafe867710cd52e06f311e5d4a2293af68d0f002fef8d1d7b","sha512":"112a6d4ba2b06054e3768ca04b7b170bba8270340e60b8228570d06bb4915acff1c9b8ca2b74950e857e53a9acfd832d9da214d1cf6307274d90361b13bbc9c0","ssdeep":"384:PIjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZsE:Hxmemg3igs69TYf/pd1Nn1uwXSg3MI/S","tlshash":"9792d7dc3aa4f0e5167b52bac07f011fb2379524218ee500a155d6c92c34ebba23bd3e","size":20035,"data":"","first_seen":"2024-08-19T15:42:02.544795Z","last_seen":"2026-07-12T06:07:07.39128Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@form-validation/core/lib/cjs/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"48545c3946c6f6a90ba8746359318a46","sha1":"388f57cb1e8d193a284bcab92abb6d420a6005ce","sha256":"75d2bd711ce349f5a04a80c0f09b70316257c98ec8583d3065956460a5839f27","sha512":"e6e4aa18d05a38f63ef2b5816e464957e3539a463c4b463e0f3aa87bcdb979a120e4004e2ba67f7e8d42352640d0d33860e247e09c4c87cefcc66bf6d20c5b2c","ssdeep":"768:opFLU6u8+U8looL6vO/hec/WVqhHY/2TRaNsU/3BqCqxaqWNqv/MMKq6mN0qSqwP:ofU6u8+U8loTO/hec/WVqh4/2TRaN1/1","tlshash":"d623238939e724214e1774fd1b8fd486b7f8540b4809c844becda1e15f6ca68a3f5ee8","size":47470,"data":"","first_seen":"2025-07-28T03:34:54.652191Z","last_seen":"2026-06-20T02:25:17.159415Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getDocumentRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"599d4589d4ac5aabe8312b96c8982bce","sha1":"2457d043563c497f06f562eee1167ab27307c808","sha256":"51d66887990fcef2cf2e62f8f17cf63795fd9fbb0d491dd4b245f210070384e9","sha512":"40f42eeb032001373dae948bdbb96fe791cc18dc8255703b8657215ca64a93aeadecd3c27bd406a3c40af35071fa9bd5746104827f8a0bf1a4bc00cbeaa19c60","ssdeep":"","tlshash":"0751111026a11c1b61a8aaedba17c31d21ab420127ce7c4038edb9643db0cf859a5be7","size":2561,"data":"","first_seen":"2024-09-19T22:59:05.945357Z","last_seen":"2026-07-12T06:07:07.267777Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@algolia/autocomplete-js/dist/esm/elements/Input.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"07300f9a4e05e235a239b824121de5a0","sha1":"9b24cc75ad1943099c2e632614271ef862ee5803","sha256":"7cd5c5a80dcb9c693c82cf5f0d1bb25fb2a5915371f11d72effc45e8069f7f56","sha512":"af9f57ee5817772fd968c98dd40d59fc7a37af3bc8547eeb170a5b465652f2a3a913657547ac74ab65641d68674378c4eb544cde657cb579f9e0f09037441d07","ssdeep":"96:teJ26V9fmlvhtn7qKW3C6AEgjZXIG0aUkwbpibCq9xw+k:tM26nOB7vW3C6tg94D8wNifXw+k","tlshash":"5ea16347b550796305d6a076788fd085f56c82200438b048ff68eae09fb0d6e4bbced7","size":4642,"data":"","first_seen":"2025-07-28T03:34:54.653973Z","last_seen":"2026-07-12T06:07:07.319376Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getWindow.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9465397084763ea8a04f81924c3c0d27","sha1":"3689caa3d73a1cf4c673a72ddeec6e8becc51e96","sha256":"4542210dfb7be0a5dbf4d4b2249c728ad8716c2b5d89fcde3556ad521dc49a75","sha512":"9404b31324b84aefd6f83ae1849dd3e752f6a11642d1f18731205efaf00f99ef503b168a3007ba61be24dd4a0386a3c453f67bf655b42cd3997c8ae51dfd2fa0","ssdeep":"","tlshash":"b7f0c0c578f9f80316b02135322bc3d1741f8522260db9c2b4c91aa8fab0ea7c5f1de2","size":563,"data":"","first_seen":"2024-09-19T22:59:06.006864Z","last_seen":"2026-07-12T06:07:07.407328Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/eventListeners.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"329263279ecea4888aa417d3d7e9926d","sha1":"521da1db695673a549a865701f1658b0c5beae24","sha256":"8ad23bcdec98b511787ec100a2a4a7377592bde626aa960cf65ad6209fd2c148","sha512":"d4f941e2b3e4341975974fa0b6d54d114c606618bc36db46fccbc819371fd614f457d620f7cb65964b8ff551eeca9abaa8e1b5f9f3cb14ba901e59c033292d31","ssdeep":"","tlshash":"7f31031c16701d1664feb6fdf60fab05327b810380045940f8ad8be02f69bb994bb75b","size":1719,"data":"","first_seen":"2024-09-19T22:59:05.922863Z","last_seen":"2026-07-12T06:07:07.301114Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/js/helpers.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b378b3d398a23a351692eee6c495f087","sha1":"7773526ad97aaaf25d9704f66798f500c201273c","sha256":"9cc42458207f84f16a27bb87f5e15eb6e8d7eb9b4e9413727fdcf600e24845c0","sha512":"7cb691d095d33ec967448f5627652bd709fa8532996afcc103e9610e50b996c79f630c4f160ef9686aca0feb6d3998de4afb89837abdd61f7dfdb3309f66701e","ssdeep":"768:rCFCIHOmBKcM92T+/5gl10c7jcwC5BaNyf53o:KT+/iQ55BCj","tlshash":"5c23951735543cb2895b7bba5bfea2c5713072040126c111bc1eb9df1b6c92a83a6efd","size":48058,"data":"","first_seen":"2025-06-27T18:03:56.131795Z","last_seen":"2026-07-12T06:07:07.252635Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getCompositeRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"66223654cdcb069f4a3cdc174a35cf14","sha1":"ce65742cba2d67daa1bf4718bafc9f60c271c073","sha256":"ae593c6fdaa24212c005c035cd10af88e8f7f75ccc657181e62d829240908ca7","sha512":"f16326fc229fe579efba81ad520ebb83391790d78eaf6ece78dec198bfe7a2cfa9b6344b3fcc4b7d88953489460611b28ddb5aa79036dee85487b64f9806bbf8","ssdeep":"","tlshash":"3c81332036901c1b9599febe760bd11931bb8101158fb80078ed69982fb1cfc6de7776","size":4052,"data":"","first_seen":"2024-09-19T22:59:05.908117Z","last_seen":"2026-07-12T06:07:07.426378Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/js/config.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db1d964cda6bfd21994087355069ecf7","sha1":"6c21184cb63432493e7d6a2fe589701184116805","sha256":"48b1a97092fe83434438dcb93ad7165612f27ded1bb9fe5cec8052e2ab6bd936","sha512":"67cbcc652f1379c791927829d84d5f5bcb7cedfda12c1fb7e2bd5017019a4ae87133614d9f5e9cfb52345cae78f4918370af099febbdc7e7791c324dc0054395","ssdeep":"96:iVvvVOjw8Z0yI2JkmaFrQABuGnH2QIOMGb3IZsMCYlzVzaFKzSbfgduCnTK:UVpFyZsXFPfgduCm","tlshash":"1b91be207d22667209b6d078a70fb30de9612736cb16352674cd654abead20f927ffc4","size":4225,"data":"","first_seen":"2025-07-28T03:34:54.561245Z","last_seen":"2026-06-17T16:46:34.073419Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getParentNode.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"005d4c8d399f120f756216b221b4fb0c","sha1":"227bdbdada3d20eb01e2a43570dddfd9845979bc","sha256":"c064af0da3b39c6296723e420403406281c834f525b1efb0d3b9b20f9e794266","sha512":"4a987761a2831f39fa4cadde2cb0fa5af167330a16a37df48fbb1a75cc9f76d65376708ada6a04253240f17a25af3edec9e2b923b3cd6c24c83af2ad1beeba18","ssdeep":"","tlshash":"aa31144132901d277d6ca8fd3207c5ab35afc00564893440b8df29945ab0dd865f1a7b","size":1609,"data":"","first_seen":"2024-09-19T22:59:05.957516Z","last_seen":"2026-07-12T06:07:07.500769Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1752755332","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b024ff3f9e71b0f65820a5debd574d04","sha1":"c394afb97e0b4503ab8e8b99a149f90cef647f26","sha256":"163a21ec4d58947a0c4abc01bf9160b4fa9054d16a0d451e9b704820a4ed722d","sha512":"e45502ed99a19c6c5943f21a56fd9df3f889b697b8dc49b0fb6efaa6a30c84060c82af660c11ec19e46797f383e3772b8a3e76a9beca244f0685689fbd73dd74","ssdeep":"24576:P6Ic40rs4MhRjVpLKy33+w1eDG2EZWtqFQemK0m6GuUpA23GoixlPs:yIHhRj3LKy33+ieDPEUqmemK0m6GuUp1","tlshash":"e7354ac9b1d0f46502d355e6a03b2009f23a2c5e7809b064f7bccddbea5659e6263f39","size":1145486,"data":"","first_seen":"2025-07-22T14:13:08.738433Z","last_seen":"2025-08-03T21:41:53.92818Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/computeOffsets.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7b31c7ac53363be63e321996d8c96f26","sha1":"aa2a91b2a822b49c4eb4a4963175fc12e266e8f8","sha256":"e189791cb577cce9a4ebfae4b208ce97c840c07780d87ab60ebb0d938b2dde69","sha512":"ebc93ea7f8eb9b6beeb05cbf37d7e9a85ab22fa89cd0f6a2fb9386dfec5c5ad83e076a435e706f43d68ae3622f37bfe8ae24781285a2ee93690ef23da511ef18","ssdeep":"","tlshash":"f451f25229d66d87912de97e2227e36e20735613004cfc0139ac72156fb0df569e3aba","size":2912,"data":"","first_seen":"2024-09-19T22:59:05.937952Z","last_seen":"2026-07-12T06:07:07.363961Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getVariation.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f1b8b3f700ef4c8d308009f1171a3291","sha1":"a6db2cb50a2f91fb8bc16076dc86b014085d8b6d","sha256":"ba1d85396900ca49fbc62ad3680dea8678781b23944a593a2b5ed046bff0d432","sha512":"fc616eb99fb552735fc077e997d3c164c3a2df154d29195f8af51579fe2cb3a9d4759cb30f66e9fc4ff05568634cee3d9ec58e5d9d8145054123cb69b0bcae98","ssdeep":"","tlshash":"f1e068ca38d57c4316b97236110bc7f1313ec600381a79c0cca13ba990b0824c2f2526","size":377,"data":"","first_seen":"2024-09-19T22:59:05.969444Z","last_seen":"2026-07-12T06:07:07.322545Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/offset.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"255340a57fed5825213855646a31f7c5","sha1":"85490953275f751ab3e86b515c9d904dac50e836","sha256":"3318d81d2ceab27b03232e0d87337793c3be664ddad2cf44196c6bfd8bc6a9be","sha512":"5090837edb4a908bbc964ff3a3e7b6ed3e353e5b90049bd9cafa91cdb196ec522c23d44c347992540871ecf0cb3b58edf12042930377914d3beda1fc415bf6d4","ssdeep":"","tlshash":"dd511d2422e02ecb966de5e8610aeab232b74511114cfd0071ac21847f74ebdadff26d","size":2470,"data":"","first_seen":"2024-09-19T22:59:05.913922Z","last_seen":"2026-07-12T06:07:07.314257Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/getOppositeVariationPlacement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"085ecbced17e1212dcd297b6f640233d","sha1":"5a6263a5251d517f51a74bac438aa85328fd5616","sha256":"22703634af3fad354efb798c353ff31d724b5f08da062eb5bf87e1c6b7e76350","sha512":"680d8e2f8fe015ebde30dca894f2f589d52be4852804e460064ca31f37d85a075138c44fa7fdf58822ceb1bd20d0603ebda2500d98d78ffceb72e62bedf0b88e","ssdeep":"","tlshash":"95f0c0c538d828038afd33762106c79170bec44059cdf8c0dc95275065ba83482f3a14","size":535,"data":"","first_seen":"2024-09-19T22:59:05.91322Z","last_seen":"2026-07-12T06:07:07.408143Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/detectOverflow.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"1a309a3d6fc6b1059790d2aa3b24af4c","sha1":"fec98be9712d25eed0b48b2e308797dc2e821b88","sha256":"8bb35c26aaa1078bef968f3efd00e3d0cd2c4563439705c007c56f03d39c1ac1","sha512":"4907466516a4affaea2c6af13a7875f6cf906e550e73d0bb95dcb9ca78fe193d4814b36a251a6d9d635b5171cd9b1e0b434543a499552739afb7c03ce50e3344","ssdeep":"96:mXMIo8RmS6IsmhJZth+MFM6f2UvokqmcJTbqd7P+/wVd3r2CQj:m8Io8RmS6IsmhJZnr1cJTmRdIj","tlshash":"53c1c43036959d9f5179fafef217c01d73924612508db40078ae63981af0ce995ff2a7","size":5944,"data":"","first_seen":"2024-09-19T22:59:05.994141Z","last_seen":"2026-07-12T06:07:07.425271Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@form-validation/core/lib/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7b50da0e1bef7980b59406c7239ad3f4","sha1":"465c1cad442707fc644fb5ea9c7048054b3a158f","sha256":"5d113f93eefbbc9fd2ff3dae1a2bc63a5cbb072cb85dfd6d815e9d04075d017d","sha512":"34c18d68d9f9420a459a25f5d8bc4984783b7a15f0201e9d238af2641ccbaf69623efa3cd95eb5bdbee725de839ab843ecb369bffb9af0651b5502ab4a246577","ssdeep":"","tlshash":"3de068d1a4b826436fea21f6a0d2e62a61ff8290d0d14480e80d86d9cd99aa013ee529","size":379,"data":"","first_seen":"2025-07-28T03:34:54.667595Z","last_seen":"2026-06-20T02:25:17.156391Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/enums.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"809566aa47cb29ade8a7fdd4b1a463b7","sha1":"b0a98b4aca64b10f4c30b08ce76b7880869a19ee","sha256":"751362f2a3eb2574cba51886fca32ab86a4bd01b7d926ce451a93adc50207030","sha512":"ce28c933428413d160e61199384fbb8a5e45c51a4b65bc9e9e8b8db4cb7e5999893b1893108c0368e4728f0bf7108969538090bec625508937645db0516d9147","ssdeep":"","tlshash":"a9615b867c2db55387c93239a55fc2c7a27f40b43a6d6cc480ceb2686173c5e44b26ee","size":3306,"data":"","first_seen":"2024-09-19T22:59:05.948924Z","last_seen":"2026-07-12T06:07:07.313533Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getBoundingClientRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"ea93eb418cba3ff8b70c4b8efaf515cc","sha1":"58f809092ff81e465f3db4c93858f1c9a4665e8d","sha256":"7c59c70968d3610c235706f49c5733c94cc054ec548d2789af349ce8c23520be","sha512":"5c6a726dcaf3afa61e036bf796da8aa087443a678a840c81de7c0a4e4cee37a3a81c00bfa864bddf99c8be64f8236f7021e9977b64e446a064f7557c5b94a960","ssdeep":"","tlshash":"c751e11467652c1b9111f9bb550fd20d329a8101165bb94018fda2286df08faa6ff7fb","size":2491,"data":"","first_seen":"2024-09-19T22:59:05.917464Z","last_seen":"2026-07-12T06:07:07.424651Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/math.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c0d70dc2d7d07f06127d11f6924cfd15","sha1":"869c66d4f646fffddb6d7f8b6f3e9170569cd57b","sha256":"b582bf479a0a2cf17bc3e2f7499a9ce9520d7aaf855c99c40bf6e069b4235928","sha512":"faa3cb3af4c34c63e893f2ddda5db78f5cb4ce6d60dd71a1baa0d6a15854eb73d118804cb7e4996e669f9cd8d6d0b934bfead11c3ce9613b760ec569746bed15","ssdeep":"","tlshash":"1ef0978baa94780367e633b1420fc3d320afd0303d4b2dc9844d367890f2c8945ba2ab","size":491,"data":"","first_seen":"2024-09-19T22:59:05.911999Z","last_seen":"2026-07-12T06:07:07.366351Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/computeStyles.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8301d3268edc9fae5edd42a233298818","sha1":"1863a21747940c60cd100b8097920853bc32d24d","sha256":"6fed55ba41a7fa4735eab8d8d82256191e6ea45460a72fefaa8a11db82256015","sha512":"f8b94e6dc6deb73257b6f0bcd4f52588e36ff7b79a07a9670c91bbfad0424830606e7f6b2537055839ce6788063fadfb59a0e40af7a74bd6ace397e9543b6180","ssdeep":"192:6QbRlz1z4RDXx4+6TWG3W+mo42nkSSVnNF0gSnzmvDNGD/YDhsUcTWRqTVYYWU35:6QbRlz1z44+6TRmcML8DGcTJ40","tlshash":"a3f1655428e02d5b5127baf9722b901931b34612215df90039ed62a03fa5cecdeff7a7","size":8126,"data":"","first_seen":"2024-09-19T22:59:05.99115Z","last_seen":"2026-07-12T06:07:07.348323Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/hide.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d11c29aee0c603cdb2d6825e3e3b6dd3","sha1":"718f10aad488708313edcf97fdeb01923f04a9f9","sha256":"54e03fd1575a66957b9b129d95b841c0329f91ac79d51ea3ccbd7305c468b1f3","sha512":"e14a620ace6fcddbe0bd1517a8efdf2ff1a5a8d1116307340d2454677cc7debe0c291152555f2ddb5641f2f88edeaa8b7e4fd2b93e6a86f2b76b46909f8d9f02","ssdeep":"","tlshash":"5b51567708a17c8616379bb9012bc21f7397002225cdbd0035ed66a82ae4ce8a56f4f7","size":2633,"data":"","first_seen":"2024-11-20T11:09:10.826316Z","last_seen":"2026-07-12T06:07:07.339334Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getNodeScroll.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"15638ed825e4c36b7675de5e5f7fff40","sha1":"c6c35546fac7208fa296771bf0de5cc1eaa08ea5","sha256":"c1fc613b38916918b19526ea6a7ff1935f8a6f258563052e7cefd6ca71900489","sha512":"f2f3eda2109b39ca875bde38bc1cdade15ac36aa7b31254c8cd28288dc7f82c2d01476189a32cc0a48fb65975dfec0cd417b239f388854cfd43c6133d336f4e8","ssdeep":"","tlshash":"d321bc5063a05c0b95fcbcf97107c766308f810199cc6c405cea3a54afa28fd99e677a","size":1433,"data":"","first_seen":"2024-09-19T22:59:05.933717Z","last_seen":"2026-07-12T06:07:07.486257Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/modifiers/applyStyles.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f66179b319d49e0fdc0a137329de7edd","sha1":"c26862bb1c9523317272e4fcd64ae63109616978","sha256":"da1c690bd9ba7457b71fe254703c1c4ce3264042a0db9635b8339528c0fe16b7","sha512":"7c60dc94298caca7aa767317b4f040e73ec2301e4c350b0cac472f6eded40b489fd8c943513bf8f5eff20e6a254378f83ae55988aef7cff3c64c54ca2bec4f4f","ssdeep":"","tlshash":"fa61321477e12e951c6bb4a8511fc02ab0eb411e0669f4107cfe82762f6495c25eeafb","size":3227,"data":"","first_seen":"2024-09-19T22:59:05.909436Z","last_seen":"2026-07-12T06:07:07.469004Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/dom-utils/getClippingRect.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"fd4e0f0a354a9f27a3e549229e0e25b5","sha1":"788f1de3d7834bf4d44113d3a41e2e5e0e2244fb","sha256":"ac7dec1b4c7fc50d8a93f8c27ffde10ee9e828c5e3d6912498fa5c6cf5e9f0ac","sha512":"874c95cdd1969e08d2881e7bbce4f7f3f6a1e2fb4eeeeb92869abb164cc44ca3f4d3e212b31cf2f6f26e5ae0d711741c393ff5e711ea4bb6ec53fc77daa63096","ssdeep":"96:5F6PT4ajdrKYedmem2GkTiZYeiXadbOJDuCr3vFaIPe3:5FYT4ajdxe/m2GkOsXad6RPTFaGe3","tlshash":"cdd1f02436b16c2fd655effe750bc05f31ab8101608e781028ad769c1db1ce85afa76b","size":6619,"data":"","first_seen":"2024-09-19T22:59:05.905599Z","last_seen":"2026-07-12T06:07:07.484162Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/computeAutoPlacement.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7e35056bda65bfc1a56ee9be307aaebb","sha1":"e0372d28e8d8b6b6b0a9586fdda7c1d6f778518f","sha256":"dd15fff4e9a4f36ea3735a22c8bf6ab386631ffa318283d72176726e0897abbd","sha512":"08320dadb5b9d5752083462bdb1d11db1c9964a0b6565b42ee7281eb8b97749dda5fb83d5868db088e4cf79a8baa239182cbcda4312ae128babef2d791aaf025","ssdeep":"","tlshash":"6951dfa936946f8b517fe5fa601bc42a22758342248cf9447c9e33983fb1c74c9e7628","size":2796,"data":"","first_seen":"2024-09-19T22:59:05.898499Z","last_seen":"2026-07-12T06:07:07.371251Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://Vuexy/./node_modules/@popperjs/core/lib/utils/orderModifiers.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0266b269757891c7da89c7fd42faf6cc","sha1":"534e5f879b96c8579e3750668500667e8b203428","sha256":"e6b2a10e487b2b75d3ed9e4b0a045d749852f2315571d04faa89ef5cf016151c","sha512":"3ec922080e5df62ceb042641c751da8564976f696a1fa3f5559f9b66ba99027fef409a7c746e7e665137b827661ad684e58c99e0790e557de84a9641765b9477","ssdeep":"","tlshash":"523197a524f838c21227b2f4021bca1eb056d401200cfe00bbcde29c6f6156895ebdb8","size":1682,"data":"","first_seen":"2024-09-19T22:59:05.899875Z","last_seen":"2026-07-12T06:07:07.37199Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"946cb21e0b00e3845496d8cf96aad7c2","sha1":"9b6feb2689c310e6a99f45edc431c3624f295302","sha256":"f6ca5947e1ec923f0c6bdf566dbd70a408cf56fe88e6524ceee6727910fe18bb","sha512":"e46e4aa9a954dda08ff5ef255e5b9ef74ea306d06065da0c14c6f2d2b6e4a451a468d1700f1d6abda21e64661f24784b201fa515cf4a2035aadc65397663c280","ssdeep":"24576:6Kuk4oTUIcb7KulqgrN9pRvILkYgcBulmejdn8J5xspMOmDbQ:ruJb2ulqgrN9pBILRduUejdn8J5xspM2","tlshash":"52354ac4b1d1f8a907e355e9943b2005f23a2c1a7409f464fabcccc6aa5658e6277f3d","size":1118181,"data":"","first_seen":"2025-07-22T14:13:08.781493Z","last_seen":"2025-08-04T15:30:02.143441Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/fonts/iconify-icons.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/fonts/iconify-icons.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 306259\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]}],"data":{"size":2627001,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (897)","md5":"1e57b890ec077ecdf1c80094074f0b65","sha1":"744eded48fff4948f91618010a0d512360347ad1","sha256":"3111301e1125f5578d6b15a18c854cbd219ffacd6294f4e0ba1e0d0f64fa95d5","sha512":"ecad6eaa997547107d9a6a04049cbd6bfa5362dc1fed912fe312ae3aef5b60654ce438f9c85ab2e3da8d2e90b6c1dbf563d6aac3affe2c99a18bbbbd081ff3bd","ssdeep":"3072:+bLd6h/4HoPtcjklY2cI7JDDbyoAQzv/+nuwg5prE+rIBcPpQPTwok:U22jCY2cIdyl8vWnuvrE+rTpQP3k","tlshash":"1625f1e8bb9d2dac541b8a26db3bbd15431ef2a4331811614d7e07385206317ffab978","first_seen":"2025-07-28T03:34:54.556029Z","last_seen":"2026-07-12T06:07:07.244888Z","times_seen":12,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/js/config.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/js/config.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1220\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"db1d964cda6bfd21994087355069ecf7","sha1":"6c21184cb63432493e7d6a2fe589701184116805","sha256":"48b1a97092fe83434438dcb93ad7165612f27ded1bb9fe5cec8052e2ab6bd936","sha512":"67cbcc652f1379c791927829d84d5f5bcb7cedfda12c1fb7e2bd5017019a4ae87133614d9f5e9cfb52345cae78f4918370af099febbdc7e7791c324dc0054395","ssdeep":"96:iVvvVOjw8Z0yI2JkmaFrQABuGnH2QIOMGb3IZsMCYlzVzaFKzSbfgduCnTK:UVpFyZsXFPfgduCm","tlshash":"1b91be207d22667209b6d078a70fb30de9612736cb16352674cd654abead20f927ffc4","first_seen":"2025-07-28T03:34:54.561245Z","last_seen":"2026-06-17T16:46:34.073419Z","times_seen":16,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/@form-validation/bootstrap5.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/@form-validation/bootstrap5.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14409\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86254,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"730c5051b8f2b2f06bb33bc540400fde","sha1":"f5d54dcbe368989ca86e79b5f110498adfde710c","sha256":"4b6315f5f7adcaa7472a82227dada758824590515d4338a74f045abace5d1f76","sha512":"e2ab5e329b75c4c640796d1b7eb3f47a1cf9838c1e096db2acd133ff1dce86c4bb4ce35226eec14977df3da4c3dbe39f5e7ce38a09dc47c885ed8e5bd25bd063","ssdeep":"1536:BshUx8kAwxQnS/jew/6DqnK/qVDI79/L7qyqGqMPqH/kqKqSqOqvqFqYj9p/ni1k:KhqOZhKhiiTnAOha","tlshash":"7983874b399528318e073efa2bdbd0ca72e871088431c554bd9cb1d757ada9053e9bbc","first_seen":"2025-07-28T03:34:54.562303Z","last_seen":"2026-06-18T11:13:21.918666Z","times_seen":14,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1752755332","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1752755332 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 268894\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"687f755f-41a5e\"\r\nlast-modified: Tue, 22 Jul 2025 11:26:23 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-28T01:21:06+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":1145486,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"e1c0d84ffb11010dcd07704e03dcd80d","sha1":"3ebd5a1793627884571f22effd608abb70439cea","sha256":"7efe37c9ec8a6094856cfbc515ed0b9ba88295254d4fc0a78e52d2e6e6e6e299","sha512":"d58934760bce123285bd976531dcc6ea18a560205362c06b5f7202dcb57cec3bf77afb35627a52cc70eb948c978084f299b7f985823f9eda7813cebf89f16717","ssdeep":"24576:P6Ic40rs4MhRjVpLKy33+w1eDG2EZWtqFQemK0m6GuUpA23GC:yIHhRj3LKy33+ieDPEUqmemK0m6GuUph","tlshash":"d4254ac5b1d0f46502d355eaa43b2009f23a2c5e7809b064f7bccddbea5659e2263f39","first_seen":"2025-07-27T15:51:01.607323Z","last_seen":"2025-08-04T15:30:02.140077Z","times_seen":150,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/login.html","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-28T03:34:18.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /login.html HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: laravel_session=eyJpdiI6Ik9pRWlSdlZsMDk1ODllTFRHcDBJdnc9PSIsInZhbHVlIjoiR0d3bW5SQlc4blZEc2JXY0ZZaDlHRzRDR2IzVzRWa3ZzV1RUWEFuT1dQc251bmd6bmJmcUQ2TTBDSks3Q2ZzY3A4NjBmanhKekN0NW9ITWphRlFCaGlXdDNZMXlQN0JEUDVLVEQ1K1R4T0ZXeHVaVVVVTDcveHFsbUN1eU5FcGkiLCJtYWMiOiJkNjcxZDA1YzdmNTZiZDU0OGRlNTc5NjE5MDQwNmRhZjE4ZWY2MmM5MjAwOWNmMWEyMjE4ZjhkY2QxMjUyZDFiIn0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; expires=Mon, 28-Jul-2025 05:34:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\nerWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D; expires=Mon, 28-Jul-2025 05:34:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 28 Jul 2025 03:34:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"p5.js","description":"p5.js is a JavaScript library for creative coding, with a focus on making coding accessible and inclusive for artists, designers, educators, beginners, and anyone else.","website":"https://p5js.org","common_platform_enumeration":"","icon":"p5.js.svg","categories":["JavaScript libraries"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}],"data":{"size":8486,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f22003849369fc7af7604eb4dbcb77a9","sha1":"62607452c37a41fc1a68e516e5cdcb74cf8f7566","sha256":"c5c7c919da1a9d71b0a54d9f0df64bb9c06ff2d1c2a689958107671dff9f4872","sha512":"801161805c0e370a858879940e28ca6966c3a1b2c630b4d27bc9041fc2962276a1db2e7dd9ba7b415faf286e71b09a8bf9a0296a595440464b8f8adde3ccc42d","ssdeep":"96:qwf2/usr3i4NO8qOoHjMxLicv/Y3nouRs8KTqTiJUL6RXZnVu:qHHrxLii/yPlKTquJ46RXZVu","tlshash":"2502c76308e4353ba51299ddbae4f60cec43f50f9db540b9b8fc19686fc8ed0a997904","first_seen":"2025-07-28T03:34:54.56412Z","last_seen":"2025-07-28T03:34:54.56412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/@form-validation/auto-focus.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/@form-validation/auto-focus.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2356,"data":"{\"events\":[{\"schema_id\":\"storefront_customer_tracking/4.22\",\"payload\":{\"api_client_id\":580111,\"event_id\":\"sh-4f188b9e-CD0E-4586-B7AB-E617528C7A4F\",\"referrer\":\"\",\"canonical_url\":\"https://www.tritanbp.co.uk/\",\"event_name\":\"page_rendered\",\"shop_id\":94206427400,\"facebook_capi_enabled\":false,\"event_time\":1753673656872,\"event_source_url\":\"https://www.tritanbp.co.uk/\",\"unique_token\":\"6b5a2e5b-da1e-410f-9d05-4141c45d5a37\",\"page_id\":\"4f1887bd-1A5B-44A4-05C0-656ED762E8EE\",\"source\":\"trekkie-storefront-renderer\",\"ccpa_enforced\":false,\"gdpr_enforced\":false,\"gdpr_enforced_as_string\":\"false\",\"navigation_type\":\"navigate\",\"navigation_api\":\"PerformanceNavigationTiming\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"is_persistent_cookie\":true,\"deprecated_visit_token\":\"2dfe49b7-94d7-48af-b676-3e4ccd0b5048\",\"session_id\":\"sh-4f1888e0-88C0-4D4C-D760-CB14508D964A\",\"asset_version_id\":\"e4c75a3e7743d4afe93b8548d333a7bb77989ac7\",\"shopify_emitted\":true,\"analytics_allowed\":true,\"marketing_allowed\":true,\"sale_of_data_allowed\":true,\"preferences_allowed\":true,\"event_metadata_id\":\"4f44b8d1-64cb-4cf1-b54b-20c700dc21d1\",\"emitted_to_v5\":true},\"metadata\":{\"event_created_at_ms\":1753673656874}},{\"schema_id\":\"storefront_customer_tracking/5.1\",\"payload\":{\"api_client_id\":580111,\"event_id\":\"sh-4f188b9e-CD0E-4586-B7AB-E617528C7A4F\",\"referrer\":\"\",\"canonical_url\":\"https://www.tritanbp.co.uk/\",\"event_name\":\"page_rendered\",\"shop_id\":94206427400,\"facebook_capi_enabled\":false,\"event_time\":1753673656872,\"event_source_url\":\"https://www.tritanbp.co.uk/\",\"unique_token\":\"6b5a2e5b-da1e-410f-9d05-4141c45d5a37\",\"page_id\":\"4f1887bd-1A5B-44A4-05C0-656ED762E8EE\",\"source\":\"trekkie-storefront-renderer\",\"navigation_type\":\"navigate\",\"navigation_api\":\"PerformanceNavigationTiming\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"deprecated_visit_token\":\"2dfe49b7-94d7-48af-b676-3e4ccd0b5048\",\"session_id\":\"sh-4f1888e0-88C0-4D4C-D760-CB14508D964A\",\"asset_version_id\":\"e4c75a3e7743d4afe93b8548d333a7bb77989ac7\",\"shopify_emitted\":true,\"analytics_allowed\":true,\"marketing_allowed\":true,\"sale_of_data_allowed\":true,\"preferences_allowed\":true,\"event_metadata_id\":\"4f44b8d1-64cb-4cf1-b54b-20c700dc21d1\"},\"metadata\":{\"event_created_at_ms\":1753673656874}}],\"metadata\":{\"event_sent_at_ms\":1753673656874}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11457\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (62795), with no line terminators","md5":"923b1c9a4c83df99d23095054f88c17b","sha1":"96cc517ba46b9b46714a43c51f63cd4759cc255b","sha256":"7f057abd1c6fe4f0d94b47e2e4768c510181871277a7b62b819364fcc43a424a","sha512":"fedfb26e3de09e3c57124c8c80a0bbd73d93f88da83f959579b703a8bc229d50b0d2a86008431719f4dc2c77221c54fa51ed219e211dfcabef3d77479ec459af","ssdeep":"1536:BshUx8kAwxQnS/jew/6DqnK/qVDI79/L7qyqGqMPqH/kqKqSqOqvqFqYj9p/ni14:KhqOvFvhV","tlshash":"6053638a389528318f077efa5bdbd4c776e831084431c044be5cb1d757ada9493e9abc","first_seen":"2025-07-28T03:34:54.565225Z","last_seen":"2026-06-18T11:13:21.920311Z","times_seen":13,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/@form-validation/form-validation.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/@form-validation/form-validation.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 448\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"81c218640b31f8e728222c08f814a852","sha1":"73c0a0bfe3a1e44557a64de11ec548812ae51699","sha256":"08edfb9a5890e9cfb73421f555f19b5cdecefbb7fbd6f6dee368aa893b0800b8","sha512":"47489305d74b996ba935a2a18b8fd8ee53e7d582a84aaf498e74cdad8521bb25a16e73d5190972f0e1ddbc4e1c45c43d1d8dbe2694cd82afe8c853725953527b","ssdeep":"","tlshash":"2c415e0a13ee148491b878bb36e8bfc151cdcbc17c8bc8ca56ba79c44d64036e177e66","first_seen":"2025-07-28T03:34:54.566335Z","last_seen":"2026-06-30T09:34:04.174377Z","times_seen":40,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/js/toast.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /js/toast.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 21 Apr 2025 01:49:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 509\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"82082f0253fac00f65e4d3192ddd687a","sha1":"57d828bcdff0c56e7662e37fe9c05896c76ed8ed","sha256":"214e95fd2e4983ed796c5e2a05f5fd5714befba3ab59db2c233284708b2d104d","sha512":"6a067e5a9ec26f116ae6be81d930a47f3c05c1fd03508fd4f5de51d2f0661e78f4f1a7b284b14dfb97ff1bf302d91d0f85fa6a0b53c8bdd71aedb95cba963a60","ssdeep":"","tlshash":"624168b95db70c8991dbc0077bed7858741091ab0600a656f0fe483a6fddc9072cabf5","first_seen":"2024-08-20T10:07:04.102387Z","last_seen":"2026-05-20T17:38:06.693202Z","times_seen":16,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/fdbd3c5/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:21.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/fdbd3c5/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 18132\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"687f755f-46d4\"\r\nexpires: Fri, 01 Aug 2025 12:38:56 GMT\r\nlast-modified: Tue, 22 Jul 2025 11:26:23 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-22T12:38:56+00:00\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":111829,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d5f33646d918617e04a529d64129ca0","sha1":"6bc232bcfac362a25a7ecc6704b308cbe1d41721","sha256":"9d8959dc6f940e4d26316e2834f24816b9928452968f51fb3b25da3edc10803b","sha512":"d1d110050e1ebbe2f1a041998e24867ba229f101aa6cc007bc63bbb4707e64fbded2cbbaeaaa448ec8446072967190032761360faeeae4e8d3a0c8a61f697305","ssdeep":"1536:EL5ITKxyU606Arh8DuOyj2v2KSLpxy76+6Y+Rlu4gUw69FQPQRiDOpOSDi60c6oH:kR6YDJ/9","tlshash":"45b3b75aead2953ce91e941ac9c5aa3ca63dd102cf330dbff344e3e547ca6e21276405","first_seen":"2025-07-22T14:13:08.706395Z","last_seen":"2025-08-04T15:30:02.107824Z","times_seen":171,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Public+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026ampdisplay=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Public+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026ampdisplay=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1094,"data":"{\"service\":\"track\",\"name\":\"page_loaded\",\"data\":{},\"projectId\":1001,\"uid\":\"7355440390553669632\",\"user\":{\"td\":354,\"ts\":1753673647093,\"tz\":\"GMT\",\"tzo\":0},\"page\":{\"title\":\"MOSTBET\",\"path\":\"/sport/casino/bd/asialuckywheel/\",\"ref\":\"\",\"url\":\"https://colpcg9mb.com/sport/casino/bd/asialuckywheel/?cid=6882698011\u0026pid=126904\u0026sip=0\u0026h=wowluckycasino.com\u0026mphost=mostbet.partners\",\"query\":\"?cid=6882698011\u0026pid=126904\u0026sip=0\u0026h=wowluckycasino.com\u0026mphost=mostbet.partners\",\"domain\":\"colpcg9mb.com\",\"scheme\":\"https\"},\"sess\":{\"pageNum\":0,\"eventNum\":1,\"type\":\"partner\",\"marks\":{\"cid\":\"6882698011\",\"pid\":\"126904\"},\"marksHash\":\"268862710\",\"hasMarks\":true,\"refhost\":\"\",\"num\":1,\"start\":1753673647089},\"char\":{\"ls\":true,\"pr\":true,\"ae\":true,\"sb\":true,\"wp\":false},\"browser\":{\"if1\":0,\"if2\":0,\"uad\":{},\"nc\":{},\"ne\":{\"hc\":48},\"nb\":{},\"w\":1280,\"h\":1024,\"tw\":1280,\"th\":1024,\"aw\":1280,\"ah\":1024,\"sopr\":1000,\"soa\":-1,\"sot\":\"landscape-primary\",\"plt\":\"Win32\",\"prd\":\"Gecko\"},\"lib\":{\"id\":\"web-sdk\",\"v\":5001000,\"sv\":4001000,\"st\":1753673646950},\"perf\":{\"cs\":0,\"ce\":75,\"scs\":31,\"rqs\":76,\"rss\":106,\"rse\":107,\"dl\":246,\"di\":293,\"dc\":1189}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 28 Jul 2025 03:34:19 GMT\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":12065,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"45388d3ed4777a5d2681903931e0359b","sha1":"059ffb5bdc8685ab860842e952e355a173ab6282","sha256":"c8169007b65dc77bdf4b6d748c4774253c3db88977fdb48d2895660aa18a2afb","sha512":"7c72e458e139b39ffc09e81168e606b06ffa15b8db3c25a43a05c63853046a0b740a64bd7c70766f71a0dd44c02ae0ac9d93e7c38bf49e251512c01c4c296b46","ssdeep":"192:calbglbmDlbSakbgkbmDkbSaPbgPbmDPbSa2bg2bmD2bSapbgpbmDpbSRbUb2ubm:caNgNwNSagggwgSajgjwjSaGgGwGSa5w","tlshash":"d0429c92042bb61097872dc623ce7d328e8fa254744984387ffe1d89ed65d396330b6e","first_seen":"2025-06-29T12:22:47.725432Z","last_seen":"2025-09-15T00:53:01.543525Z","times_seen":7,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":148,"dns":1,"connect":8,"send":0,"wait":24,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/perfect-scrollbar/perfect-scrollbar.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/perfect-scrollbar/perfect-scrollbar.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 823\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4195,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"d098e6493dec6424302e8cbe17be78a2","sha1":"7bd9cb9cb091824bdd1d7c2bbf82099e863c5e64","sha256":"0a8cf49253511ce5ae0de55d4430eca32f27a6a152cae0255ea0d4df4f07ccdb","sha512":"0a15f998d4fc303da69c099fa30621743d70073c72c208fd809417eb1858083e1244a96b1df71fdf091f778f160838518ac60cc33a6464b0c31347376267c3ef","ssdeep":"48:5RvZe15MZeZjZSVy5sI9pJBS97wv344SwK3y3Z:5RheEeVZSE5x9pi97wP4lwQy3Z","tlshash":"80818fff679516c1320b564b1fafaa86732f00c37a4bc96db59720c867893de2d72144","first_seen":"2025-07-28T03:34:54.570796Z","last_seen":"2026-06-30T09:34:04.170545Z","times_seen":20,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/css/core.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/css/core.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":373,"data":"{\"events\":[{\"schema_id\":\"trekkie_asset_context/1.1\",\"payload\":{\"build_id\":\"e4c75a3e7743d4afe93b8548d333a7bb77989ac7\",\"page_url\":\"https://www.tritanbp.co.uk/\",\"app_name\":\"storefront\",\"shop_id\":94206427400,\"monorail_region\":\"shop_domain\",\"source\":\"trekkie-storefront-renderer\"},\"metadata\":{\"event_created_at_ms\":1753673655538}}],\"metadata\":{\"event_sent_at_ms\":1753673656907}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 83246\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":818223,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (879)","md5":"d5a54154b5bce63993ee0a701be0d879","sha1":"f9c18c06f361fbd4b73a3fdff315536fc858827e","sha256":"fadf42b9203adfa328a975be5b57210197cc364a2375f0ef38104446bb40d73a","sha512":"9344873c24898a033a0d1f13fb821109d5b2208879024733e565cb2f45c17379fafe03f8e5be19dfde08d651911f4f4d91f631bb7f73fad65756e7bfcf8b3bf4","ssdeep":"24576:Jvmoeor3xAi2/rb39HhbGocrzcqZu9MxbYl:e","tlshash":"0c056358f8f13d783cab5299659abee57fbc2086ca04cd75b4d332148f8d3e528a19c4","first_seen":"2025-06-27T18:03:56.144692Z","last_seen":"2026-07-12T06:07:07.241499Z","times_seen":16,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/OnhqtfiocM","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/OnhqtfiocM HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":796,"data":"{\"service\":\"track\",\"name\":\"page\",\"data\":{\"page_type\":\"preland\"},\"projectId\":1001,\"uid\":\"7355440391283277824\",\"user\":{\"ts\":1753673647060,\"tz\":\"GMT\",\"tzo\":0},\"page\":{\"title\":\"MOSTBET\",\"ref\":\"\",\"url\":\"https://colpcg9mb.com/sport/casino/bd/asialuckywheel/?cid=6882698011\u0026pid=126904\u0026sip=0\u0026h=wowluckycasino.com\u0026mphost=mostbet.partners\"},\"sess\":{\"pageNum\":1,\"eventNum\":0,\"type\":\"direct\",\"marks\":{},\"hasMarks\":false,\"num\":1,\"start\":1753673647041},\"char\":{\"ls\":true,\"pr\":true,\"ae\":true,\"sb\":true,\"wp\":false},\"browser\":{\"if1\":0,\"if2\":0,\"w\":1280,\"h\":1024,\"tw\":1280,\"th\":1024,\"aw\":1280,\"ah\":1024,\"sopr\":1000,\"soa\":-1,\"sot\":\"landscape-primary\",\"plt\":\"Win32\",\"prd\":\"Gecko\"},\"lib\":{\"id\":\"web-sdk\",\"v\":4001000,\"sv\":4000000},\"perf\":{\"cs\":0,\"ce\":75,\"scs\":31,\"rqs\":76,\"rss\":106,\"rse\":107,\"dl\":246,\"di\":293,\"dc\":-1}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6140\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"687f7560-17fc\"\r\nexpires: Sat, 26 Jul 2025 14:15:36 GMT\r\nlast-modified: Tue, 22 Jul 2025 11:26:24 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-28T03:29:42+00:00\r\nx-node: m9-up-gc234\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":17862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17862), with no line terminators","md5":"42161c1f2651008d8543023b2dd23cf3","sha1":"6a0a0337bcb774b1d9192e5092deef804c4f21e2","sha256":"25b93b23be4c33e05dd1cdb14dd4f4c3645ba3706e26d2fe50103dec4e71aab1","sha512":"174ff37b20a85bacda1d87261ec2ac49291ec0235fc2089633375131d88e255f65076f937fbf7f927b0b082067d690561b343a85b8c9064e35691c9533b93e5e","ssdeep":"384:boUJJ1QY4mmPY0SrAN3/yMiqwIlEeJMz8P08wIbqWcPFv6:f3yoAx/9DPpWWcPp6","tlshash":"5c822a6e7959b93743f208b9606f6209723545ebd404c920a401e98d7db8edf827fef8","first_seen":"2025-07-17T13:53:37.853373Z","last_seen":"2025-08-04T14:32:49.974498Z","times_seen":221,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":321,"dns":46,"connect":83,"send":0,"wait":85,"receive":1,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/popper/popper.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/popper/popper.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7755\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22538,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22538), with no line terminators","md5":"055979b9a405dfad46313d55b9539765","sha1":"dc79a87ba6df78fd373fa4140821867e6eda2132","sha256":"379d72df78e67dd1fdc5caaed228ba8199771b609f13b47d3bbd5956d4197e73","sha512":"94fadf079e717c5cd97c8cacaf3e75bbf0969fd699f40cd435bab3f22e388a1be41f9383d8da62e115c2c35525ac3916c8152336ed2410420ac45c1ea134a61d","ssdeep":"384:Kp8ijckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZyNB:Zxmemg3igs69TYf/pd1Nn1uwXSg3MI/X","tlshash":"c5a2d6dc79a4f4e2127b92b6803f411fb2379520318ee500b655d6d92c74daaa23bd3e","first_seen":"2025-06-27T18:03:56.141249Z","last_seen":"2026-07-12T06:07:07.236839Z","times_seen":29,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/@algolia/autocomplete-js.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/@algolia/autocomplete-js.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40291\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":282401,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"baad4a30f53da7f6495392685a10b9df","sha1":"39f967f79586d07ae4970d5622d1a1788fda9a84","sha256":"93179e01f872d006ee0ddc9f739fcbf6c43362f4f72474499c7368aec8568702","sha512":"7dd10f135daa6e0ceb926a10aca0b7024b464563288934867f6e70dcad04754b3f6633fce9d3423c2be2f5c34a457a656a80662ac8c7b17c15ceff3607dccd27","ssdeep":"1536:vGWDiXWjIWkaWkSIkZWtu+0wWoWHWTN1T3W6WoWdTWb7tWAmpHcFaFFbGFW3FhWP:vzt5uHS1TrhazrkL","tlshash":"ad54e8877c6075330f91b5b6a7afc094b17db21020386090fc1cd9a957b6a2587fe9ee","first_seen":"2025-06-27T18:03:56.129488Z","last_seen":"2026-07-12T06:07:07.238857Z","times_seen":20,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/i18n/i18n.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/i18n/i18n.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25747\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":123195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fbf1d6bb2e4369e67f6fbc6d4cd26609","sha1":"c5e175335d1c543bf8daad9a108dfb62ce967ef8","sha256":"4d04bc8ba4cda9def1b7ad7197109bceacb1a8c4302713fcf0823fb9e8aa4867","sha512":"c4a0b01da45fe889236dc637c8cf218758b6d8029a2ed72636e87d73b083adba36e91a0a1d313498a3875e516cc33762d8fbbc7fbedf6dbe7392584cbbeaed15","ssdeep":"1536:aBCe6tTiRMA3RW5iJ/AOKU9o8UQFM2Ueb/ueCvNLacwa9Ajpg4IkS3Uzd+siFy6h:TtTCN/AXkb/ueCFLa38","tlshash":"6fc3c80b215a623146a37fe95ee28405b63cf72520359169be1c67d363c2928c3e7fbd","first_seen":"2025-07-28T03:34:54.578772Z","last_seen":"2026-06-18T11:13:21.932012Z","times_seen":9,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/js/menu.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/js/menu.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8144\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41853,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41853), with no line terminators","md5":"2dca037362bfaee0eff966bea0ec3f78","sha1":"b0be106b9cab134c5d800208921e2b0223405135","sha256":"cdb3b53eac336d01f12beac0ba923b87cb58e4aca7e7851e9dac4310b8a961d3","sha512":"8bbde8d6a7a449805ecabd232d064334059c412f14c33e97aeeb0d741ad9bf0a812a4ec4ab72c8a23e3a451524fcec60bd6c2b3078ce01d0653f9eeda7ed1b94","ssdeep":"768:rDbCIHaxRPMBomSmipURoybw+EjZ1upK8Feo1g8YkNE5o:1iSaHk2i","tlshash":"1f13718b615835ba56537faa0bfa805eb2713148c52381283d6cf9cf139d85583f6bf8","first_seen":"2025-07-28T03:34:54.579766Z","last_seen":"2026-05-14T18:12:08.462769Z","times_seen":12,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/user/trx/log","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-28T03:34:17.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /user/trx/log HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://financial-freedom.top/login.html\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: laravel_session=eyJpdiI6Ik9pRWlSdlZsMDk1ODllTFRHcDBJdnc9PSIsInZhbHVlIjoiR0d3bW5SQlc4blZEc2JXY0ZZaDlHRzRDR2IzVzRWa3ZzV1RUWEFuT1dQc251bmd6bmJmcUQ2TTBDSks3Q2ZzY3A4NjBmanhKekN0NW9ITWphRlFCaGlXdDNZMXlQN0JEUDVLVEQ1K1R4T0ZXeHVaVVVVTDcveHFsbUN1eU5FcGkiLCJtYWMiOiJkNjcxZDA1YzdmNTZiZDU0OGRlNTc5NjE5MDQwNmRhZjE4ZWY2MmM5MjAwOWNmMWEyMjE4ZjhkY2QxMjUyZDFiIn0%3D; expires=Mon, 28-Jul-2025 05:34:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\nerWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D; expires=Mon, 28-Jul-2025 05:34:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 166\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 28 Jul 2025 03:34:18 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8486,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T14:17:53.510878Z","times_seen":17214514,"resource_available":true,"data":null}},"time_used":1419,"timings":{"blocked":609,"dns":400,"connect":97,"send":0,"wait":200,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/node-waves/node-waves.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/node-waves/node-waves.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 931\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4658,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"091378612beaf25ca47b8899fe615ee5","sha1":"db3a0cbdd3eecae8e43d3699315bbd916c50543e","sha256":"339ff2de49b4bfb3ee17c26838f01a315e101fd449aae0506ff8c1e5febab44a","sha512":"98e5634cb0f4474494a9b2a98ba8bcaa4ac7e88eaba18a48d3f7845d183be5d33ef3a64fb67044690710b88c5aa034a1afdb666727fce1b362486e97b44d7453","ssdeep":"96:C2E+yMybypyWaoJGrSqEq/qRqUckf9iXem:C2E5XGsWaoJGrVTC4UWXem","tlshash":"16a18a2c86c21f00b01fc6de46c3dae5bfb8d5405503992f62537869ef8eaced359a42","first_seen":"2025-06-27T18:03:56.117872Z","last_seen":"2026-07-12T06:07:07.254261Z","times_seen":38,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:22.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":188,"data":"{\"schema_id\":\"privacy_banner_initialized/1.0\",\"payload\":{\"shop_permanent_domain\":\"www.tritanbp.co.uk\",\"session_token\":\"2dfe49b7-94d7-48af-b676-3e4ccd0b5048\",\"regulation\":\"CMP\",\"path\":\"/\"}}"}},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6878cbb2-16b0\"\r\nexpires: Thu, 21 Aug 2025 10:24:26 GMT\r\nlast-modified: Thu, 17 Jul 2025 10:08:50 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-22T10:24:26+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-13T06:38:47.322204Z","times_seen":16497,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/js/pages-auth.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/js/pages-auth.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 824\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f4b043e1b886e67ac863edece48f9e6e","sha1":"9856e522f2f214159a8344c4d7ccac8f7a33c9b2","sha256":"b8c484601e89f23563ece668d67829fb8eecf05e8c8820d796143e83991d26ec","sha512":"41136e58fa5b25bc9386420b6ccd191d18da0d6e306f33319d343e289676a82af308c0459854ed9148255139d79cba0c9861c2cec1078deaf56f46862ddbebdc","ssdeep":"","tlshash":"6d71cb9a98f108560dd775bf658a7281b2b280eb3c08bc2b3c8c6605af5ed5c06f7791","first_seen":"2025-07-28T03:34:54.585198Z","last_seen":"2026-06-14T11:27:25.895909Z","times_seen":10,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-2.jivosite.com/widget/status/2638266/OnhqtfiocM?rnd=0.7005238495168529","fqdn":"node-ya-2.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.45.40","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2638266/OnhqtfiocM?rnd=0.7005238495168529 HTTP/1.1\r\nHost: node-ya-2.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://financial-freedom.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://financial-freedom.top\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 155\r\ndate: Mon, 28 Jul 2025 03:34:20 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e20565175e39b9b8749a5152dcddc6f0","sha1":"b3e4219f05db4bc89c13aebf23c7d8c58b5841df","sha256":"3d963f4543176782540d87fb45caa7b3b52603863e6612065bdb806c6dd90552","sha512":"1c51686e043539428070839e88ddcec2b2c90369a48d8f14f93e76dfad5459f7154f6d0008f2ddb817e9308bab14c3a84af4995857272bffce82193e5cc8ddd2","ssdeep":"","tlshash":"43c08c29043968f80680caa4b08fab0f8929027218c19b1cf286a500f0efaa0c14a013","first_seen":"2025-07-28T03:34:54.586737Z","last_seen":"2025-07-28T03:34:54.586737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":161,"dns":46,"connect":54,"send":0,"wait":53,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/json/locales/en.json","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/json/locales/en.json HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://financial-freedom.top/login.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1557\r\ndate: Mon, 28 Jul 2025 03:34:20 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5117,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d44d94043bf7b5f05e6b4399f43885ec","sha1":"a65e6465f3081db2a8c475b7c7a95d55dde63b90","sha256":"c846a6e8e63debe21e825f57e468d1e74becab8cf844c88593f5e09c758f6cbd","sha512":"911a5394dda0bb00f7e72ac87661af6172c01dd24ed59645e52c86f7dbaba813bc4862d2baac270258595cd67b5b49afe7a8674cead7acabe9ff6947a7dcd538","ssdeep":"96:eBTTuNuYwo94dhi20CGCJPFDblb5XFnHbkiUi0jtibHqf/:eBTTuN21dhi2FX+i2tief/","tlshash":"07b1fd385a980af71aca79142cf72e07b6654e730680bc2e679b414c04ae57f22f775d","first_seen":"2025-07-28T03:34:54.587836Z","last_seen":"2026-06-18T11:13:21.895578Z","times_seen":11,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/node-waves/node-waves.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/node-waves/node-waves.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5308\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22009,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22009), with no line terminators","md5":"62e767d92f445b4634b8f852c3f1ef01","sha1":"0b6913b3bdd00def2240f5f74f4b349138cb3a66","sha256":"e7a6650299fbe322d58da5de062e6d8fc1993c2b9be5752df4b0ca8f60dfb104","sha512":"4296dc95935c3851961dd07381df4f66d82432af4a32e833a63aff978434a94bae3847270335463e38c927af92265eae1cf9139b963ef0b056a7b8b0b9e7bfbb","ssdeep":"384:ItjxAXmtKcMgQ2yGcY7723jMnew95gIO5h7y1u3Ks8kPxu3KfwTQ0RYy3KisyD3X:XVT2lKMneOIz7y1u3Ks8Eu3KfwTQ0qy1","tlshash":"75a2934f75b025320e937fae83ef8088327571581122d510bd4da6a727a3c39d6f67ea","first_seen":"2025-06-27T18:03:56.137105Z","last_seen":"2026-07-12T06:07:07.246337Z","times_seen":31,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/perfect-scrollbar/perfect-scrollbar.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/perfect-scrollbar/perfect-scrollbar.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1561,"data":"{\"metadata\":{\"event_sent_at_ms\":1753673657059},\"events\":[{\"schema_id\":\"web_pixels_manager_load/3.1\",\"payload\":{\"version\":\"0.0.475\",\"bundle_target\":\"modern\",\"page_url\":\"https://www.tritanbp.co.uk/\",\"status\":\"loaded\",\"surface\":\"storefront-renderer\"},\"metadata\":{\"event_created_at_ms\":1753673655682}},{\"schema_id\":\"web_pixels_manager_init/3.2\",\"payload\":{\"version\":\"0.0.475\",\"bundle_target\":\"modern\",\"page_url\":\"https://www.tritanbp.co.uk/\",\"shop_id\":94206427400,\"surface\":\"storefront-renderer\",\"status\":\"initialized\",\"user_can_be_tracked\":\"true\"},\"metadata\":{\"event_created_at_ms\":1753673656032}},{\"schema_id\":\"web_pixels_manager_event_publish/1.6\",\"payload\":{\"version\":\"0.0.475\",\"bundle_target\":\"modern\",\"page_url\":\"https://www.tritanbp.co.uk/\",\"shop_id\":94206427400,\"surface\":\"storefront-renderer\",\"event_name\":\"page_viewed\",\"event_type\":\"standard\",\"user_can_be_tracked\":\"true\",\"event_id\":\"sh-4f188b9e-CD0E-4586-B7AB-E617528C7A4F\"},\"metadata\":{\"event_created_at_ms\":1753673656036}},{\"schema_id\":\"web_pixels_manager_pixel_register/3.8\",\"payload\":{\"version\":\"0.0.475\",\"page_url\":\"https://www.tritanbp.co.uk/\",\"shop_id\":94206427400,\"surface\":\"storefront-renderer\",\"pixel_id\":\"shopify-custom-pixel\",\"pixel_app_id\":\"shopify-pixel\",\"pixel_source\":\"CUSTOM\",\"pixel_runtime_context\":\"LAX\",\"pixel_script_version\":\"0440\",\"pixel_event_schema_version\":\"v1\",\"status\":\"registered\",\"user_can_be_tracked\":\"true\",\"bundle_target\":\"modern\",\"duration\":1003,\"start_time\":9413,\"session_id\":\"sh-4f1888e0-88C0-4D4C-D760-CB14508D964A\"},\"metadata\":{\"event_created_at_ms\":1753673657050}}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8818\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43130,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (43130), with no line terminators","md5":"2fac7a37cb2bc314946fe38fd595eb2e","sha1":"49f1ed8fed2e2a4354e1213bf2e3d9820e5630e9","sha256":"0848cb31edffeb3fc2530aa8bc09f89c497ac5eb5e9798d4574f9f47f71401bf","sha512":"75aa06dc41b99cde4e6b4bf3545f554330f87b734dddda0d28f4a1183d43325f07fccf3e9d9544568102b193e0b586bfb874704be0a71834504835dcef40974e","ssdeep":"768:utj8ldxaWXgBeEKeXWS3xumTw7evI9at1BxW3fR:TldxaUgUEKeMi8E1Bc","tlshash":"ce13110e3660207546ef7e9edfdf828d32397246022791d47c5c8e6627a4a7493a0fbd","first_seen":"2025-07-28T03:34:54.590238Z","last_seen":"2026-06-20T04:09:30.1775Z","times_seen":18,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/@form-validation/popular.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/@form-validation/popular.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 49504\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":331741,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"42c4b5aec58e999b4f87cc3c08ae0975","sha1":"bed1401bc9798425b801dbdcd79299de53c21898","sha256":"044d85498f69975a74827f79763625d887a846fdf06733fcb0c71a77e4c54326","sha512":"0f39ad1b4975c2ae67fdaf09d92767d5eeac4513bb49f9412db88663b4260a3ef6fdd3ad55219a2c431fec5941822c9ff85a3bece1a1c7289f8d4e075ce36dc0","ssdeep":"6144:mdtdb862gRgd5GdsyOud9KldEkdYmdJZdlWd4IiZUPmWyGi6dqa0FS+CG3Vdhgms:md7b862gRS5YsyJ9KDEOY4JPlI4IiZUF","tlshash":"ad64818939f5eb345f4228f655af808b72a960048c15c054bc6cf0d117afeb5d7abbb8","first_seen":"2025-07-28T03:34:54.591511Z","last_seen":"2026-06-18T11:13:21.911731Z","times_seen":13,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:43:39 GMT","end":"Fri, 10 Oct 2025 03:43:37 GMT"},"fingerprint":{"sha1":"C1:BD:D6:84:57:89:FE:9E:6D:F9:1F:26:76:1D:7C:45:E8:23:F6:35","sha256":"42:6A:B9:E6:CC:53:CB:12:2A:7A:43:B8:3D:90:FC:5E:4D:CA:A2:E0:3D:B4:2E:38:10:A6:6F:26:86:7F:D5:A0"}}},"request":{"raw":"GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"4fbd15cb6047af93373f4f895639c8bf\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 12/09/2024 23:20:39\r\ncdn-proxyver: 1.06\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1075\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 53714124a333a60e4decd54c47ab86ab\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 772588\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 966151f269785696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27466,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27303)","md5":"4fbd15cb6047af93373f4f895639c8bf","sha1":"12d6861075de8e293265ff6ff03b1f3adcb44c76","sha256":"ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5","sha512":"f8be32cba15170319b5c9f663c6f0c4ffdd4083cf047d80f7b214d302b489eca25fbee66ddb9366d758a7598efc9b9a886b02c9f751ae71f207cb9db1356243a","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T","tlshash":"3bc230f8e54c01d66731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-07-13T14:45:25.31713Z","times_seen":40948,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/publicsans/v20/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/publicsans/v20/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financial-freedom.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26832\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 10:28:27 GMT\r\nexpires: Fri, 24 Jul 2026 10:28:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 320753\r\nlast-modified: Wed, 28 May 2025 17:32:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":26832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26832, version 1.0","md5":"e4c9b081863ae33b18b6eb412185c13c","sha1":"fd76a14fbbcac582cfb04514f3d04e7594a975b5","sha256":"5ed4d31c988e73b258894244f209069ebe77dc7e564861954b21198b6de90d68","sha512":"a81562ce1e80596f124a86091aa0043a2117324070536ae34bbe888130cfd824751091e38d513b1514c8902d02587d848d7bdce5cd676092cda91d690cc216c8","ssdeep":"768:G942ZYV3MrL60NUBN4MHVss4fRitIWAQoRvTu:GPLvUB16ZfRiuWMRv6","tlshash":"fec2f1577a35e100f0546c79d1eb4db1e0d7a8287408f7046f998c53832fba9acd6ba7","first_seen":"2024-10-01T06:40:49Z","last_seen":"2026-07-13T11:41:54.81219Z","times_seen":6840,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":120,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/js/helpers.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/js/helpers.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10297\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48058,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48058), with no line terminators","md5":"b378b3d398a23a351692eee6c495f087","sha1":"7773526ad97aaaf25d9704f66798f500c201273c","sha256":"9cc42458207f84f16a27bb87f5e15eb6e8d7eb9b4e9413727fdcf600e24845c0","sha512":"7cb691d095d33ec967448f5627652bd709fa8532996afcc103e9610e50b996c79f630c4f160ef9686aca0feb6d3998de4afb89837abdd61f7dfdb3309f66701e","ssdeep":"768:rCFCIHOmBKcM92T+/5gl10c7jcwC5BaNyf53o:KT+/iQ55BCj","tlshash":"5c23951735543cb2895b7bba5bfea2c5713072040126c111bc1eb9df1b6c92a83a6efd","first_seen":"2025-06-27T18:03:56.131795Z","last_seen":"2026-07-12T06:07:07.252635Z","times_seen":22,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/images/logoIcon/logo.png","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Jul 2025 23:22:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 310297\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":310297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"dc086277c37b2c1ce7ede29ba4142fc8","sha1":"cb7aea330ab1c1c248296401547a2f6d3ea62578","sha256":"9a3d2a64e81689a1fcf25a8a868dabe99f0a63a626b28337de060146ae6d5088","sha512":"5021826b86143ab4ace4ebd964d27ed8c9732f23b4b7a7ce82d2bfca5c8cc06053848b7a630326b5db1dc4e4edca1a3c6acf95b65dcb7e6b8af8d35ae4806b83","ssdeep":"6144:GahFsqVE/T4ErPW5nONSZ5EoximK6wrREtonHVRxDNGWmVzsrsmbqB/QG3+:3hFsWE/TZInahNrREt+HVTNGW+srssBP","tlshash":"f064125fc17f5827cccea0347f8f6a4b7a29949b47b4d13463154a7082b0be896913eb","first_seen":"2025-07-28T03:34:54.595142Z","last_seen":"2025-07-28T03:34:54.595142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/css/pages/page-auth.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/css/pages/page-auth.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1094\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (408)","md5":"1b8ec5d69868418fe880d71c809d907e","sha1":"9ee6f03cf89b44f5c2123ee2254a747c028207eb","sha256":"5aec1c057a4117b67de2459fed9c81d59da96922effe2edad9a6dc3e69a14e16","sha512":"4a20b2f03f8851918c249472ab507935a26cbd81b20e9d77f8f8d04dac2bfc01fc345e80f7c6c122675acb3df6ca5ad3f18e040314f129ffa777ba70626b9d3a","ssdeep":"96:fSZwSx1E3KYAPGuYOFQE6PQ7Gu5h4gx6o/wFOi+WT:fSZwSx1E3KYAPGuhSE6PQyu5l6o/yfT","tlshash":"1a910ec7a3e01c6ed3c753ba535826c0a337c9a80f8c88b490417a9c5bcc16da7a73d6","first_seen":"2025-07-28T03:34:54.596418Z","last_seen":"2026-06-30T09:34:04.164394Z","times_seen":14,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/OnhqtfiocM","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/OnhqtfiocM HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://financial-freedom.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 683\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Mon, 28 Jul 2025 05:34:20 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc67\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"d3ea213f62695a227946ea36057056d4","sha1":"66c1fbff0e68c0e3c7bb3dc91e7c5932da6c2ad3","sha256":"ff38f8728aa150afe8a834ff2173f21d047a72fe553105c5dd3bd0c55d599675","sha512":"070f2ed5bd1d3ffdc89663657baa6b050ecd177b6707c0529e4767100021dc10a249ac40ecb6d9496c007f9001ef759809bf40836e0a00cbf77015e8ff6cc43c","ssdeep":"","tlshash":"862115b24d5c54730981bec7532bee03253c86a6fe814e74db949d2c205b3d5131f64a","first_seen":"2025-07-28T03:34:54.59753Z","last_seen":"2025-07-28T03:34:54.59753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":155,"dns":4,"connect":71,"send":0,"wait":297,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/js/bootstrap.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/js/bootstrap.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":328,"data":"{\"metadata\":{\"event_sent_at_ms\":1753673654632},\"events\":[{\"schema_id\":\"web_pixels_manager_load/3.1\",\"payload\":{\"version\":\"4111f818w7fce5ee7p4b7828e0m4033d426\",\"bundle_target\":\"modern\",\"page_url\":\"https://www.tritanbp.co.uk/\",\"status\":\"loading\",\"surface\":\"storefront-renderer\"},\"metadata\":{\"event_created_at_ms\":1753673654632}}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 54878\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":335401,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"ea7e12c9223cc15a1e0037105e7965d3","sha1":"3900f86aea4b9ddf198cbdad78b21b8b76d2fab6","sha256":"9a2dec52e59c068c5bf41fb3be9425ed45f324ee8d89ff393097b16fe1f8f395","sha512":"b1a1db31d76941d143ffa41785dc4d74e027255ccd687c8332a8572a11e5a551d2421cb1a0294cadf9d58dd4dab7cc739e57b9d8739d650c380e15768a8ff637","ssdeep":"3072:/iTkmaIcJxC63Pk4BojCMxcUsd8H/9qjP7nLY7MMZsH2pvSnOyS1GZYYJ+0y:/iTyjgICZsH2pKnOyS1GZNJ+3","tlshash":"c264b65b3d952c734a1affbe976fc15af1aa72000059e4003c9da58e177186882fe6fd","first_seen":"2025-06-27T18:03:56.124497Z","last_seen":"2026-07-12T06:07:07.243521Z","times_seen":21,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/publicsans/v20/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/publicsans/v20/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financial-freedom.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26832\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 10:28:27 GMT\r\nexpires: Fri, 24 Jul 2026 10:28:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 320753\r\nlast-modified: Wed, 28 May 2025 17:32:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":26832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26832, version 1.0","md5":"e4c9b081863ae33b18b6eb412185c13c","sha1":"fd76a14fbbcac582cfb04514f3d04e7594a975b5","sha256":"5ed4d31c988e73b258894244f209069ebe77dc7e564861954b21198b6de90d68","sha512":"a81562ce1e80596f124a86091aa0043a2117324070536ae34bbe888130cfd824751091e38d513b1514c8902d02587d848d7bdce5cd676092cda91d690cc216c8","ssdeep":"768:G942ZYV3MrL60NUBN4MHVss4fRitIWAQoRvTu:GPLvUB16ZfRiuWMRv6","tlshash":"fec2f1577a35e100f0546c79d1eb4db1e0d7a8287408f7046f998c53832fba9acd6ba7","first_seen":"2024-10-01T06:40:49Z","last_seen":"2026-07-13T11:41:54.81219Z","times_seen":6840,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":56,"dns":0,"connect":17,"send":0,"wait":8,"receive":9,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/img/favicon/favicon.ico","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:20.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/img/favicon/favicon.ico HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:20 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1704\r\ndate: Mon, 28 Jul 2025 03:34:20 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"ba3a7ed237ed9ed045ca35ac46e184a1","sha1":"b642cb41d5a08f7e983787c6721f38e78896405e","sha256":"fd7b39f702227b69ee9309dd32eda3d524fe0cbbf9dc4f9dea5a3d3eb352c282","sha512":"8534e273fc588651ab1e23333ca92a88f8fcad63e36b579bf5f9532661456b1e51732b023a607236cd56235361d52bfc4f8fae618ab37536e1d42498e7d3b9bf","ssdeep":"48:k0D1bqnWJ4hxHSWdqXa9n8Q/lKlR0BPvjdC5pu1ONA:kubqWJlmOQsla3w541O6","tlshash":"0cb133d3484bc215c5ae2c71d8eb0df742f39e70d55646438908beaab7fb3962462b03","first_seen":"2023-05-24T11:09:49Z","last_seen":"2026-06-30T09:34:04.173767Z","times_seen":109,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:22.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"686fbf12-1396\"\r\nexpires: Tue, 12 Aug 2025 08:21:03 GMT\r\nlast-modified: Thu, 10 Jul 2025 13:24:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-13T08:21:03+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-13T06:38:47.316971Z","times_seen":16496,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/css/demo.css","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/css/demo.css HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=eyJpdiI6ImV6dU9EWHlXT0hXVGNSblhnSFptNFE9PSIsInZhbHVlIjoiSGwvMHBQN3pHaVpmVldtTklUMUNhcHJFelU1NmY3VW9WaHgwTzRrQThUWkpNbHN3SW9xN3BQakxrL3NDMjduM25BaWN5Ry9FbEJqc2toeTR6b2kyNTdRSTdkWkJRczBEcGVhNjJxSW9vUTVPWjVZaXNoc2JoZ1lOMkE0TG9MSW5INWo4NEhNaEx6ZSsxYWF3anprcFZaNzVoN05pTlMvYTlZeGNIN1AyQ2crbk5VbFdkZzFJeW80emMzMFdnS3JyYkY5cS8rOGNZMm13Tk9vTi9QWGg1RnZ5YVY5SHJqQlpWZW5rclN3QTdkbXVsVUMzS3JsZFVQUEYzYkFLeEZHbnVpeXAxY2pweFVjV0c1eHFZWmFlRWZhMjVtTFhrSlg3UWFhRERPbGN3QURZTlU1disxcU1GTG5jTDJobHAyVGRSRzJuaTlWSDV5dmY4QlMrR0RiNnJVU0d3UmM1amRwb1Y3bFhWTThoaHNqWjFoUm1PL1dsbE1lVk55aFI5WlFJMlYwMjE3dFFDS01WZWZ1TFo3TDhSWVJUMCtLa3FESzl1TDJvSXh2VW1wL2tWM3lrZnFTYWtQNUhnOW90cGFFd3ZTSGQ5OC9BNkpqVlNhMHZnamdsdU1SQm1uMmpkbFQ2UDNxVU84eXVVUWJHMkJGM2VjVWxRUnZaWS9YOE5ucTlIbFEyTERxUUZwcXJ2Yng2Y2ZKUlJNa1ZDSXJZRnZuYmhScUQyWEwrZis4PSIsIm1hYyI6ImFlNjJkMDFiMTdjZDAzMDNhYWMwZGY0N2M2N2I2Y2VlZjQwNDdkNzU5OTJlMzM0MWJhYjU4MTNiZTUyYmM4M2EifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 Aug 2025 03:34:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 727\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c2be0fdc040d16a6351118cdfdedaa6e","sha1":"66d1f7a7bc0e0be55f23be094b4194cfd5a71e08","sha256":"6727a2c5ff06ea0c1fb4c8be8c9c7874931a8d2f31792ddd512eccb3c7f3604b","sha512":"53006156104510097c063186d58b9def0264a13ae25e31472312104aa4952489309b98827f85b9955fb633417e69c57b3eda5164e348365c2502647e667e621e","ssdeep":"","tlshash":"fb51009122f27e54d15b6004558637f4fa6904a64b4fdc7a0f933318cb5db8b82f2ac4","first_seen":"2025-06-27T18:03:56.142153Z","last_seen":"2026-07-12T06:07:07.248834Z","times_seen":25,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/jquery/jquery.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/jquery/jquery.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 84876\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":322678,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ddfbae2cee7023f802c4c293c863397c","sha1":"478b9663a774c12ede4be15b043a60b9ddf0f22c","sha256":"c61e949e700dadd1135c962825c43bf4ba3dd54182e0fcf09d59ea6873875a2d","sha512":"42b958092e916228d11ea63d8a7c0b51272ef88a61ff51d9de989c17c2412c882d0f210331ac19e688479dee128d83ddba76f16d2cb3c8d6a5a2510d960ad2e4","ssdeep":"6144:PhraSFO/y8LFFgOaHkhbZbteK2tc5rDdIQVKYJWH9AkIvc/L6o67kJgVvnwn1K4k:49d4tc5rXYxH9AkIvc/L6Xfwn1KJJYoJ","tlshash":"a664c7a676fb023e4d36bbd9932f064ab53fdc98b1108562942ebc58141c904c6e7f7b","first_seen":"2025-06-27T18:03:56.146709Z","last_seen":"2026-06-20T04:09:30.160649Z","times_seen":19,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/fdbd3c5/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:21.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/fdbd3c5/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3320\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"687f7560-cf8\"\r\nlast-modified: Tue, 22 Jul 2025 11:26:24 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-27T12:39:03+00:00\r\nx-node: m9-up-gc69\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":10341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10314), with no line terminators","md5":"e60ac167f4e85b65f04da0b36a8ac856","sha1":"a2730d3f37f32c97d9b0e5111e5f56bead3b0594","sha256":"43bb3f703b2b5fb431053db80118aed4d0696388e4dd674fd37a5e61a6210253","sha512":"13d80f0b50698cf8ce0663e5d8e6a6b6d2e6d014f598456c0d4a42ddc264a0624bbbb34f58ead1257989222f345dc3a2ff88550c74d3aa1a632be4d1eaffe838","ssdeep":"192:23Vmk/7Obf14M6bOIpUTPqZ8Bi1FLeRJK:4VH7ObdFkOIphZ8w1FC7K","tlshash":"f722d71ee7017f360fa623c3704f7b5276a480e592646cb5d89c826953b9bc97227bcc","first_seen":"2025-07-17T13:53:37.799869Z","last_seen":"2025-08-08T13:39:12.624842Z","times_seen":366,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:22.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 28 Jul 2025 03:34:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"686fbf12-eb0\"\r\nexpires: Thu, 14 Aug 2025 09:20:28 GMT\r\nlast-modified: Thu, 10 Jul 2025 13:24:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 warcprox, 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-15T09:20:28+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-13T06:38:47.353908Z","times_seen":16496,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/vendor/libs/hammer/hammer.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/vendor/libs/hammer/hammer.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17938\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78429,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0184214e7505096807da9a6c6b977d68","sha1":"f34ddcf1156f99b93214e770d955ca1dcee35320","sha256":"82da855ea0e128cb1eed0b3be4e3932e8796331cf6960ae78afd1ce2af241e97","sha512":"ac86c994b492587ebb2d46c34a744fb27aaf96696d2ea211b7f1ee14353218ef53c3572f73466ede13438bd2629deca82f8f3c7716292cf8e8f0909827b00cfd","ssdeep":"1536:PV6OoSF+q5iL6TqITzWyBQPnlLf2gt94bpy7fdHKnWrGQOrHJiJVO9E4YDdjqh5S:MOt+q53LvWyBQPlLf2gt94bpy7fdzSQn","tlshash":"4c73a54b36ce217086563bb12fef4081617a755c1096c2447e2caae527d973ac3b9ff8","first_seen":"2025-07-28T03:34:54.606063Z","last_seen":"2026-06-18T11:13:21.889543Z","times_seen":15,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financial-freedom.top/assets/app/js/main.js","fqdn":"financial-freedom.top","domain":"financial-freedom.top","tld":"top"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financial-freedom.top/login.html","date":"2025-07-28T03:34:19.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financial-freedom.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 01:07:16 GMT","end":"Thu, 09 Oct 2025 01:07:15 GMT"},"fingerprint":{"sha1":"40:5D:E4:AE:F4:3E:82:FC:BD:9F:6F:C3:7D:F7:80:58:1A:80:72:CB","sha256":"7D:9B:E3:E8:E6:B5:E2:48:F6:1B:E5:07:E8:D5:9E:C4:46:AA:E8:BF:CB:6D:DE:AA:C5:07:B3:D2:69:D5:AE:9D"}}},"request":{"raw":"GET /assets/app/js/main.js HTTP/1.1\r\nHost: financial-freedom.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financial-freedom.top/login.html\r\nCookie: laravel_session=eyJpdiI6InhTSVRVZWRoZXhCSURjQ3c4emxVVWc9PSIsInZhbHVlIjoiZUZ5b1NLQ3pKZklMS2VZT2QrZzRQL1VSSHN5VXUrbWJLMkhKQnY4M3JLUkxvdU5QVWF0eCtnNi8vVHFpQmEveWJTVXdUcXVaUFc1eUtkQ01YbVBQelV4ZVp1RDRwSHFTdmpiR0NGWWQrVC9KdExVc0N3b3krZ2VRZEZxRUo0TEQiLCJtYWMiOiI3MWMwY2JiZjBlNDE4ODk2YzgwN2YxOGM0YWM4OGNmOWJjMzQ4OThlZTk1MTc1MTA3N2NlMmFhNWI3NDYwNDg3In0%3D; erWJDirkKhM1kWbbbyrDOcPJ8BIQTIKu4ieyHIds=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%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 17:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6348\r\ndate: Mon, 28 Jul 2025 03:34:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c30997c5134d63c0487eb2a492a52c13","sha1":"d5cc49138b221a4ff876a738fd07306d02efb690","sha256":"1d4174423cb17230614da5c31fbcb7e2d3255bafaf893c00db8902afa96c84b4","sha512":"96605f92cedc30d05c89a17bdd4dda33850b39e5e55889d3461c120baeeae49697546a8e35df6a8f915bfce5d33dcd2d228d2acb40a0bed42d695e5cff28de16","ssdeep":"384:2y85FGbGSMT4VWYZjhH5BAjRFzVFAEOREOJEOUw:2y85F1S1VWYZjhHUjRFz3Jr5w","tlshash":"f0c2741628f2213205b7b0be5b4fb348f5324107a209ed19799e43057fa096b96ffbd9","first_seen":"2025-07-28T03:34:54.607782Z","last_seen":"2026-06-20T04:09:30.167469Z","times_seen":14,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-28","alert":"Sinkholed","trigger":"financial-freedom.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}